$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa File: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (raw, json) Hash identifier: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0= Subject key identifier: 4D:6F:BF:C4:F6:0A:46:BB:8C:B2:3E:F7:46:EA:99:A4:09:C0:DE:17 Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 257F Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa Signing time: Thu 12 Sep 2024 16:22:50 +0000 ROA not before: Thu 12 Sep 2024 16:22:50 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58691 IP address blocks: 2407:1500::/33 maxlen: 36 2407:1500::/48 maxlen: 48 2407:1500:1::/48 maxlen: 48 2407:1500:2::/48 maxlen: 48 2407:1500:3::/48 maxlen: 48 2407:1500:4::/48 maxlen: 48 2407:1500:5::/48 maxlen: 48 2407:1500:6::/48 maxlen: 48 2407:1500:7::/48 maxlen: 48 2407:1500:8::/48 maxlen: 48 2407:1500:9::/48 maxlen: 48 2407:1500:10::/48 maxlen: 48 2407:1500:8000::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9599 (0x257f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Sep 12 16:22:50 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66e31559-b0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:34:13:e7:c3:1f:dd:6e:f8:ee:e9:06:53: e9:e3:20:e7:ba:bd:fa:1e:7e:9f:b4:35:8e:a9:26: ed:3a:16:b5:72:e1:7a:49:0f:5d:57:99:4b:a5:d2: cf:40:a3:19:13:23:9a:2d:b6:c7:47:91:d3:82:00: 73:06:7a:a5:48:8d:1d:a8:e5:6f:87:a4:ad:82:db: 64:65:62:e3:70:c4:32:00:db:ca:7b:e1:53:b1:1e: 67:1a:24:c4:fb:70:ba:77:37:37:86:2f:68:b2:88: 18:cb:22:67:61:10:06:e5:8e:bb:e9:24:f5:36:21: 5e:d5:20:b8:fe:3e:36:be:9a:51:95:89:dd:26:cb: b5:90:de:36:f1:21:02:86:ae:d0:e5:7f:1a:f9:23: d0:b3:e1:1c:75:f6:20:0a:73:25:c7:72:ea:b3:85: 59:d5:b8:07:ab:e9:45:0d:f3:26:75:14:ca:9d:26: 56:12:36:08:5f:4f:d4:ce:ac:75:dc:d1:a8:dd:0a: a0:42:63:95:f2:b6:09:88:93:7c:4e:28:20:e5:f1: af:0f:c6:f3:b3:9f:3c:0b:c6:8b:8c:fa:90:60:2e: 86:1b:69:fa:d6:a3:f5:5f:4f:1a:7a:22:79:7b:26: 61:c6:02:3f:7e:77:21:fe:17:3f:31:6b:93:d7:c5: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6F:BF:C4:F6:0A:46:BB:8C:B2:3E:F7:46:EA:99:A4:09:C0:DE:17 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/9ED46D5C72F611EE857CC13FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:1500::/32 Signature Algorithm: sha256WithRSAEncryption 0b:c1:84:8d:d2:7b:dd:66:25:c9:02:cd:d7:a0:0e:85:16:23: 40:07:4b:69:ab:e2:25:04:69:5e:e1:2d:67:8d:9e:56:b5:b6: 1c:70:61:cb:18:56:db:54:07:f9:16:37:7a:a7:78:14:f2:da: 48:85:b5:7b:3f:b6:bc:b4:28:6b:be:b9:07:cf:27:cc:0e:30: d5:e6:9a:b0:d9:c1:6d:e2:be:3c:22:4b:e4:bb:a7:f9:d4:1b: 82:92:20:6e:92:d5:21:f4:75:15:ed:62:27:be:b1:d6:94:ca: e9:48:01:fd:23:f8:5f:36:22:63:78:79:66:13:c1:91:9a:cc: a6:4d:d5:4e:f4:5b:db:26:19:d3:ca:2a:87:c4:89:c5:04:1d: bb:3e:94:5f:59:33:b1:56:7a:94:f9:6b:57:e0:a1:0d:73:2f: 7b:62:55:96:68:a9:5c:91:f1:ae:ec:c0:b9:cf:b3:94:ac:02: b0:19:2f:ed:d1:3b:f1:f4:60:62:86:5d:4b:21:96:69:4f:ca: f9:07:c2:b4:fb:7b:5c:c4:af:ea:58:e1:b6:64:ae:52:4d:76: 93:16:00:2c:35:ab:7f:ee:a3:44:54:57:86:cf:28:06:8f:27: d4:42:6c:f8:24:9f:e6:90:50:b0:bd:f8:cf:35:01:b7:d4:a5: a6:a2:64:98 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICJX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjQwOTEyMTYyMjUwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzMTU1OS1iMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt40E+fDH91u+O7pBlPp4yDnur36Hn6ftDWOqSbtOha1cuF6SQ9dV5lLpdLP QKMZEyOaLbbHR5HTggBzBnqlSI0dqOVvh6StgttkZWLjcMQyANvKe+FTsR5nGiTE +3C6dzc3hi9osogYyyJnYRAG5Y676ST1NiFe1SC4/j42vppRlYndJsu1kN428SEC hq7Q5X8a+SPQs+EcdfYgCnMlx3Lqs4VZ1bgHq+lFDfMmdRTKnSZWEjYIX0/Uzqx1 3NGo3QqgQmOV8rYJiJN8Tigg5fGvD8bzs588C8aLjPqQYC6GG2n61qP1X08aeiJ5 eyZhxgI/fnch/hc/MWuT18UwaQIDAQABo4ICljCCApIwHQYDVR0OBBYEFE1vv8T2 Cka7jLI+90bqmaQJwN4XMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc1NEYvMkFEMTZGMzAxQTRBMTFFNTkyMDlFRDcyQzRGOUFFMDIvOUVENDZENUM3 MkY2MTFFRTg1N0NDMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBxUAMA0GCSqGSIb3DQEBCwUAA4IBAQALwYSN0nvdZiXJ As3XoA6FFiNAB0tpq+IlBGle4S1njZ5WtbYccGHLGFbbVAf5Fjd6p3gU8tpIhbV7 P7a8tChrvrkHzyfMDjDV5pqw2cFt4r48Ikvku6f51BuCkiBuktUh9HUV7WInvrHW lMrpSAH9I/hfNiJjeHlmE8GRmsymTdVO9FvbJhnTyiqHxInFBB27PpRfWTOxVnqU +WtX4KENcy97YlWWaKlckfGu7MC5z7OUrAKwGS/t0Tvx9GBihl1LIZZpT8r5B8K0 +3tcxK/qWOG2ZK5STXaTFgAsNat/7qNEVFeGzygGjyfUQmz4JJ/mkFCwvfjPNQG3 1KWmomSY -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org