$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa File: 2A3161763D9F11EEACFF646FC4F9AE02.roa (raw, json) Hash identifier: MHD+Vqr34LxIYPoPmX4LlFwonzJL0QSfCHfJusXHZes= Subject key identifier: B5:B2:1D:CD:8D:69:A9:E3:BA:E1:BA:21:B8:BE:84:7E:4B:8E:0B:41 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 16E3 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa Signing time: Mon 04 Dec 2023 17:04:24 +0000 ROA not before: Mon 04 Dec 2023 17:04:24 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133398 IP address blocks: 2401:f9c0:2600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5859 (0x16e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Dec 4 17:04:24 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e0698-a11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:84:ba:db:c1:85:1b:a8:0d:03:09:dd:0b: 64:8b:8b:83:6b:73:c3:3b:73:f8:8f:99:b5:39:06: d6:04:0d:88:f6:5e:f5:58:4c:fb:60:a4:8f:22:d9: a1:2c:3c:2d:27:a6:20:8d:ed:77:fc:7d:13:fc:ae: 00:39:e1:4a:13:e5:d0:70:ab:6e:d6:7a:f3:7c:03: 4e:ea:28:2f:55:8b:ad:de:e3:55:f5:60:3f:e8:7a: ad:f1:21:e2:61:f4:f7:7f:3e:b2:fb:57:29:c2:d3: 0e:22:7e:73:ed:f7:13:1b:e1:b0:67:ef:03:0a:5c: cc:7b:32:8b:68:79:f3:fb:cc:f7:1c:03:16:82:2b: b0:78:ea:54:2e:62:59:8f:90:5a:ad:4f:10:91:4f: a6:4e:9c:5e:bb:29:a9:c9:5b:9e:8d:a4:fc:c2:57: 51:00:3c:0c:50:bc:55:f6:a0:61:48:b3:f2:23:df: 27:76:4b:fe:34:fd:02:ba:96:f1:f6:de:9f:71:37: 68:60:23:61:26:9b:73:cf:a6:49:7c:ee:df:4c:9e: 04:2a:95:32:4b:5d:14:e0:f1:45:4d:f0:3f:e0:0b: 4c:50:a4:cb:d0:af:fe:b6:0a:30:68:38:9a:cd:47: 6a:ca:7c:f1:0c:6f:9f:47:fe:9b:44:b4:5c:e7:7c: bd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B2:1D:CD:8D:69:A9:E3:BA:E1:BA:21:B8:BE:84:7E:4B:8E:0B:41 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/2A3161763D9F11EEACFF646FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:f9c0:2600::/40 Signature Algorithm: sha256WithRSAEncryption 31:38:23:42:7d:06:b6:64:cc:56:d4:22:54:69:ff:ff:c9:d1: 64:6a:f1:23:be:15:8a:84:7d:cd:20:46:f4:6c:19:0e:45:52: 24:5a:57:18:94:c1:05:d1:9e:57:13:82:04:5b:b5:88:09:41: ba:f2:02:b1:59:f3:98:cd:15:84:b6:f6:fc:3d:f0:ef:f4:df: 4a:98:93:21:5b:74:2e:a5:bd:60:2b:b0:ba:ad:c5:26:cb:fc: c1:12:2a:14:26:ba:36:4a:81:77:a2:33:10:d9:39:57:c0:31: eb:7d:0a:32:e2:27:ea:fc:c4:21:c6:40:e0:72:cc:6d:f3:66: 67:bd:ed:09:41:1f:2f:80:c0:e5:d1:52:18:b6:09:3b:d8:0c: b9:24:f7:c5:af:ee:33:63:78:4a:95:c3:e2:43:d7:11:15:5d: 99:4d:40:45:ef:f5:d1:c0:8d:b1:c9:b6:49:30:52:39:62:02: 30:5d:4c:b6:d3:8e:3f:9a:ae:66:8b:37:13:0f:93:a3:e4:0f: d5:ac:23:21:bc:29:d9:04:ee:4d:c6:ea:36:3c:f8:56:22:42: 79:f9:bf:a9:bd:ca:7c:fb:5d:8c:3e:fc:c0:aa:5d:d8:1f:3f: f1:68:5b:47:81:c6:34:50:64:c8:ae:93:80:59:8c:57:f7:8d: 2c:97:63:b8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICFuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjMxMjA0MTcwNDI0WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMDY5OC1hMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKSEutvBhRuoDQMJ3Qtki4uDa3PDO3P4j5m1OQbWBA2I9l71WEz7YKSPItmh LDwtJ6Ygje13/H0T/K4AOeFKE+XQcKtu1nrzfANO6igvVYut3uNV9WA/6Hqt8SHi YfT3fz6y+1cpwtMOIn5z7fcTG+GwZ+8DClzMezKLaHnz+8z3HAMWgiuweOpULmJZ j5BarU8QkU+mTpxeuympyVuejaT8wldRADwMULxV9qBhSLPyI98ndkv+NP0Cupbx 9t6fcTdoYCNhJptzz6ZJfO7fTJ4EKpUyS10U4PFFTfA/4AtMUKTL0K/+tgowaDia zUdqynzxDG+fR/6bRLRc53y9uwIDAQABo4IClzCCApMwHQYDVR0OBBYEFLWyHc2N aanjuuG6Ibi+hH5LjgtBMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMUUvQzFGQTA4MkNDOENCMTFFNzkwQTg4MTM4QzRGOUFFMDIvMkEzMTYxNzYz RDlGMTFFRUFDRkY2NDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkAfnAJjANBgkqhkiG9w0BAQsFAAOCAQEAMTgjQn0GtmTM VtQiVGn//8nRZGrxI74VioR9zSBG9GwZDkVSJFpXGJTBBdGeVxOCBFu1iAlBuvIC sVnzmM0VhLb2/D3w7/TfSpiTIVt0LqW9YCuwuq3FJsv8wRIqFCa6NkqBd6IzENk5 V8Ax630KMuIn6vzEIcZA4HLMbfNmZ73tCUEfL4DA5dFSGLYJO9gMuST3xa/uM2N4 SpXD4kPXERVdmU1ARe/10cCNscm2STBSOWICMF1MttOOP5quZos3Ew+To+QP1awj Ibwp2QTuTcbqNjz4ViJCefm/qb3KfPtdjD78wKpd2B8/8WhbR4HGNFBkyK6TgFmM V/eNLJdjuA== -----END CERTIFICATE-----Generated at Thu May 2 20:04:38 2024 by rpki-client on console-ams.rpki-client.org