$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/EC6483F2A21011ED850DD13CC4F9AE02.roa File: EC6483F2A21011ED850DD13CC4F9AE02.roa (raw, json) Hash identifier: AqiKzfxAx2+y4fpUN8HuoTB2f9aC0LoVjP0OmgbAy0E= Subject key identifier: 86:52:0F:00:A2:F2:F7:50:ED:03:2F:62:65:CF:0F:B3:93:04:F9:D9 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 022B Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/EC6483F2A21011ED850DD13CC4F9AE02.roa Signing time: Mon 08 Apr 2024 09:30:11 +0000 ROA not before: Mon 08 Apr 2024 09:30:11 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 21433 IP address blocks: 2404:3d00:41c4::/47 maxlen: 47 2404:3d00:41c4::/48 maxlen: 48 2404:3d00:41c5::/48 maxlen: 48 2404:3d00:41ce::/47 maxlen: 47 2404:3d00:41ce::/48 maxlen: 48 2404:3d00:41cf::/48 maxlen: 48 2404:3d00:41d0::/47 maxlen: 47 2404:3d00:41d0::/48 maxlen: 48 2404:3d00:41d1::/48 maxlen: 48 2404:3d00:41d2::/47 maxlen: 47 2404:3d00:41d4::/47 maxlen: 47 2404:3d00:41d6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Apr 8 09:30:11 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6613b923-ff4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3c:eb:d0:8f:83:39:23:65:04:05:41:a7:1e: 22:48:2a:ed:5b:58:50:69:b7:40:d2:7a:fe:68:26: 56:fd:d2:b7:54:07:ef:59:ce:8c:58:dc:7e:b3:8a: 11:ac:5b:e9:a2:40:1d:38:ba:26:b8:83:68:7b:a3: a7:55:9f:77:82:60:27:e8:70:91:77:c8:72:a3:f2: 4b:2e:37:b6:0f:2c:7f:d3:bc:4d:d8:7b:e0:23:39: 61:98:ff:5f:71:25:f8:99:70:2b:bb:a7:eb:db:21: 34:ab:87:1d:6e:f0:fa:f0:32:9f:98:7a:54:4d:cb: 4e:f8:67:52:2c:9a:18:de:71:62:9c:14:df:93:b9: 8d:d6:aa:56:59:4f:6e:39:1e:a8:b9:53:b0:73:00: 78:48:c6:ac:aa:fe:f4:2a:7c:e3:59:b3:52:cc:2a: fc:a5:91:ae:ed:23:c0:06:d7:e6:5e:76:cb:bc:9c: 7a:de:5a:15:fb:7f:7f:bf:af:11:b8:f7:53:ca:a0: 48:e0:8e:ec:cb:84:79:d8:68:b5:c8:d3:27:e1:e8: 2a:54:b9:c0:6e:8f:96:e2:9d:6d:76:20:9e:53:74: 69:b7:39:cc:27:94:63:96:b7:16:b4:5c:3f:c7:38: 00:17:02:bd:17:b0:df:4a:2a:2d:51:34:64:d3:0a: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:52:0F:00:A2:F2:F7:50:ED:03:2F:62:65:CF:0F:B3:93:04:F9:D9 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/EC6483F2A21011ED850DD13CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:3d00:41c4::/47 2404:3d00:41ce::-2404:3d00:41d7:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:bf:fc:7a:3f:2b:6c:31:8e:93:e1:8a:d2:95:30:f5:0b:95: 76:bd:79:28:a0:98:58:62:53:fe:9b:d9:cb:c9:65:26:87:75: 8f:59:5c:32:e3:79:77:4c:3a:f3:54:da:ed:c0:46:39:2b:0b: 62:93:07:6d:87:b1:ba:73:47:7b:6b:49:3d:89:0a:ea:70:23: 73:78:f8:1d:64:b2:15:25:36:52:04:f1:7e:b5:c3:ba:14:26: 8c:06:47:bd:d7:5a:79:dc:46:64:61:95:9f:c6:3f:b9:2e:39: c8:4c:5c:88:0b:42:6f:53:fb:ea:d4:07:ab:62:38:98:10:69: 1e:c2:79:a6:81:f8:1b:34:1e:71:2e:76:02:c7:f3:4b:9f:80: ea:00:6f:00:5e:4e:f0:a0:5e:bf:b1:26:5a:32:11:c4:24:a4: 89:ce:34:eb:21:d4:87:ba:d3:29:1f:b3:e6:21:53:e8:eb:9f: e5:00:71:30:1e:15:83:fc:8a:2d:4a:08:fd:03:5c:3e:0b:ce: 50:6d:8d:97:4a:f6:2c:82:32:84:a5:dd:01:85:06:5d:19:6d: c1:df:7f:5d:33:cc:93:cc:8a:5d:6c:bf:91:1c:7a:fe:fc:af: d0:f2:ea:10:7b:0e:a2:26:b5:df:1c:54:75:79:5d:d4:bf:4b: 50:66:40:e9 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjQwNDA4MDkzMDExWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjEzYjkyMy1mZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDzr0I+DOSNlBAVBpx4iSCrtW1hQabdA0nr+aCZW/dK3VAfvWc6MWNx+s4oR rFvpokAdOLomuINoe6OnVZ93gmAn6HCRd8hyo/JLLje2Dyx/07xN2HvgIzlhmP9f cSX4mXAru6fr2yE0q4cdbvD68DKfmHpUTctO+GdSLJoY3nFinBTfk7mN1qpWWU9u OR6ouVOwcwB4SMasqv70KnzjWbNSzCr8pZGu7SPABtfmXnbLvJx63loV+39/v68R uPdTyqBI4I7sy4R52Gi1yNMn4egqVLnAbo+W4p1tdiCeU3RptznMJ5RjlrcWtFw/ xzgAFwK9F7DfSiotUTRk0wpAmQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIZSDwCi 8vdQ7QMvYmXPD7OTBPnZMB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI0QUYvQ0M3QjI1NUFEQ0E5MTFFQzk0RTNFMDI5QzRGOUFFMDIvRUM2NDgzRjJB MjEwMTFFRDg1MEREMTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMCMEAgACMB0DBwEkBD0AQcQwEgMHASQEPQBBzgMHAyQEPQBB0DANBgkqhkiG 9w0BAQsFAAOCAQEAAL/8ej8rbDGOk+GK0pUw9QuVdr15KKCYWGJT/pvZy8llJod1 j1lcMuN5d0w681Ta7cBGOSsLYpMHbYexunNHe2tJPYkK6nAjc3j4HWSyFSU2UgTx frXDuhQmjAZHvddaedxGZGGVn8Y/uS45yExciAtCb1P76tQHq2I4mBBpHsJ5poH4 GzQecS52AsfzS5+A6gBvAF5O8KBev7EmWjIRxCSkic406yHUh7rTKR+z5iFT6Ouf 5QBxMB4Vg/yKLUoI/QNcPgvOUG2Nl0r2LIIyhKXdAYUGXRltwd9/XTPMk8yKXWy/ kRx6/vyv0PLqEHsOoia13xxUdXld1L9LUGZA6Q== -----END CERTIFICATE-----Generated at Sat May 25 06:05:17 2024 by rpki-client on console-ams.rpki-client.org