$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa File: F1D1A1DC324011EFB7FA4210C4F9AE02.roa (raw, json) Hash identifier: N95MEsl6yPIC/A+9H0oKx0t5GEfiTfZA4oRDejYVL4s= Subject key identifier: 1F:AA:41:03:98:C9:1C:EF:FF:B6:E3:5D:7B:82:34:99:65:95:EB:E4 Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Certificate serial: 0CEF Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa Signing time: Mon 24 Jun 2024 15:46:39 +0000 ROA not before: Mon 24 Jun 2024 15:46:39 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152930 IP address blocks: 2406:840:fda0::/44 maxlen: 48 2406:840:fe91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5 Validity Not Before: Jun 24 15:46:39 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=667994df-4f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:fa:18:e6:d9:46:db:18:04:c7:c6:0e:70: a6:50:c9:23:de:82:8e:77:96:4f:db:88:db:7a:4b: 94:70:37:12:e7:5c:fb:9e:c0:c7:22:26:46:6a:c3: 50:8b:ee:65:bb:34:0f:ea:ad:8f:22:54:9e:77:fd: 70:8a:69:69:fc:ad:ad:9a:c6:00:9f:4d:6b:6d:1f: 6e:72:d2:89:92:a3:9e:56:76:09:ac:77:55:b3:ed: db:32:15:74:4c:8d:fb:80:e1:b0:3d:f7:2a:05:dd: df:0c:68:a1:a7:f3:86:a7:97:28:d3:2b:a3:62:47: d8:a0:05:27:9a:b5:63:66:04:1d:37:1e:34:1e:28: 96:58:6c:f7:6d:9b:ed:33:ed:5f:62:8e:41:be:1d: 01:1f:e0:7a:37:22:56:d0:5f:7d:b5:f1:ba:fc:7b: 6e:2a:77:e7:0f:97:ea:5b:c3:d0:27:6f:57:9a:69: a5:1c:64:7b:71:e7:4a:53:a3:be:85:e4:2e:2d:64: a1:53:35:7c:fc:61:f3:46:5c:51:4c:21:37:3f:5f: 67:03:4d:a1:43:93:b5:95:f9:f2:cf:eb:eb:0a:c5: 57:3b:1c:95:69:80:0a:03:9d:3f:d1:a9:d4:8f:ee: dd:37:22:61:e1:94:a7:ec:55:85:aa:76:bb:d4:b9: 29:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AA:41:03:98:C9:1C:EF:FF:B6:E3:5D:7B:82:34:99:65:95:EB:E4 X509v3 Authority Key Identifier: keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F1D1A1DC324011EFB7FA4210C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:840:fda0::/44 2406:840:fe91::/48 Signature Algorithm: sha256WithRSAEncryption 95:ba:bc:2b:f1:be:e6:7d:a5:37:e7:d3:34:0b:75:2f:b1:85: 60:cd:2a:95:cb:3e:12:11:19:08:b1:8d:09:93:16:07:37:a3: c5:48:15:6d:56:a6:9c:d3:9f:25:ac:d6:b5:01:97:52:40:88: 92:56:7e:b5:36:c3:94:7b:1d:65:7b:56:34:a6:b2:ca:b5:73: 18:46:cb:7c:7f:4e:b9:22:78:56:c0:da:77:ab:dd:db:41:f3: 23:92:a3:59:31:75:9a:88:d0:2e:49:3e:4b:69:96:47:ff:9e: 87:54:76:d8:1c:1e:a0:51:34:0c:ad:fa:bc:41:84:75:12:f2: 4e:cc:c6:6b:13:af:7e:c1:c2:cf:5d:4e:a2:49:05:6d:99:36: 3c:c1:96:3f:10:09:70:ad:ec:8b:33:c6:c6:86:6a:dc:1b:9e: 58:92:05:63:83:2d:df:85:e9:48:aa:37:fb:eb:eb:5d:8e:36: 5c:b5:39:94:86:33:46:2d:bb:65:1a:86:a8:d9:4d:0f:36:a9: 42:cb:de:be:d2:47:f6:5f:d2:c6:7e:75:86:f5:1f:86:af:ba: c7:e3:8e:e9:25:c1:60:21:eb:d8:7a:fb:0a:49:c2:5c:43:2c: 0b:86:f9:61:48:03:3c:6f:14:0b:7c:b2:dc:89:cf:f1:00:67: f9:e8:c6:b7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE RTExQ0ExQTUwHhcNMjQwNjI0MTU0NjM5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc5OTRkZi00ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrH6GObZRtsYBMfGDnCmUMkj3oKOd5ZP24jbekuUcDcS51z7nsDHIiZGasNQ i+5luzQP6q2PIlSed/1wimlp/K2tmsYAn01rbR9uctKJkqOeVnYJrHdVs+3bMhV0 TI37gOGwPfcqBd3fDGihp/OGp5co0yujYkfYoAUnmrVjZgQdNx40HiiWWGz3bZvt M+1fYo5Bvh0BH+B6NyJW0F99tfG6/HtuKnfnD5fqW8PQJ29XmmmlHGR7cedKU6O+ heQuLWShUzV8/GHzRlxRTCE3P19nA02hQ5O1lfnyz+vrCsVXOxyVaYAKA50/0anU j+7dNyJh4ZSn7FWFqna71LkpwwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFB+qQQOY yRzv/7bjXXuCNJlllevkMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2 MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRjFEMUExREMz MjQwMTFFRkI3RkE0MjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwQkBghA/aADBwAkBghA/pEwDQYJKoZIhvcNAQELBQADggEB AJW6vCvxvuZ9pTfn0zQLdS+xhWDNKpXLPhIRGQixjQmTFgc3o8VIFW1WppzTnyWs 1rUBl1JAiJJWfrU2w5R7HWV7VjSmssq1cxhGy3x/TrkieFbA2ner3dtB8yOSo1kx dZqI0C5JPktplkf/nodUdtgcHqBRNAyt+rxBhHUS8k7MxmsTr37Bws9dTqJJBW2Z NjzBlj8QCXCt7IszxsaGatwbnliSBWODLd+F6UiqN/vr612ONly1OZSGM0Ytu2Ua hqjZTQ82qULL3r7SR/Zf0sZ+dYb1H4avusfjjuklwWAh69h6+wpJwlxDLAuG+WFI AzxvFAt8styJz/EAZ/noxrc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org