$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa File: E2D92650FE1A11EEBD74AE3AC4F9AE02.roa (raw, json) Hash identifier: 3sw4cs7mupFUONVlKh9wt+NFNFi3y+cyCmpTO2ROhI0= Subject key identifier: C3:20:70:90:87:AC:BA:58:6E:8B:6B:DE:16:BC:83:0A:E2:DD:F4:73 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0C6F Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa Signing time: Sun 26 May 2024 21:31:56 +0000 ROA not before: Sun 26 May 2024 21:31:56 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 142586 IP address blocks: 2406:840:ed00::/40 maxlen: 48 2406:840:fde0::/48 maxlen: 48 2406:840:fece::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 26 21:31:56 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6653aa4c-ca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:94:2e:2d:3c:b8:8f:1f:dd:f6:ed:85:7f: 9a:65:8d:2f:c5:2e:70:37:f6:8a:b9:f0:2f:79:0d: d8:78:fe:9b:54:f0:a8:ca:0d:92:5f:b8:91:f5:c6: 04:c9:53:c4:a2:b1:01:0b:bf:2a:21:1c:57:64:7f: 5a:eb:c3:e1:34:27:20:69:37:6a:7f:d4:1e:44:4b: f1:a0:28:c8:b9:31:b9:af:a0:b6:24:1e:98:5e:34: 70:e1:ef:b8:64:fe:af:9b:56:26:b7:b6:0f:57:12: 6e:26:45:2c:f4:22:18:69:29:c2:a0:73:73:91:85: 4e:1f:97:00:c6:3a:cf:9e:a0:77:02:fe:d8:a5:60: 4a:e4:2e:2f:e0:e6:31:2d:70:4c:ef:aa:7c:6a:61: a9:94:f4:df:82:fb:d1:69:84:3b:df:96:51:60:64: 37:2c:0b:5a:86:1f:d3:30:bb:df:47:44:a1:84:aa: 40:33:21:2e:53:22:c4:0c:d7:80:c4:c2:37:99:2e: e7:cd:fe:e4:77:48:d2:7e:1c:d9:1c:74:56:2a:90: 37:f1:a5:62:67:96:a1:a1:e0:13:5c:d5:a5:25:9b: 31:46:20:a7:d1:ef:47:95:ed:bd:53:5a:92:43:76: 82:4c:48:07:5e:2b:d2:37:b2:1d:9e:66:ad:b0:35: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:20:70:90:87:AC:BA:58:6E:8B:6B:DE:16:BC:83:0A:E2:DD:F4:73 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2D92650FE1A11EEBD74AE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:ed00::/40 2406:840:fde0::/48 2406:840:fece::/48 Signature Algorithm: sha256WithRSAEncryption 2b:93:45:1c:af:f4:04:47:0c:c3:8b:db:a0:d3:e1:3f:c9:b9: 42:a5:03:ea:cb:1a:b8:60:c1:c5:ba:84:2a:39:ec:8e:3e:a1: 51:15:67:a6:2c:75:c6:37:2f:3e:2b:69:fc:6d:60:ea:94:74: ce:66:ec:76:91:31:c8:07:00:32:ee:82:6a:e0:47:b1:3a:68: 7a:53:0c:70:6a:9c:c3:b2:69:5d:71:33:69:36:60:11:5f:2c: 8e:56:46:f3:9f:1d:be:20:09:19:e2:e0:cb:a8:81:f0:45:3d: 01:5f:4c:58:df:ad:d6:1f:ea:0a:37:16:e1:b3:bc:34:9c:da: 4c:58:e1:da:87:a3:44:f7:9d:6e:db:ba:53:2c:5a:2d:c9:2a: fd:f0:4e:e0:6f:12:3d:36:4e:23:93:5b:a7:0f:38:82:53:9e: c4:10:a7:4a:85:84:04:83:bb:4d:23:3b:cd:9e:1a:86:94:eb: 75:97:0e:0b:33:ab:5d:48:47:f2:6f:e1:58:b9:0b:79:9c:8e: 7c:d9:76:f5:2f:6c:84:02:80:b4:9f:f2:fa:00:ab:7f:87:e1: 95:86:8a:f4:c3:4b:d0:45:98:b0:18:42:7d:7f:8e:e5:e6:fd: 06:d7:22:ed:69:01:1f:aa:96:84:76:e0:21:7a:d4:6b:12:ab: cc:c1:d5:06 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNTI2MjEzMTU2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUzYWE0Yy1jYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueOULi08uI8f3fbthX+aZY0vxS5wN/aKufAveQ3YeP6bVPCoyg2SX7iR9cYE yVPEorEBC78qIRxXZH9a68PhNCcgaTdqf9QeREvxoCjIuTG5r6C2JB6YXjRw4e+4 ZP6vm1Ymt7YPVxJuJkUs9CIYaSnCoHNzkYVOH5cAxjrPnqB3Av7YpWBK5C4v4OYx LXBM76p8amGplPTfgvvRaYQ735ZRYGQ3LAtahh/TMLvfR0ShhKpAMyEuUyLEDNeA xMI3mS7nzf7kd0jSfhzZHHRWKpA38aViZ5ahoeATXNWlJZsxRiCn0e9Hle29U1qS Q3aCTEgHXivSN7IdnmatsDUhzwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMMgcJCH rLpYbotr3ha8gwri3fRzMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTJEOTI2NTBG RTFBMTFFRUJENzRBRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgACMBoDBgAkBghA7QMHACQGCED94AMHACQGCED+zjANBgkqhkiG9w0B AQsFAAOCAQEAK5NFHK/0BEcMw4vboNPhP8m5QqUD6ssauGDBxbqEKjnsjj6hURVn pix1xjcvPitp/G1g6pR0zmbsdpExyAcAMu6CauBHsTpoelMMcGqcw7JpXXEzaTZg EV8sjlZG858dviAJGeLgy6iB8EU9AV9MWN+t1h/qCjcW4bO8NJzaTFjh2oejRPed btu6UyxaLckq/fBO4G8SPTZOI5Nbpw84glOexBCnSoWEBIO7TSM7zZ4ahpTrdZcO CzOrXUhH8m/hWLkLeZyOfNl29S9shAKAtJ/y+gCrf4fhlYaK9MNL0EWYsBhCfX+O 5eb9Btci7WkBH6qWhHbgIXrUaxKrzMHVBg== -----END CERTIFICATE-----Generated at Sun May 26 22:03:58 2024 by rpki-client on console-fra.rpki-client.org