$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa File: EB852420BEFC11EC82FBEC0AC4F9AE02.roa (raw, json) Hash identifier: u9B8kLlkD/6UQaknve3bbLxR+jMEAa064x79Pfq6fZg= Subject key identifier: BC:84:43:A5:0F:7C:A0:3B:0D:48:F7:5E:D1:D9:41:57:78:7F:BB:F0 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0A5A Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa Signing time: Sun 14 May 2023 22:14:48 +0000 ROA not before: Sun 14 May 2023 22:14:48 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 14618 IP address blocks: 2406:840:e666::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2650 (0xa5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: May 14 22:14:48 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64615d57-7a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:db:5c:3e:b3:55:32:f8:1d:27:51:e1:3e: 6f:50:bc:10:23:7f:0f:04:f8:07:7b:d3:1b:9f:f1: 7c:18:a0:73:34:ee:0f:d3:89:d9:44:93:a6:95:ed: 09:aa:d4:ea:e8:95:06:f7:16:12:6f:9e:76:04:3f: cd:57:c1:e5:4c:25:09:1a:33:03:26:e8:6c:09:ea: dd:ee:f7:e3:bb:2b:54:95:55:d3:d9:47:54:84:57: 81:7b:d1:88:b7:2c:6c:00:97:26:b1:84:84:c7:3d: f9:1b:2c:a7:c9:40:39:f0:33:f9:2e:2f:44:b0:36: 3b:21:b9:48:b3:31:23:b6:d5:f7:bd:32:09:b9:b9: e9:16:18:f3:b0:5d:3c:2c:c0:c2:c9:c2:6b:45:68: 4d:51:e1:01:5a:d2:16:d6:ac:cc:d8:1d:c2:8f:a2: b7:ba:e6:c6:f7:41:3f:d6:56:c1:b7:bc:4f:e2:db: f4:a6:f4:64:e0:7f:be:f7:0e:df:52:5e:22:f8:ce: fd:c2:f8:81:db:41:b4:8b:49:56:ec:f9:e8:b2:b7: e0:81:9d:6b:bf:91:88:d5:92:6c:73:db:be:cf:c6: 07:fc:c3:75:34:a6:a1:5e:95:f8:b5:db:da:da:5a: 36:30:8f:1f:98:21:c5:3c:28:fa:c7:b8:e4:94:c3: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:43:A5:0F:7C:A0:3B:0D:48:F7:5E:D1:D9:41:57:78:7F:BB:F0 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB852420BEFC11EC82FBEC0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:e666::/47 Signature Algorithm: sha256WithRSAEncryption 85:a5:87:3c:7d:83:7f:d8:03:e8:b1:c9:c6:dc:dd:4f:49:27: 6d:72:15:f7:1d:2c:41:37:0e:65:f3:1a:f5:db:c8:fc:9f:08: ee:9e:2e:a2:76:27:19:71:df:7a:20:3a:57:bc:b2:6d:51:5f: ab:6e:59:5d:fb:1d:4e:7c:8c:19:45:10:96:07:71:63:b1:15: 34:58:f5:fd:45:eb:5c:de:ab:37:3d:4f:a6:de:e1:14:5f:3b: 75:33:55:13:27:5d:9d:b3:38:39:df:b1:7b:6e:15:bd:98:ab: 55:60:8d:29:23:a8:05:ba:f1:7b:6a:45:60:70:cd:cc:68:60: 28:97:9c:c4:29:e1:30:df:b7:79:e9:3c:d0:7a:f7:5f:88:6e: 0b:89:26:94:ea:c0:0e:72:34:06:8b:d6:b9:7d:f5:87:11:d3: bd:5d:47:ed:e6:28:8d:6e:37:bc:10:22:56:df:a9:f5:ff:36: a6:3f:a8:b0:af:5f:c6:bd:3f:9b:c4:a5:e1:c0:36:e3:d6:31: 73:6c:19:e0:cf:7b:1a:5f:aa:41:d6:e6:8d:2f:b4:2b:88:73: 3a:5f:a8:a2:83:41:2c:6c:ed:63:96:7a:f7:e7:27:0f:9e:15: 21:35:18:80:24:37:0f:ee:3a:db:f3:c7:07:2a:a8:3e:b0:a8: 37:4b:3e:6f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICClowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjMwNTE0MjIxNDQ4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDYxNWQ1Ny03YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNTbXD6zVTL4HSdR4T5vULwQI38PBPgHe9Mbn/F8GKBzNO4P04nZRJOmle0J qtTq6JUG9xYSb552BD/NV8HlTCUJGjMDJuhsCerd7vfjuytUlVXT2UdUhFeBe9GI tyxsAJcmsYSExz35GyynyUA58DP5Li9EsDY7IblIszEjttX3vTIJubnpFhjzsF08 LMDCycJrRWhNUeEBWtIW1qzM2B3Cj6K3uubG90E/1lbBt7xP4tv0pvRk4H++9w7f Ul4i+M79wviB20G0i0lW7PnosrfggZ1rv5GI1ZJsc9u+z8YH/MN1NKahXpX4tdva 2lo2MI8fmCHFPCj6x7jklMNGowIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLyEQ6UP fKA7DUj3XtHZQVd4f7vwMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRUI4NTI0MjBC RUZDMTFFQzgyRkJFQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEkBghA5mYwDQYJKoZIhvcNAQELBQADggEBAIWlhzx9g3/Y A+ixycbc3U9JJ21yFfcdLEE3DmXzGvXbyPyfCO6eLqJ2Jxlx33ogOle8sm1RX6tu WV37HU58jBlFEJYHcWOxFTRY9f1F61zeqzc9T6be4RRfO3UzVRMnXZ2zODnfsXtu Fb2Yq1VgjSkjqAW68XtqRWBwzcxoYCiXnMQp4TDft3npPNB691+IbguJJpTqwA5y NAaL1rl99YcR071dR+3mKI1uN7wQIlbfqfX/NqY/qLCvX8a9P5vEpeHANuPWMXNs GeDPexpfqkHW5o0vtCuIczpfqKKDQSxs7WOWevfnJw+eFSE1GIAkNw/uOtvzxwcq qD6wqDdLPm8= -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:02 2024 by rpki-client on console-fra.rpki-client.org