$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DE949FACF2D411EAAA2A3738C4F9AE02.roa File: DE949FACF2D411EAAA2A3738C4F9AE02.roa (raw, json) Hash identifier: XhFnwpO9J3MGzvuIkYYAUL1xJ4YgVY+HSOqapYHGIcY= Subject key identifier: FF:F3:51:12:E7:82:42:35:18:69:EC:6C:C8:9F:46:A7:4D:83:84:CC Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A34 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DE949FACF2D411EAAA2A3738C4F9AE02.roa Signing time: Sun 14 May 2023 22:14:04 +0000 ROA not before: Sun 14 May 2023 22:14:04 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 134993 IP address blocks: 2406:840:fd00::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:14:04 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d2c-009c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:a6:68:ad:30:d7:b5:f5:7d:0a:30:b2:14: dc:7a:8b:fc:14:56:b0:6a:7d:ad:21:31:ad:d4:59: b1:84:98:51:f4:33:b5:fd:b5:f0:4f:39:a6:41:82: 9e:dc:57:ba:f3:27:cc:b8:48:0b:7f:0e:4d:8a:11: de:6a:38:52:49:7f:ea:01:72:ba:85:81:58:3e:52: b8:71:3c:b2:d4:62:c6:1c:55:dd:2e:e8:a7:ed:0b: 06:f8:e3:00:7a:75:a6:aa:57:1f:97:7e:fc:f1:e3: b1:f4:02:7f:36:5d:00:57:74:13:f9:ef:59:00:dc: 08:e0:cb:87:96:12:05:26:e0:08:9a:e6:7a:be:48: d5:57:82:f2:80:64:24:9c:18:59:8d:91:02:c8:e8: 35:7e:0a:d9:d1:42:54:80:85:b3:03:30:f1:33:0b: b6:48:96:3a:c0:c6:08:2e:73:d6:02:8b:91:52:d8: 0b:fd:94:be:25:1a:a3:b7:01:4b:48:3e:de:9a:52: 29:2a:78:9c:e6:04:40:0e:12:85:6e:f9:83:76:15: 3b:77:b7:15:d9:39:00:11:35:97:88:b8:8b:57:ca: c0:5d:1d:ff:3f:c2:bc:ef:48:ec:dc:cc:c2:f6:90: b6:c1:e7:b5:6a:d2:ba:bd:33:f7:e3:45:a8:dd:a2: d4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:51:12:E7:82:42:35:18:69:EC:6C:C8:9F:46:A7:4D:83:84:CC X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/DE949FACF2D411EAAA2A3738C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fd00::/43 Signature Algorithm: sha256WithRSAEncryption ab:da:af:8b:30:44:ac:58:18:4f:7a:12:6c:0a:8c:4e:bb:54: ed:0d:43:7d:90:5b:d7:cc:f4:53:dd:3b:9b:ba:a8:74:f6:da: 62:36:f4:08:53:f1:57:8f:b7:9b:53:81:fd:77:50:e7:ad:ab: ce:ba:7c:ac:7f:92:2b:6d:0d:16:67:6a:18:44:67:46:ee:13: 1e:28:d6:dd:12:d8:42:bc:9c:3e:22:3f:14:46:0e:67:ba:b0: eb:73:c3:3a:47:e7:d0:ff:a9:f2:de:d5:30:fc:dd:ed:6a:53: 3c:b7:a0:9d:0f:1b:a9:27:95:ce:98:b2:81:01:ad:e6:0c:22: 81:36:99:9c:e0:46:c8:af:a9:e3:61:42:cf:be:04:3e:c1:06: 20:96:23:31:13:a1:a2:40:30:4d:0c:71:3d:34:83:ab:6d:25: ad:68:c6:8e:05:12:39:17:68:99:f5:2e:1f:2c:19:4e:83:21: 67:d3:0e:b1:fd:31:1a:de:51:1b:6f:6d:00:9b:36:45:22:f7: 3e:3f:12:b9:f6:73:28:fd:01:0a:ca:2e:03:77:8d:40:a8:10: 87:be:f4:ad:78:d6:75:9b:84:ff:fd:79:af:a2:c8:8c:ef:9a: 2b:87:25:8f:b6:8a:bb:b8:8b:36:16:9f:48:1d:1d:3e:98:76: c2:70:4b:8d -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDA0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQyYy0wMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstOmaK0w17X1fQowshTceov8FFawan2tITGt1FmxhJhR9DO1/bXwTzmmQYKe 3Fe68yfMuEgLfw5NihHeajhSSX/qAXK6hYFYPlK4cTyy1GLGHFXdLuin7QsG+OMA enWmqlcfl3788eOx9AJ/Nl0AV3QT+e9ZANwI4MuHlhIFJuAImuZ6vkjVV4LygGQk nBhZjZECyOg1fgrZ0UJUgIWzAzDxMwu2SJY6wMYILnPWAouRUtgL/ZS+JRqjtwFL SD7emlIpKnic5gRADhKFbvmDdhU7d7cV2TkAETWXiLiLV8rAXR3/P8K870js3MzC 9pC2wee1atK6vTP340Wo3aLUcQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFP/zURLn gkI1GGnsbMifRqdNg4TMMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvREU5NDlGQUNG MkQ0MTFFQUFBMkEzNzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwUkBghA/QAwDQYJKoZIhvcNAQELBQADggEBAKvar4swRKxY GE96EmwKjE67VO0NQ32QW9fM9FPdO5u6qHT22mI29AhT8VePt5tTgf13UOetq866 fKx/kittDRZnahhEZ0buEx4o1t0S2EK8nD4iPxRGDme6sOtzwzpH59D/qfLe1TD8 3e1qUzy3oJ0PG6knlc6YsoEBreYMIoE2mZzgRsivqeNhQs++BD7BBiCWIzEToaJA ME0McT00g6ttJa1oxo4FEjkXaJn1Lh8sGU6DIWfTDrH9MRreURtvbQCbNkUi9z4/ Ern2cyj9AQrKLgN3jUCoEIe+9K141nWbhP/9ea+iyIzvmiuHJY+2iru4izYWn0gd HT6YdsJwS40= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org