$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa File: A2E40A5C3AA511EFA73B8885C4F9AE02.roa (raw, json) Hash identifier: c1GO5NSlHxgfivgz4ecr8X6d2Er+kSo7j331Oxaf9sw= Subject key identifier: F9:E9:72:8B:81:88:D7:C3:41:A7:EB:96:97:48:09:96:2C:87:68:A2 Certificate issuer: /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D Certificate serial: 33E7 Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa Signing time: Fri 05 Jul 2024 08:10:20 +0000 ROA not before: Fri 05 Jul 2024 08:10:20 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 19905 IP address blocks: 202.78.16.0/20 maxlen: 20 202.78.24.0/24 maxlen: 24 202.78.27.0/24 maxlen: 24 202.78.28.0/23 maxlen: 23 2405:d980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Sep 2024 14:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13287 (0x33e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D Validity Not Before: Jul 5 08:10:20 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6687aa6c-63f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:d4:d4:94:3c:65:93:01:b9:a1:9e:ce:5c: 7d:ca:04:25:fb:57:23:04:21:98:22:78:f3:cf:10: d4:88:23:6a:02:54:b9:ca:60:dc:3f:09:ba:7d:05: 1c:92:f8:20:6f:38:5a:c2:28:93:f3:72:44:c8:c7: f0:b3:77:9e:17:e7:e3:52:cb:d2:ca:2c:59:aa:ae: cc:d5:9c:86:10:b9:7d:36:b2:12:6b:d8:e9:47:0d: 25:94:03:d8:e5:cc:e3:5f:a6:cb:bc:24:8a:f2:bf: 89:f8:b5:1f:2e:e2:14:3d:62:33:6c:ad:32:36:60: f3:df:46:18:45:de:1b:f8:ed:6e:39:9e:55:71:88: e7:94:af:c4:4a:de:27:43:23:9e:92:09:d1:55:7b: 79:54:aa:e9:58:c8:18:11:12:64:6a:7f:14:31:cf: dc:53:fc:51:2b:34:6c:e7:8f:db:d9:d2:00:b4:63: 07:47:ba:28:01:c2:40:a5:1d:3e:8c:4d:e8:6f:c2: 19:55:02:8f:82:6b:09:74:60:55:89:cc:22:05:31: 1a:89:10:c7:dc:e5:c4:62:af:f0:fe:29:f9:ea:69: b6:be:87:94:fb:f2:4b:27:e9:37:ac:4a:e9:44:8b: 7d:14:e1:8a:5c:db:54:58:ca:68:de:9f:b3:84:0b: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:72:8B:81:88:D7:C3:41:A7:EB:96:97:48:09:96:2C:87:68:A2 X509v3 Authority Key Identifier: keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/A2E40A5C3AA511EFA73B8885C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.78.16.0/20 IPv6: 2405:d980::/32 Signature Algorithm: sha256WithRSAEncryption 97:22:47:13:f8:40:09:5a:76:39:ec:0c:5d:09:cf:cc:4c:58: e9:fd:da:78:1b:a0:36:fb:9f:e4:19:a0:c5:51:01:9f:7a:ee: f4:63:e7:52:6d:d4:6f:9b:0a:2c:a2:08:54:72:98:51:5b:bb: 0e:dc:10:27:1a:a9:a7:f5:34:3f:fe:cf:2a:47:88:f6:78:53: de:72:da:e7:de:61:a3:ab:be:62:24:41:c3:52:9f:3e:ef:c2: 28:b4:96:c6:28:89:30:65:0f:77:25:09:99:a1:a7:1b:33:21: 5e:43:e3:f6:a8:2c:22:e8:0c:d4:0e:a2:b1:6d:84:4f:34:50: 97:03:67:50:e0:e3:aa:66:40:e4:be:b0:b0:7b:2f:cf:f1:1d: 71:25:e0:a7:80:85:c2:0d:88:5c:5a:0a:88:2b:e1:b1:1d:d5: c2:97:d3:83:df:a0:f5:8b:bb:59:a2:6e:2c:55:f2:9d:70:c4: dc:da:c8:3a:2a:07:3a:10:0f:72:cf:28:af:d8:50:77:d2:b5: 9c:3f:f1:1d:8e:5f:2d:9d:4a:3f:b6:36:51:f4:8d:f8:77:c3: 5e:ec:84:65:0c:d4:02:0d:d1:77:cb:a1:08:6a:2c:79:b8:7b: 61:8e:c6:e5:70:ea:be:31:45:f6:88:af:ad:29:cf:ce:e7:67: b7:ee:ff:c3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICM+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNzYxMTAvBgNVBAUTKDRERUJCOEUxMjIyQkUwRTNGMjNBRURCNzUyNDVFMEY5 N0I4N0M3NEQwHhcNMjQwNzA1MDgxMDIwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3YWE2Yy02M2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnovU1JQ8ZZMBuaGezlx9ygQl+1cjBCGYInjzzxDUiCNqAlS5ymDcPwm6fQUc kvggbzhawiiT83JEyMfws3eeF+fjUsvSyixZqq7M1ZyGELl9NrISa9jpRw0llAPY 5czjX6bLvCSK8r+J+LUfLuIUPWIzbK0yNmDz30YYRd4b+O1uOZ5VcYjnlK/ESt4n QyOekgnRVXt5VKrpWMgYERJkan8UMc/cU/xRKzRs54/b2dIAtGMHR7ooAcJApR0+ jE3ob8IZVQKPgmsJdGBVicwiBTEaiRDH3OXEYq/w/in56mm2voeU+/JLJ+k3rErp RIt9FOGKXNtUWMpo3p+zhAtg0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPnpcouB iNfDQafrlpdICZYsh2iiMB8GA1UdIwQYMBaAFE3ruOEiK+Dj8jrtt1JF4Pl7h8dN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE3Ni9BQUJBMzQ5ODFE OEIxMUUyQUE3NTZBRTYwOEIwMkNEMi9UZXU0NFNJcjRPUHlPdTIzVWtYZy1YdUh4 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RldTQ0U0lyNE9QeU91MjNVa1hnLVh1SHgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURBNzYvQUFCQTM0OTgxRDhCMTFFMkFBNzU2QUU2MDhCMDJDRDIvQTJFNDBBNUMz QUE1MTFFRkE3M0I4ODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATKThAwDQQCAAIwBwMFACQF2YAwDQYJKoZIhvcNAQELBQAD ggEBAJciRxP4QAladjnsDF0Jz8xMWOn92ngboDb7n+QZoMVRAZ967vRj51Jt1G+b CiyiCFRymFFbuw7cECcaqaf1ND/+zypHiPZ4U95y2ufeYaOrvmIkQcNSnz7vwii0 lsYoiTBlD3clCZmhpxszIV5D4/aoLCLoDNQOorFthE80UJcDZ1Dg46pmQOS+sLB7 L8/xHXEl4KeAhcINiFxaCogr4bEd1cKX04PfoPWLu1mibixV8p1wxNzayDoqBzoQ D3LPKK/YUHfStZw/8R2OXy2dSj+2NlH0jfh3w17shGUM1AIN0XfLoQhqLHm4e2GO xuVw6r4xRfaIr60pz87nZ7fu/8M= -----END CERTIFICATE-----Generated at Fri Sep 6 16:13:51 2024 by rpki-client on console-ams.rpki-client.org