$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa File: CD87D800461E11EEA3CBEE4AC4F9AE02.roa (raw, json) Hash identifier: M0QueLz737zmtC/ZVX187DlHS9nTsjv8IzWcRc7pY3E= Subject key identifier: 88:3E:D8:B7:62:A5:DF:A1:82:09:EE:58:FA:57:3D:E9:6E:49:6B:B9 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0B06 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa Signing time: Tue 29 Aug 2023 03:53:56 +0000 ROA not before: Tue 29 Aug 2023 03:53:56 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 151782 IP address blocks: 2406:840:fe60::/48 maxlen: 48 2406:840:fedd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Aug 29 03:53:56 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64ed6bd4-200a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:2f:b0:8e:67:d1:86:93:8b:ae:94:ed:f0: 70:1a:2f:2a:23:1a:33:0a:41:7b:a1:47:27:8b:96: e2:85:7f:c9:02:1c:ca:90:c3:2f:21:b7:fa:8d:7f: f4:f0:84:f0:1f:38:27:c3:cb:99:2f:9f:5e:8d:c7: b0:92:fd:e7:6c:1e:2e:5b:7d:b5:94:0f:9c:be:fb: a0:8c:5a:c9:c4:99:e9:cf:a8:2e:82:1b:df:f8:6a: d5:58:3c:0c:15:2e:7c:c3:27:ae:40:51:a0:d6:e9: a3:50:d0:30:69:5a:04:68:62:a5:f7:1c:81:b1:06: 75:ed:65:5e:52:15:4e:ae:61:56:1f:3e:51:ec:58: 48:2f:dd:c7:e5:f1:af:45:5c:69:5a:c4:21:67:fa: 81:33:d3:99:79:5c:91:a8:6a:6b:fb:c0:6a:36:83: 53:fb:19:40:a5:c5:88:68:98:c6:88:e5:55:ff:91: 5d:c3:18:5d:b9:fd:f9:06:73:17:f7:18:e9:2a:af: 04:6c:62:2d:22:bd:d8:c6:12:b3:8b:49:7d:b9:32: a7:5c:89:23:cd:56:0d:62:c0:f3:e8:94:dc:0a:e3: f4:6f:8a:6b:8b:81:a2:49:eb:31:fc:c6:75:05:23: 90:d2:0e:52:17:b0:34:94:ee:e8:64:dd:39:7a:d4: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3E:D8:B7:62:A5:DF:A1:82:09:EE:58:FA:57:3D:E9:6E:49:6B:B9 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fe60::/48 2406:840:fedd::/48 Signature Algorithm: sha256WithRSAEncryption 34:d1:11:76:75:dd:24:70:1e:e2:00:68:e5:42:3e:5c:ef:63: e6:68:c8:81:b9:85:69:09:c7:33:49:2b:c7:28:00:2c:cc:d8: 3f:7c:e4:47:a7:11:42:39:6c:1e:94:cd:07:d6:da:4a:02:29: 79:1d:23:9d:17:3c:a9:8a:9c:1d:f5:01:25:db:45:90:96:23: fc:6b:57:15:5b:3c:cd:94:5f:d6:17:b1:04:d6:b1:ff:b6:06: 3e:10:80:ff:9b:57:d5:9a:8f:74:aa:5d:6a:11:40:55:64:03: 18:9c:5d:70:7f:26:4e:03:76:b2:ca:67:4d:da:ce:c2:4e:e9: d1:bd:54:cb:d8:d9:f9:8f:cf:c6:de:e5:94:b4:40:54:e8:11: fb:c6:e6:73:bc:58:28:80:1a:8c:3e:ad:fc:2a:bf:64:af:ad: bb:7a:b1:1c:d4:0f:d2:0f:02:fa:4a:e6:b0:99:09:74:61:21: c6:96:c1:08:38:00:ac:79:47:7b:1e:07:ca:ba:59:28:47:23: 11:f6:33:12:7d:66:79:7e:49:db:45:03:ae:29:52:da:f6:15: 85:e1:ea:d3:21:65:ee:90:63:77:b2:b7:58:87:a6:1c:6a:26: 82:83:ff:41:65:d9:40:90:bd:67:ef:35:11:4c:41:d9:2d:8d: 7a:f9:74:db -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwODI5MDM1MzU2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVkNmJkNC0yMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulYvsI5n0YaTi66U7fBwGi8qIxozCkF7oUcni5bihX/JAhzKkMMvIbf6jX/0 8ITwHzgnw8uZL59ejcewkv3nbB4uW321lA+cvvugjFrJxJnpz6gughvf+GrVWDwM FS58wyeuQFGg1umjUNAwaVoEaGKl9xyBsQZ17WVeUhVOrmFWHz5R7FhIL93H5fGv RVxpWsQhZ/qBM9OZeVyRqGpr+8BqNoNT+xlApcWIaJjGiOVV/5Fdwxhduf35BnMX 9xjpKq8EbGItIr3YxhKzi0l9uTKnXIkjzVYNYsDz6JTcCuP0b4pri4GiSesx/MZ1 BSOQ0g5SF7A0lO7oZN05etQ9gwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIg+2Ldi pd+hggnuWPpXPeluSWu5MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQ0Q4N0Q4MDA0 NjFFMTFFRUEzQ0JFRTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBghA/mADBwAkBghA/t0wDQYJKoZIhvcNAQELBQADggEB ADTREXZ13SRwHuIAaOVCPlzvY+ZoyIG5hWkJxzNJK8coACzM2D985EenEUI5bB6U zQfW2koCKXkdI50XPKmKnB31ASXbRZCWI/xrVxVbPM2UX9YXsQTWsf+2Bj4QgP+b V9Waj3SqXWoRQFVkAxicXXB/Jk4DdrLKZ03azsJO6dG9VMvY2fmPz8be5ZS0QFTo EfvG5nO8WCiAGow+rfwqv2Svrbt6sRzUD9IPAvpK5rCZCXRhIcaWwQg4AKx5R3se B8q6WShHIxH2MxJ9Znl+SdtFA64pUtr2FYXh6tMhZe6QY3eyt1iHphxqJoKD/0Fl 2UCQvWfvNRFMQdktjXr5dNs= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org