$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa File: E2E771C4D93A11EEA15D7A7FC4F9AE02.roa (raw, json) Hash identifier: bIE34xU90sWBcr4LfO60j3GB6pMeWIekSjYSxHsRp5o= Subject key identifier: F2:F3:73:FF:1F:B4:6C:CC:56:AC:46:89:B9:68:FB:B7:CE:98:72:6F Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0BE2 Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa Signing time: Sun 03 Mar 2024 08:49:03 +0000 ROA not before: Sun 03 Mar 2024 08:49:03 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 152598 IP address blocks: 2406:840:fecc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 21:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Mar 3 08:49:03 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65e4397f-f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:2b:23:6b:1f:94:a7:88:35:d5:20:8a:7f: a6:f6:ea:94:5f:23:7b:1b:0b:40:63:06:ca:66:98: e5:b1:60:39:fa:fd:62:af:c5:c3:40:ee:c4:c9:3c: b3:5b:3c:ee:da:31:3f:5b:b0:55:6e:12:69:2e:15: 9e:89:36:d7:51:ed:07:23:c8:53:2f:2b:7c:7f:05: 2c:cb:92:06:a2:bd:f1:d8:2f:1c:2e:ed:6e:a5:09: cf:2d:b6:f7:b6:8c:79:d7:3a:ea:52:c1:5a:48:cd: 64:75:34:ac:db:6f:b2:50:80:32:94:7b:b7:92:8a: 59:d9:f3:e1:9e:c6:3e:7a:19:20:e4:09:e6:7a:b5: a3:6d:22:c9:aa:87:ac:16:01:09:60:66:e5:da:cc: 16:dd:cc:75:b3:2e:be:25:8c:7b:88:e6:04:97:f5: d3:64:14:fe:fe:18:17:b8:4d:16:77:ff:7b:aa:7c: 16:48:ef:13:46:59:a1:ac:08:46:fa:2a:84:93:b0: 0b:f4:33:63:40:8e:35:e7:65:a2:34:cd:97:1d:31: 32:80:6b:5b:5f:73:e3:66:51:b7:c9:25:4c:b9:d4: f5:a2:70:be:7f:ab:a3:76:47:64:21:3c:39:78:cb: 98:a9:54:da:1b:b6:70:a7:56:17:20:11:f8:80:6b: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F3:73:FF:1F:B4:6C:CC:56:AC:46:89:B9:68:FB:B7:CE:98:72:6F X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E2E771C4D93A11EEA15D7A7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fecc::/48 Signature Algorithm: sha256WithRSAEncryption a6:b7:cf:db:2b:73:64:41:84:25:e2:bf:85:1f:6d:7e:38:70: a8:3d:5d:de:2f:93:34:9f:31:bf:dd:0e:aa:8c:94:ac:79:dd: 2a:62:3c:09:0c:f2:5c:13:2b:e8:dc:77:dd:9c:e3:56:99:2b: 65:51:15:4b:16:26:58:c0:32:68:b7:7a:1d:95:21:dc:04:f5: b6:d0:3e:01:7a:6f:30:b8:db:f6:92:ac:a5:8e:bc:c0:c7:1f: 2e:be:04:d9:58:73:7f:d1:a3:56:a4:20:c2:98:1e:12:95:32: ae:f2:b4:86:c6:b5:6f:03:a3:11:07:e3:0f:19:67:8a:0d:5f: 7f:61:6b:4d:d8:01:6a:16:e1:55:37:dc:21:74:98:5f:d8:74: c9:9d:2b:1f:62:26:89:37:09:79:05:08:6a:d2:d3:34:bd:8b: 4c:12:d5:cd:d7:39:a1:07:f1:d7:31:8b:b5:37:3c:e7:4d:73: 22:fd:34:0f:8f:cf:79:28:86:d4:c1:b2:de:d4:d0:5b:41:b8: 67:04:22:dd:1d:df:19:3e:6b:f7:6e:aa:7c:81:56:9b:3b:3e: 53:96:d5:b4:92:9c:fc:51:11:b7:a6:fc:0e:b5:8e:19:45:10: 5f:49:a0:ed:cb:bf:f0:b6:dc:58:34:ca:f8:70:6c:d8:21:8d: ca:7e:4d:26 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwMzAzMDg0OTAzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU0Mzk3Zi1mMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKgrI2sflKeINdUgin+m9uqUXyN7GwtAYwbKZpjlsWA5+v1ir8XDQO7EyTyz Wzzu2jE/W7BVbhJpLhWeiTbXUe0HI8hTLyt8fwUsy5IGor3x2C8cLu1upQnPLbb3 tox51zrqUsFaSM1kdTSs22+yUIAylHu3kopZ2fPhnsY+ehkg5AnmerWjbSLJqoes FgEJYGbl2swW3cx1sy6+JYx7iOYEl/XTZBT+/hgXuE0Wd/97qnwWSO8TRlmhrAhG +iqEk7AL9DNjQI4152WiNM2XHTEygGtbX3PjZlG3ySVMudT1onC+f6ujdkdkITw5 eMuYqVTaG7Zwp1YXIBH4gGuOZwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPLzc/8f tGzMVqxGiblo+7fOmHJvMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTJFNzcxQzRE OTNBMTFFRUExNUQ3QTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBghA/swwDQYJKoZIhvcNAQELBQADggEBAKa3z9src2RB hCXiv4UfbX44cKg9Xd4vkzSfMb/dDqqMlKx53SpiPAkM8lwTK+jcd92c41aZK2VR FUsWJljAMmi3eh2VIdwE9bbQPgF6bzC42/aSrKWOvMDHHy6+BNlYc3/Ro1akIMKY HhKVMq7ytIbGtW8DoxEH4w8ZZ4oNX39ha03YAWoW4VU33CF0mF/YdMmdKx9iJok3 CXkFCGrS0zS9i0wS1c3XOaEH8dcxi7U3POdNcyL9NA+Pz3kohtTBst7U0FtBuGcE It0d3xk+a/duqnyBVps7PlOW1bSSnPxREbem/A61jhlFEF9JoO3Lv/C23Fg0yvhw bNghjcp+TSY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:16 2024 by rpki-client on console-ams.rpki-client.org