$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa File: 1A8324E28DF311E7B616ED66C4F9AE02.roa (raw, json) Hash identifier: Xinmf1pF0nmD8G1dr/8oh0iZ6My9MutoBSmESSGjfhg= Subject key identifier: 17:CD:F9:61:09:57:50:3E:35:08:2A:B4:67:18:95:98:AD:AC:7F:8A Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 23C7 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa Signing time: Thu 02 May 2024 16:33:19 +0000 ROA not before: Thu 02 May 2024 16:33:18 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 4690 IP address blocks: 2001:200:e00::/40 maxlen: 40 2001:200:8000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9159 (0x23c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: May 2 16:33:18 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6633c04e-4e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fa:80:45:95:eb:1d:ce:fd:96:d6:c9:fd:76: 50:2a:2a:75:67:1d:13:93:ec:7f:f8:52:63:c8:3c: bf:2d:58:82:c9:a1:92:1a:14:9e:ff:ec:54:71:bc: a5:d3:c4:75:fb:6c:8c:21:66:f7:f5:4d:6b:18:de: e3:4a:d2:88:f1:ca:17:63:56:05:89:49:26:75:84: 6c:a7:72:e7:de:bc:1e:cc:ed:cd:2f:bf:89:26:c4: e8:50:7b:d5:d7:86:15:74:5b:2e:1a:4a:d9:52:a2: aa:2d:99:d0:ad:33:4a:c9:4f:df:a8:38:ea:73:88: c4:0f:d5:85:e2:14:20:f3:94:83:e4:47:2a:d0:f6: 90:3f:07:60:c7:5f:22:07:df:20:48:e1:ac:bf:6b: 53:52:11:37:86:4a:a1:ca:7c:82:19:6e:d2:5a:3d: 9a:d0:74:9e:37:f6:ef:49:a0:e4:5e:c3:45:42:d3: 1a:75:d7:7d:89:1d:05:32:a1:0d:5b:61:9c:c2:b8: 52:22:c5:2e:d5:3b:dc:ac:cd:0a:a6:0f:e3:ea:48: 2e:30:9c:4b:8d:6e:1d:e8:d6:75:75:08:ed:8a:8e: 4d:91:47:c4:b2:76:13:2d:82:56:d4:7c:4a:d0:3f: 75:ff:c7:38:ab:64:1a:27:78:a8:e2:a7:cd:f3:f6: 9b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CD:F9:61:09:57:50:3E:35:08:2A:B4:67:18:95:98:AD:AC:7F:8A X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/1A8324E28DF311E7B616ED66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:200:e00::/40 2001:200:8000::/35 Signature Algorithm: sha256WithRSAEncryption a0:f3:6e:f1:9d:97:d6:e4:05:92:d4:32:48:30:ec:af:d9:99: 3c:c3:4e:34:26:30:86:e8:6d:bc:ad:8f:d3:91:de:83:b7:3a: 7c:10:f3:f5:59:81:76:8d:1a:12:5e:72:57:75:de:7f:18:bf: 77:1e:05:46:11:e2:09:5e:f2:dc:e1:c1:01:c8:8c:6f:f9:6c: 16:39:ed:b4:00:82:66:de:0b:f4:b5:d2:29:7c:15:eb:8b:2b: c5:25:b7:d1:38:cd:34:22:41:bf:37:5d:12:13:42:26:41:60: 94:62:f8:f8:63:6b:3b:92:d5:9d:fc:3f:10:f6:c5:83:6b:00: 37:e9:e8:82:1e:18:a3:68:8e:d0:e6:db:fe:ac:a3:6b:d5:5e: 6a:ca:4f:dc:18:b8:c2:3f:c2:2a:31:7b:02:ce:d4:e5:b2:03: b8:c6:5b:08:d5:d0:1d:50:78:e3:c3:63:a3:a9:15:b2:26:e5: e0:d3:15:4d:dd:5b:ac:4f:81:2b:46:b0:24:b9:ab:cc:09:43: a4:c7:ed:b3:d6:d1:34:37:f4:8e:8a:26:df:ff:6c:9f:22:22: 94:52:24:83:72:5a:3e:5b:c0:ed:7b:33:7f:43:c8:52:cc:bc: f8:c4:3e:5a:e1:4b:b2:67:2f:38:f6:14:6e:22:fa:ed:ce:46: a6:9c:84:62 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICI8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjQwNTAyMTYzMzE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYzA0ZS00ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/qARZXrHc79ltbJ/XZQKip1Zx0Tk+x/+FJjyDy/LViCyaGSGhSe/+xUcbyl 08R1+2yMIWb39U1rGN7jStKI8coXY1YFiUkmdYRsp3Ln3rwezO3NL7+JJsToUHvV 14YVdFsuGkrZUqKqLZnQrTNKyU/fqDjqc4jED9WF4hQg85SD5Ecq0PaQPwdgx18i B98gSOGsv2tTUhE3hkqhynyCGW7SWj2a0HSeN/bvSaDkXsNFQtMaddd9iR0FMqEN W2GcwrhSIsUu1TvcrM0Kpg/j6kguMJxLjW4d6NZ1dQjtio5NkUfEsnYTLYJW1HxK 0D91/8c4q2QaJ3io4qfN8/abYQIDAQABo4ICnzCCApswHQYDVR0OBBYEFBfN+WEJ V1A+NQgqtGcYlZitrH+KMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI2QUEvNDZDN0YxNzI0RjE2MTFFNThEMkEzMzI3QzRGOUFFMDIvMUE4MzI0RTI4 REYzMTFFN0I2MTZFRDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgAgAQIADgMGBSABAgCAMA0GCSqGSIb3DQEBCwUAA4IBAQCg 827xnZfW5AWS1DJIMOyv2Zk8w040JjCG6G28rY/Tkd6Dtzp8EPP1WYF2jRoSXnJX dd5/GL93HgVGEeIJXvLc4cEByIxv+WwWOe20AIJm3gv0tdIpfBXriyvFJbfROM00 IkG/N10SE0ImQWCUYvj4Y2s7ktWd/D8Q9sWDawA36eiCHhijaI7Q5tv+rKNr1V5q yk/cGLjCP8IqMXsCztTlsgO4xlsI1dAdUHjjw2OjqRWyJuXg0xVN3VusT4ErRrAk uavMCUOkx+2z1tE0N/SOiibf/2yfIiKUUiSDclo+W8DtezN/Q8hSzLz4xD5a4Uuy Zy849hRuIvrtzkamnIRi -----END CERTIFICATE-----Generated at Tue May 14 17:00:14 2024 by rpki-client on console-fra.rpki-client.org