$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa File: C4C7CC8E200611EB9EA5567DC4F9AE02.roa (raw, json) Hash identifier: A1lZD2jBTCuC7IXyjHpJkm8OqSxdqeHsbB/FOjZB23I= Subject key identifier: C5:D4:ED:B5:FF:3D:28:A4:6E:DD:1B:4C:CC:C6:4D:AF:92:F7:61:79 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C4A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa Signing time: Sun 26 May 2024 21:31:22 +0000 ROA not before: Sun 26 May 2024 21:31:22 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 132623 IP address blocks: 2406:840:fcc0::/44 maxlen: 48 2406:840:fef7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:22 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa29-c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:e0:9a:11:ab:57:65:fd:ba:53:78:eb:dd: c6:08:6d:4e:99:60:33:1b:a7:b2:1e:74:7e:fd:43: d9:a0:ff:f3:b4:91:7d:7b:2d:3b:1b:42:a7:4e:ae: 5d:d3:b5:cc:01:40:8a:b9:1b:cc:48:48:06:c6:52: f7:6f:a4:38:5d:12:64:ba:01:b8:46:94:55:5b:9c: bb:e4:32:d0:20:4b:29:79:87:33:ad:ea:df:c9:37: e6:b3:84:86:98:ea:da:b8:11:76:90:3c:99:fd:6b: cc:e0:65:a5:8e:e0:86:c6:0c:b5:3c:2c:f9:82:c2: 97:d8:75:f9:7a:6b:76:5d:ae:75:42:2e:a5:06:0e: 52:e6:1a:81:46:4e:89:df:ce:70:6b:41:86:46:46: d2:96:6b:4e:35:57:9a:fd:60:c8:5f:ac:df:16:bf: b7:3b:d0:aa:56:b0:c4:17:74:a0:41:bc:af:78:6e: d4:48:ef:4b:9a:7f:ee:fe:7b:07:40:aa:bf:bd:b8: 95:b4:a3:06:cd:d6:d7:1d:75:f7:d0:ee:df:af:70: 44:96:f0:01:d3:35:3b:e0:5a:18:12:30:da:12:4c: 10:c5:4d:26:21:ef:3d:d9:29:6d:16:e9:53:bb:d1: 45:7b:59:2a:98:38:19:c4:1a:82:6e:30:ab:e6:1a: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:ED:B5:FF:3D:28:A4:6E:DD:1B:4C:CC:C6:4D:AF:92:F7:61:79 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C4C7CC8E200611EB9EA5567DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fcc0::/44 2406:840:fef7::/48 Signature Algorithm: sha256WithRSAEncryption 79:b0:f8:fe:cd:97:f0:18:3c:5e:57:22:27:2f:5e:6e:32:d8: 0e:23:41:12:e1:47:4a:dc:44:29:bf:6b:30:0c:86:09:d8:a9: 30:28:9d:1b:93:25:de:ec:9a:c2:37:e1:a3:1f:57:5c:c7:79: 53:4d:96:8d:eb:00:f7:4c:8a:e4:c8:d5:21:2d:43:eb:e7:3b: 61:84:ab:31:a4:56:0a:50:73:fd:28:77:bc:ee:1e:0b:52:e7: 5d:3c:e0:72:0c:4b:6f:0f:aa:f7:24:c6:61:15:e5:72:9b:dc: c6:97:b2:ee:4c:71:90:81:c3:6c:a2:e4:cc:7d:22:21:46:8e: 71:e7:48:db:ca:4b:02:da:d0:a8:e1:bd:1e:0d:54:53:0a:dd: 58:59:68:db:71:d0:00:4d:1d:11:1a:a1:d4:19:16:d0:75:38: 1d:c7:37:02:1f:42:b1:a6:78:66:d9:ed:c7:2e:c9:e5:cf:a3: 72:34:18:45:79:b9:5c:86:19:31:f8:74:82:19:3d:eb:a8:e0: 7c:28:66:61:70:ed:52:7f:93:38:42:3e:21:5a:6f:a1:4f:3a: e2:fc:7f:ab:0a:72:db:51:3f:cc:01:00:92:d6:a5:00:20:6e: 82:a9:b1:44:43:f0:9b:b8:17:c4:a1:cb:0b:6c:cb:48:8c:cc: 88:6f:52:69 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTIyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWEyOS1jNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZLgmhGrV2X9ulN4693GCG1OmWAzG6eyHnR+/UPZoP/ztJF9ey07G0KnTq5d 07XMAUCKuRvMSEgGxlL3b6Q4XRJkugG4RpRVW5y75DLQIEspeYczrerfyTfms4SG mOrauBF2kDyZ/WvM4GWljuCGxgy1PCz5gsKX2HX5emt2Xa51Qi6lBg5S5hqBRk6J 385wa0GGRkbSlmtONVea/WDIX6zfFr+3O9CqVrDEF3SgQbyveG7USO9Lmn/u/nsH QKq/vbiVtKMGzdbXHXX30O7fr3BElvAB0zU74FoYEjDaEkwQxU0mIe892SltFulT u9FFe1kqmDgZxBqCbjCr5hpt5QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMXU7bX/ PSikbt0bTMzGTa+S92F5MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzRDN0NDOEUy MDA2MTFFQjlFQTU1NjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/MADBwAkBghA/vcwDQYJKoZIhvcNAQELBQADggEB AHmw+P7Nl/AYPF5XIicvXm4y2A4jQRLhR0rcRCm/azAMhgnYqTAonRuTJd7smsI3 4aMfV1zHeVNNlo3rAPdMiuTI1SEtQ+vnO2GEqzGkVgpQc/0od7zuHgtS51084HIM S28PqvckxmEV5XKb3MaXsu5McZCBw2yi5Mx9IiFGjnHnSNvKSwLa0KjhvR4NVFMK 3VhZaNtx0ABNHREaodQZFtB1OB3HNwIfQrGmeGbZ7ccuyeXPo3I0GEV5uVyGGTH4 dIIZPeuo4HwoZmFw7VJ/kzhCPiFab6FPOuL8f6sKcttRP8wBAJLWpQAgboKpsURD 8Ju4F8Shywtsy0iMzIhvUmk= -----END CERTIFICATE-----Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org