$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa File: 1409168E1E3A11EE8485307CC4F9AE02.roa (raw, json) Hash identifier: 8P8JPeyYUjVRMwYnIcITkZ43qO2oumphcT4Qe6jYV/0= Subject key identifier: 7A:01:B6:4F:9C:F7:A0:28:1A:90:7F:9B:67:62:90:ED:7D:1B:52:71 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 02B1 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa Signing time: Mon 13 May 2024 04:08:00 +0000 ROA not before: Mon 13 May 2024 04:08:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 201217 IP address blocks: 2400:70e0:bae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 13 04:08:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66419220-8bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:6f:53:d2:8a:cb:9d:80:ee:63:0d:b1:ef: 65:da:a3:88:19:fd:a7:b8:05:f6:8a:23:44:4c:2c: 1c:f7:7d:61:1d:8d:c6:2a:8e:89:a9:85:26:a1:fa: 73:f5:9d:fd:9d:b4:62:54:70:e9:4f:8b:5f:b4:ae: 11:ce:70:ee:71:4c:ef:04:cb:cf:9a:b3:b4:aa:11: c1:85:8d:b6:0a:63:0c:77:ad:8a:d8:2d:ab:51:ad: 9a:ef:58:fa:c5:6f:31:1f:db:60:61:25:fc:ba:c8: 45:4b:24:be:ab:4d:9a:21:65:98:c5:ec:40:cb:41: 35:e4:76:29:4a:d7:b5:69:95:9b:15:2b:9c:2f:1c: 78:b5:cd:4f:89:75:58:2c:a5:7c:69:48:bd:d2:0f: 51:a8:51:70:18:92:58:ff:50:94:8e:26:a2:d4:9b: e9:2a:77:0a:72:03:08:c2:c7:69:b1:fa:90:6e:cb: 57:b5:bf:53:44:e2:a4:46:93:42:0e:b0:db:ee:4d: d5:57:46:ed:f7:b5:b5:4a:9d:22:ed:68:3d:76:57: 55:24:ae:bf:87:8d:d6:08:3c:de:1b:3b:74:91:2e: 03:ac:a3:d3:da:db:e8:82:d5:cf:32:f2:30:c9:56: 3b:45:be:82:a6:ac:e4:3c:d1:f0:53:a0:9c:37:40: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:01:B6:4F:9C:F7:A0:28:1A:90:7F:9B:67:62:90:ED:7D:1B:52:71 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/1409168E1E3A11EE8485307CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bae::/48 Signature Algorithm: sha256WithRSAEncryption 19:5b:a6:ec:31:38:d7:29:09:46:f1:32:d5:fe:1f:51:54:c3: da:c7:67:50:7b:e4:8b:66:29:31:20:25:20:91:5d:81:00:fb: 4b:5a:54:5e:d9:21:d3:aa:2a:81:e7:5c:b0:38:6b:d8:43:ef: c2:eb:c8:9d:c2:bf:9c:48:f3:43:8f:a2:e8:ba:fb:64:d1:bf: a2:f3:91:f0:fb:07:d4:38:03:47:e4:d5:e2:5a:5a:59:f5:de: e3:9d:56:e6:08:61:3b:1d:16:e4:f0:15:8a:e0:1d:a0:3d:b1: 80:3d:3e:7b:53:f6:b2:cf:88:a1:63:d9:9c:93:24:10:84:5c: 91:24:d4:e8:2d:89:8f:df:77:56:4b:b6:c5:08:10:56:76:23: cd:08:d6:b9:b7:52:61:46:f2:e0:82:65:d4:02:e3:db:57:63: ec:22:d2:70:0f:99:2a:55:23:1c:e0:d4:a5:25:f7:c5:5e:d3: c2:4c:d6:87:ec:3b:aa:15:1c:93:e2:07:f9:14:db:9c:b7:b1: 17:21:21:63:fe:84:de:3a:45:f8:77:89:5b:37:7e:b6:52:6b: 62:98:0d:ec:2a:4a:d1:c6:85:2f:64:ef:b5:0b:f2:c4:4a:23: a8:ff:e3:22:ff:a7:6a:46:cb:26:f6:f2:07:c1:0d:75:ed:e5: 49:51:b9:b2 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjQwNTEzMDQwODAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTIyMC04YmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8RvU9KKy52A7mMNse9l2qOIGf2nuAX2iiNETCwc931hHY3GKo6JqYUmofpz 9Z39nbRiVHDpT4tftK4RznDucUzvBMvPmrO0qhHBhY22CmMMd62K2C2rUa2a71j6 xW8xH9tgYSX8ushFSyS+q02aIWWYxexAy0E15HYpSte1aZWbFSucLxx4tc1PiXVY LKV8aUi90g9RqFFwGJJY/1CUjiai1JvpKncKcgMIwsdpsfqQbstXtb9TROKkRpNC DrDb7k3VV0bt97W1Sp0i7Wg9dldVJK6/h43WCDzeGzt0kS4DrKPT2tvogtXPMvIw yVY7Rb6CpqzkPNHwU6CcN0B9bQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHoBtk+c 96AoGpB/m2dikO19G1JxMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvMTQwOTE2OEUx RTNBMTFFRTg0ODUzMDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAHDgC64wDQYJKoZIhvcNAQELBQADggEBABlbpuwxONcp CUbxMtX+H1FUw9rHZ1B75ItmKTEgJSCRXYEA+0taVF7ZIdOqKoHnXLA4a9hD78Lr yJ3Cv5xI80OPoui6+2TRv6LzkfD7B9Q4A0fk1eJaWln13uOdVuYIYTsdFuTwFYrg HaA9sYA9PntT9rLPiKFj2ZyTJBCEXJEk1OgtiY/fd1ZLtsUIEFZ2I80I1rm3UmFG 8uCCZdQC49tXY+wi0nAPmSpVIxzg1KUl98Ve08JM1ofsO6oVHJPiB/kU25y3sRch IWP+hN46Rfh3iVs3frZSa2KYDewqStHGhS9k77UL8sRKI6j/4yL/p2pGyyb28gfB DXXt5UlRubI= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org