$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C7328AD4759611EE900E0A11C4F9AE02.roa File: C7328AD4759611EE900E0A11C4F9AE02.roa (raw, json) Hash identifier: q+JEfS5pJ2EWKPDKmQTLPtRg+AI1Qxk2+Ri+GTpIhv4= Subject key identifier: D5:64:A9:E6:95:0C:1D:CC:22:7E:48:29:D4:FB:1B:85:7E:6C:B8:37 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B5C Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C7328AD4759611EE900E0A11C4F9AE02.roa Signing time: Sat 28 Oct 2023 13:34:54 +0000 ROA not before: Sat 28 Oct 2023 13:34:54 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 198304 IP address blocks: 2406:840:e270::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Oct 28 13:34:54 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=653d0dfe-064c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:3e:7b:f9:a4:a2:b6:e0:69:ac:23:14:f9: 6e:43:4b:30:08:0b:7d:62:59:be:e8:6a:df:de:57: 11:f7:ac:0f:e0:ea:ff:91:4b:f2:6a:ce:c7:06:a0: fd:94:38:ae:02:82:43:c7:ba:31:83:e3:90:46:25: d6:57:3f:ce:18:26:8d:14:1a:1e:8d:fd:3c:d0:db: b1:e9:7a:1f:01:fb:92:c7:08:8e:e1:55:42:83:a0: ec:6d:5e:1c:6b:2b:89:9f:99:d2:2b:c1:e8:34:11: 89:c2:b4:77:16:01:af:96:70:03:51:30:b0:65:50: db:26:69:18:36:af:73:12:8f:e3:fe:59:2c:c4:5d: c2:8c:6c:f4:67:b6:b2:87:f5:50:e4:5c:f6:9f:4e: 8c:95:40:2c:9e:b9:27:be:39:34:0d:28:ea:58:fe: 09:9a:42:47:17:4e:15:da:47:60:10:62:2b:4b:e9: a4:5e:60:3d:de:a2:b0:47:d6:86:85:49:fb:a2:46: 69:4e:0e:48:03:3a:2c:6f:21:2f:02:e2:7e:72:3b: f2:d3:fb:b9:38:f2:1e:28:75:4a:37:ce:ff:5e:96: a5:79:78:2c:de:a3:04:6b:09:c5:41:eb:c6:88:20: 1b:d7:54:3d:cc:38:e0:5c:6a:f3:65:a2:94:f3:ef: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:A9:E6:95:0C:1D:CC:22:7E:48:29:D4:FB:1B:85:7E:6C:B8:37 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/C7328AD4759611EE900E0A11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e270::/44 Signature Algorithm: sha256WithRSAEncryption 0c:f3:8b:c2:fe:97:ad:39:6c:aa:78:1f:2c:78:cc:a7:36:cb: 3f:4d:8b:15:4a:94:d6:b9:07:cb:14:84:f3:5e:df:3f:c2:65: fe:76:c7:a9:59:9b:30:30:22:b0:8a:00:3b:ee:68:5a:b6:99: b4:20:81:13:b7:88:3d:e4:19:02:22:f6:9f:cd:0c:62:08:00: da:60:73:81:74:4e:2b:49:ff:2e:ce:67:f8:d9:a2:2c:98:82: 13:e6:75:0a:f4:c0:b4:7f:93:05:63:f0:cb:67:ec:e5:75:ec: 77:cf:64:68:6a:a1:49:6d:8f:3d:6d:c9:30:04:e6:38:e4:f9: 98:a3:b0:1e:41:13:21:5c:7a:7d:d5:32:1f:74:ea:1c:07:0c: 3b:c6:da:4c:1f:57:59:f6:6a:db:4b:4e:ae:ca:32:8e:33:b0: 33:e0:48:39:ad:5e:e3:8e:0a:ab:cf:c4:8b:ec:a6:e5:e0:82: 16:58:f6:c0:80:4f:bb:9a:84:3d:2c:75:f9:d8:44:83:13:49: 4e:39:3c:18:03:6d:60:0e:4b:c6:1f:2e:5f:f3:ff:40:86:39: c8:f3:69:80:13:38:f3:26:7f:3e:11:19:e1:a2:7f:fb:a4:6b: 47:93:50:b7:9f:09:ae:c1:f2:1d:bd:a1:75:c1:f6:f1:90:02: ba:87:02:d1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMxMDI4MTMzNDU0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkMGRmZS0wNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53Y+e/mkorbgaawjFPluQ0swCAt9Ylm+6Grf3lcR96wP4Or/kUvyas7HBqD9 lDiuAoJDx7oxg+OQRiXWVz/OGCaNFBoejf080Nux6XofAfuSxwiO4VVCg6DsbV4c ayuJn5nSK8HoNBGJwrR3FgGvlnADUTCwZVDbJmkYNq9zEo/j/lksxF3CjGz0Z7ay h/VQ5Fz2n06MlUAsnrknvjk0DSjqWP4JmkJHF04V2kdgEGIrS+mkXmA93qKwR9aG hUn7okZpTg5IAzosbyEvAuJ+cjvy0/u5OPIeKHVKN87/XpaleXgs3qMEawnFQevG iCAb11Q9zDjgXGrzZaKU8++zKQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNVkqeaV DB3MIn5IKdT7G4V+bLg3MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQzczMjhBRDQ3 NTk2MTFFRTkwMEUwQTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwQkBghA4nAwDQYJKoZIhvcNAQELBQADggEBAAzzi8L+l605 bKp4Hyx4zKc2yz9NixVKlNa5B8sUhPNe3z/CZf52x6lZmzAwIrCKADvuaFq2mbQg gRO3iD3kGQIi9p/NDGIIANpgc4F0TitJ/y7OZ/jZoiyYghPmdQr0wLR/kwVj8Mtn 7OV17HfPZGhqoUltjz1tyTAE5jjk+ZijsB5BEyFcen3VMh906hwHDDvG2kwfV1n2 attLTq7KMo4zsDPgSDmtXuOOCqvPxIvspuXgghZY9sCAT7uahD0sdfnYRIMTSU45 PBgDbWAOS8YfLl/z/0CGOcjzaYATOPMmfz4RGeGif/uka0eTULefCa7B8h29oXXB 9vGQArqHAtE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org