$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa File: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (raw, json) Hash identifier: KLVK6zfk1sI4e7G8hRism5bZ4U3Yqq/t49H1ShoVhoA= Subject key identifier: 7C:F9:5F:F6:28:7A:92:04:A3:F4:8F:98:CC:0A:C1:C9:AA:1A:6B:18 Certificate issuer: /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Certificate serial: 02 Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa Signing time: Thu 12 Sep 2024 02:35:55 +0000 ROA not before: Thu 12 Sep 2024 02:35:55 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 153053 IP address blocks: 2401:ae60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F Validity Not Before: Sep 12 02:35:55 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66e2538b-a638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:a5:dc:9f:4f:c0:4a:40:c0:61:43:39:db: 79:3e:91:64:a1:93:7d:0d:1a:e2:bb:13:d6:67:ef: ed:43:3a:2d:bf:0d:c6:5f:4f:7d:31:3e:0f:10:c9: 35:4d:98:80:d7:04:44:e3:dd:b4:4e:9a:71:0f:76: 6f:84:d2:90:1f:ea:7a:a8:8e:4b:ab:1d:be:99:18: 2d:64:a2:8d:9e:7d:ad:d4:e8:c2:53:dd:e0:34:b0: 74:ce:92:2e:1b:74:07:a0:a0:95:b1:6b:6c:e7:7e: a3:43:ed:e6:ed:b8:fa:b3:12:79:5c:95:c9:ac:78: 96:99:30:e6:a4:cb:2a:28:4a:af:5e:55:c5:bc:d2: 71:ad:bf:48:f8:56:fb:f8:20:3a:48:79:4f:41:dc: ae:65:98:90:2b:f1:05:9b:3e:76:59:d2:86:54:2a: ac:7a:cf:1c:28:de:65:e2:ef:79:9e:47:f7:e1:53: 24:98:1e:21:d6:63:1b:46:71:c6:b6:ee:e3:70:80: e9:2e:d5:01:ec:7e:aa:c2:43:79:98:8d:17:cc:5f: 53:30:47:2a:b5:c5:10:55:da:e5:8d:30:66:2d:fb: c0:85:b5:37:bc:d0:e9:c7:4a:31:ce:48:cc:56:40: 10:be:61:22:33:e4:4c:c2:56:fc:9f:12:40:12:3b: 1b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F9:5F:F6:28:7A:92:04:A3:F4:8F:98:CC:0A:C1:C9:AA:1A:6B:18 X509v3 Authority Key Identifier: keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:ae60::/32 Signature Algorithm: sha256WithRSAEncryption 6e:32:75:00:a2:c5:31:13:f9:02:84:44:cb:ea:30:18:3d:bd: f7:d2:af:71:12:ec:cf:20:72:6e:b3:0d:4a:5f:5b:96:bb:36: 08:86:ae:81:70:ff:2a:25:47:c3:ff:04:88:6b:f0:fd:36:94: 59:66:55:e2:0c:6e:59:64:97:72:df:cf:61:08:07:b6:dc:1c: 88:ab:e9:90:31:5b:93:1d:24:80:12:12:56:c7:0c:41:48:d9: 15:ff:ee:64:8b:9b:3b:40:4f:ba:c6:dc:39:60:bc:68:5f:cb: 21:ef:cb:6a:ee:e4:c9:8a:00:09:8c:1b:c7:e0:51:3b:78:df: 2f:66:fa:b5:f1:33:b7:0b:2c:40:1b:d7:19:0e:9a:58:b7:83: fe:a1:59:e0:eb:99:46:c3:3d:46:3c:c4:1d:71:7a:0e:a4:12: 65:10:37:eb:04:b4:e7:8d:2a:c6:92:ae:c2:f4:d4:10:1f:ba: 95:70:e4:30:51:a5:e5:7b:ea:65:2e:aa:79:fd:8f:1b:d1:5b: 18:52:b3:0a:6a:0c:5b:b1:14:c9:46:8a:6c:3d:46:99:10:9c: 56:f7:b3:d2:86:4b:3a:ed:7b:89:8e:75:9a:01:72:ba:48:04: b7:4b:cc:e4:7e:d7:75:ba:c4:57:b1:c2:98:e2:d6:b8:f7:89: e3:c3:3b:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDM5MTExMC8GA1UEBRMoNTNFN0NFOTQzNTMzRjhEM0MwNTY0OUYyOTQ2ODJBMjZG ODE0RjE1RjAeFw0yNDA5MTIwMjM1NTVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTI1MzhiLWE2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9MaXcn0/ASkDAYUM523k+kWShk30NGuK7E9Zn7+1DOi2/DcZfT30xPg8QyTVN mIDXBETj3bROmnEPdm+E0pAf6nqojkurHb6ZGC1koo2efa3U6MJT3eA0sHTOki4b dAegoJWxa2znfqND7ebtuPqzEnlclcmseJaZMOakyyooSq9eVcW80nGtv0j4Vvv4 IDpIeU9B3K5lmJAr8QWbPnZZ0oZUKqx6zxwo3mXi73meR/fhUySYHiHWYxtGcca2 7uNwgOku1QHsfqrCQ3mYjRfMX1MwRyq1xRBV2uWNMGYt+8CFtTe80OnHSjHOSMxW QBC+YSIz5EzCVvyfEkASOxshAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUfPlf9ih6 kgSj9I+YzArByaoaaxgwHwYDVR0jBBgwFoAUU+fOlDUz+NPAVknylGgqJvgU8V8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MzkxLzAxOUZGMTRFNzBB RTExRUZBODQ4QjA2OEM0RjlBRTAyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThW OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVS1mT2xEVXotTlBBVmtueWxHZ3FKdmdVOFY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9CQzIxM0UzQzcw QUYxMUVGOUM5QjJDMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQBrmAwDQYJKoZIhvcNAQELBQADggEBAG4ydQCixTET+QKE RMvqMBg9vffSr3ES7M8gcm6zDUpfW5a7NgiGroFw/yolR8P/BIhr8P02lFlmVeIM bllkl3Lfz2EIB7bcHIir6ZAxW5MdJIASElbHDEFI2RX/7mSLmztAT7rG3DlgvGhf yyHvy2ru5MmKAAmMG8fgUTt43y9m+rXxM7cLLEAb1xkOmli3g/6hWeDrmUbDPUY8 xB1xeg6kEmUQN+sEtOeNKsaSrsL01BAfupVw5DBRpeV76mUuqnn9jxvRWxhSswpq DFuxFMlGimw9RpkQnFb3s9KGSzrte4mOdZoBcrpIBLdLzOR+13W6xFexwpji1rj3 iePDO34= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:49 2024 by rpki-client on console-ams.rpki-client.org