$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa File: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (raw, json) Hash identifier: gQDQQRMLSj9QQTvCXEs/CWWGTDVP07YUAOIJOQNCiro= Subject key identifier: 0E:8C:FD:EB:5C:12:E6:96:00:34:CB:2A:B7:E7:19:64:E0:D3:14:14 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 02B4 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa Signing time: Mon 13 May 2024 04:08:05 +0000 ROA not before: Mon 13 May 2024 04:08:05 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 210445 IP address blocks: 2400:70e0:bac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: May 13 04:08:05 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66419225-2938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:75:d3:b9:3f:1c:8a:86:10:e4:18:2c:a5: 19:8f:58:14:c0:4d:43:49:b3:aa:7a:a3:7f:bc:e0: e9:c7:43:56:36:28:90:c8:e4:7b:b9:ad:41:2a:83: 57:79:fc:28:1f:10:70:5b:1a:f9:8d:24:24:5b:79: 2c:9d:d0:bf:3f:16:fa:72:85:85:6a:72:94:a4:05: 1a:20:bf:00:87:97:3e:31:a7:10:22:54:5c:69:b0: 5e:1b:c4:64:b5:46:16:4d:30:20:e5:f6:69:47:c5: 9e:79:85:af:ab:e3:75:c6:f5:d3:d9:1c:23:b1:8b: 03:db:85:ef:42:f8:94:f4:e4:92:9b:62:67:6c:e2: 63:76:60:e1:ec:7e:7c:b4:35:a3:0e:cd:82:52:53: b8:6f:f4:dd:18:f1:59:97:48:0f:fd:e2:72:62:01: 71:29:73:9c:99:23:0c:3a:38:f2:d4:2a:6f:90:1f: 05:9a:52:6d:32:b8:3e:ab:2a:1b:0e:a9:5d:90:e1: af:53:92:88:ec:19:be:1f:82:7b:a3:6b:63:cd:38: 6c:82:db:cb:fb:cc:05:6b:c4:38:7b:18:a2:3d:73: c4:58:63:8c:39:e8:81:ec:50:c7:e8:56:04:45:d8: 68:2e:4b:84:e8:85:38:86:b0:3b:34:97:33:fe:10: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:FD:EB:5C:12:E6:96:00:34:CB:2A:B7:E7:19:64:E0:D3:14:14 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/5DA1D170593F11ED9D9F2D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:70e0:bac::/48 Signature Algorithm: sha256WithRSAEncryption 96:88:4c:d8:c8:85:ca:02:a4:16:05:37:36:92:88:b9:39:79: 95:5c:e5:09:22:7a:27:9f:b2:3b:33:ae:44:8e:9c:2f:d6:f8: 0c:32:6a:a3:9d:94:83:78:3a:cd:2d:9a:bb:1d:e4:02:3f:3f: 91:46:ac:20:d9:bb:b5:b1:01:e0:2d:b7:9b:46:86:7b:37:50: ce:b2:23:29:e8:1f:c5:3d:91:86:8c:b1:d1:9d:f6:bf:37:df: 61:f1:e5:cd:f2:11:13:30:f2:30:b0:7c:24:72:03:f9:dd:bb: 8b:61:8c:fc:20:c5:36:75:69:9e:bc:ca:69:0c:77:48:1a:3a: 13:cb:3f:37:0c:ea:06:88:e2:ab:7f:1b:40:84:1c:ca:ef:44: e5:d3:71:c1:0c:dd:f7:78:08:c1:fc:2f:af:f8:31:a6:6e:78: 73:c3:41:f4:73:77:72:36:f3:f8:ed:10:0e:7d:fc:27:dc:ff: 23:83:74:ec:2e:11:05:47:9b:44:34:0c:ea:d4:9b:4b:8f:73: 50:be:91:19:a5:43:33:ee:a0:75:c3:61:78:f8:d4:c6:70:54: c6:da:d6:a6:9e:f0:86:6c:fc:ba:60:16:6e:51:30:84:31:d2: 3b:1a:3f:e8:f1:7d:ba:c9:17:fc:a8:01:e2:5f:3e:ea:d9:49: de:1c:1e:ec -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjQwNTEzMDQwODA1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTIyNS0yOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU5107k/HIqGEOQYLKUZj1gUwE1DSbOqeqN/vODpx0NWNiiQyOR7ua1BKoNX efwoHxBwWxr5jSQkW3ksndC/Pxb6coWFanKUpAUaIL8Ah5c+MacQIlRcabBeG8Rk tUYWTTAg5fZpR8WeeYWvq+N1xvXT2RwjsYsD24XvQviU9OSSm2JnbOJjdmDh7H58 tDWjDs2CUlO4b/TdGPFZl0gP/eJyYgFxKXOcmSMMOjjy1CpvkB8FmlJtMrg+qyob DqldkOGvU5KI7Bm+H4J7o2tjzThsgtvL+8wFa8Q4exiiPXPEWGOMOeiB7FDH6FYE RdhoLkuE6IU4hrA7NJcz/hClywIDAQABo4ICmDCCApQwHQYDVR0OBBYEFA6M/etc EuaWADTLKrfnGWTg0xQUMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI4MzcvOUQ5MEFCNjJDMTVBMTFFQ0E0NEY1MzYwQzRGOUFFMDIvNURBMUQxNzA1 OTNGMTFFRDlEOUYyRDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAHDgC6wwDQYJKoZIhvcNAQELBQADggEBAJaITNjIhcoC pBYFNzaSiLk5eZVc5QkieiefsjszrkSOnC/W+AwyaqOdlIN4Os0tmrsd5AI/P5FG rCDZu7WxAeAtt5tGhns3UM6yIynoH8U9kYaMsdGd9r8332Hx5c3yERMw8jCwfCRy A/ndu4thjPwgxTZ1aZ68ymkMd0gaOhPLPzcM6gaI4qt/G0CEHMrvROXTccEM3fd4 CMH8L6/4MaZueHPDQfRzd3I28/jtEA59/Cfc/yODdOwuEQVHm0Q0DOrUm0uPc1C+ kRmlQzPuoHXDYXj41MZwVMba1qae8IZs/LpgFm5RMIQx0jsaP+jxfbrJF/yoAeJf PurZSd4cHuw= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org