$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa File: CD87D800461E11EEA3CBEE4AC4F9AE02.roa (raw, json) Hash identifier: 8gzoJlUwfhh/vyXwL1wWQxssB2hXIYDyvmc7QrtLDx4= Subject key identifier: FE:28:50:45:5F:0E:76:57:F4:17:02:40:A2:CE:CC:78:20:8B:DA:47 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C86 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa Signing time: Sun 26 May 2024 21:32:19 +0000 ROA not before: Sun 26 May 2024 21:32:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 151782 IP address blocks: 2406:840:fe60::/48 maxlen: 48 2406:840:fedd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:32:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa63-f352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:14:2e:fa:f0:ef:ad:aa:3a:31:32:5b:06: 88:62:0a:18:e8:2b:a6:d4:ba:79:c4:57:1d:63:80: 60:8e:4a:e5:69:9d:4c:c4:7e:e6:75:68:3d:c5:59: 0d:62:97:5a:94:87:28:52:da:fa:b7:91:d4:4c:19: 2e:7c:36:d8:da:af:da:23:e8:40:77:da:90:5d:c2: 3f:68:d8:e5:ca:39:ad:99:3e:5d:9f:14:2d:18:1e: 62:27:d8:6d:e9:7e:a6:3c:69:c6:f5:86:37:56:b7: b1:04:31:ce:6e:7c:78:cb:86:cd:ba:e0:32:fe:d2: 39:f0:ba:23:a4:2a:15:57:5a:93:b4:86:48:4d:cf: 24:62:19:85:32:d8:ff:f4:c1:7a:57:3f:eb:26:c7: ea:bb:6a:e5:75:10:18:bd:20:6e:1f:c3:ba:43:9f: 3a:29:0c:59:3e:71:aa:8a:41:e3:6d:6a:d7:fd:1f: f9:ef:b6:a8:01:6f:36:95:12:af:66:8f:fc:78:4a: ce:b8:48:c9:36:e5:92:4c:ab:a1:38:45:64:a2:b9: 04:28:74:c5:a7:31:6f:16:f1:1a:69:0e:09:71:d5: 93:85:de:e8:6a:88:7f:16:13:4e:42:e5:c9:ba:af: 6e:c6:1a:1d:91:04:90:e8:52:4b:e0:ee:f1:12:1b: c5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:28:50:45:5F:0E:76:57:F4:17:02:40:A2:CE:CC:78:20:8B:DA:47 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CD87D800461E11EEA3CBEE4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fe60::/48 2406:840:fedd::/48 Signature Algorithm: sha256WithRSAEncryption 68:66:68:d3:f2:89:1e:dd:0b:bb:da:de:48:f1:ac:7d:96:49: cd:20:b4:dc:25:97:1c:e7:07:aa:67:84:91:3b:8a:19:4a:45: 13:88:c6:9a:af:9b:57:c1:40:68:d3:32:7c:8c:8b:eb:65:b9: 15:e5:47:99:38:a7:f8:e3:4f:68:8c:41:99:4a:41:42:d4:2f: e8:14:3b:1b:12:80:d3:be:2a:da:2a:20:22:91:e1:d8:e4:c7: dc:e9:62:6b:ce:8d:9a:f8:d6:7e:9f:b1:b5:c0:5b:e2:6a:f6: 5b:31:15:8c:b4:6c:e4:03:2f:79:f8:af:e8:6e:57:2d:31:ac: 67:ea:b6:8d:a9:49:bd:f2:1b:11:1a:cc:20:4b:b0:3e:1f:55: 2d:7f:32:0b:59:03:0a:87:e2:d7:64:62:f0:be:21:d5:9c:a9: 97:cd:b2:de:e4:94:71:ca:1a:08:11:60:2a:77:75:76:42:1e: 80:e1:cb:0e:4c:63:46:2a:f1:06:c7:1b:86:ec:b7:ee:bc:9a: 58:61:a5:cb:e2:f3:5c:a3:57:5c:47:e0:2d:33:24:fe:12:af: 08:28:ff:30:78:11:73:90:33:12:35:f5:b0:e1:74:69:c0:c2: d9:89:ee:8b:b9:40:d3:a2:da:4a:e4:31:13:91:8d:cf:12:c3: 56:b0:61:a5 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMjE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE2My1mMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfYULvrw762qOjEyWwaIYgoY6Cum1Lp5xFcdY4BgjkrlaZ1MxH7mdWg9xVkN YpdalIcoUtr6t5HUTBkufDbY2q/aI+hAd9qQXcI/aNjlyjmtmT5dnxQtGB5iJ9ht 6X6mPGnG9YY3VrexBDHObnx4y4bNuuAy/tI58LojpCoVV1qTtIZITc8kYhmFMtj/ 9MF6Vz/rJsfqu2rldRAYvSBuH8O6Q586KQxZPnGqikHjbWrX/R/577aoAW82lRKv Zo/8eErOuEjJNuWSTKuhOEVkorkEKHTFpzFvFvEaaQ4JcdWThd7oaoh/FhNOQuXJ uq9uxhodkQSQ6FJL4O7xEhvFfwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFP4oUEVf DnZX9BcCQKLOzHggi9pHMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQ0Q4N0Q4MDA0 NjFFMTFFRUEzQ0JFRTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBghA/mADBwAkBghA/t0wDQYJKoZIhvcNAQELBQADggEB AGhmaNPyiR7dC7va3kjxrH2WSc0gtNwllxznB6pnhJE7ihlKRROIxpqvm1fBQGjT MnyMi+tluRXlR5k4p/jjT2iMQZlKQULUL+gUOxsSgNO+KtoqICKR4djkx9zpYmvO jZr41n6fsbXAW+Jq9lsxFYy0bOQDL3n4r+huVy0xrGfqto2pSb3yGxEazCBLsD4f VS1/MgtZAwqH4tdkYvC+IdWcqZfNst7klHHKGggRYCp3dXZCHoDhyw5MY0Yq8QbH G4bst+68mlhhpcvi81yjV1xH4C0zJP4Srwgo/zB4EXOQMxI19bDhdGnAwtmJ7ou5 QNOi2krkMRORjc8Sw1awYaU= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org