$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa File: E19EC38C532711EF9E83C841C4F9AE02.roa (raw, json) Hash identifier: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI= Subject key identifier: 3F:00:59:E2:1F:3D:E3:F3:FB:02:D6:E0:C2:B3:1B:DA:6D:C2:07:F3 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: BF Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa Signing time: Mon 05 Aug 2024 12:40:23 +0000 ROA not before: Mon 05 Aug 2024 12:40:23 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 1054 IP address blocks: 2401:1fe0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Aug 5 12:40:23 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b0c836-ebe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:80:57:c0:f1:b0:a3:43:df:9a:c9:85:d5: 6d:8a:b3:a3:e6:d9:b8:61:78:8a:c3:18:4b:7c:59: 1f:73:c3:6e:fb:bf:4b:a1:c8:49:47:92:d7:02:d6: e9:7a:54:f7:4f:94:ec:ab:1b:17:87:af:e1:d3:50: 93:4a:2a:7c:b7:bb:b5:75:07:30:4e:23:be:7e:dc: 57:92:a0:04:c1:4a:6b:7c:86:83:64:88:8e:48:7b: 18:fc:31:08:b3:47:e2:95:d4:06:34:55:82:98:45: 91:39:19:ef:d8:05:cb:cb:22:b8:d2:3a:90:ba:61: a3:98:33:11:f3:da:92:85:89:f1:2f:78:e7:8b:fd: a1:e9:2a:0a:79:80:1f:95:9b:52:d9:21:51:cc:f0: 1b:13:87:3c:80:45:96:de:dd:36:43:d9:6a:2f:d7: 45:5c:36:34:5e:85:e1:15:6c:dc:7e:37:32:3b:5b: f3:74:10:f0:dd:88:45:e5:ca:e0:95:11:02:d9:03: 0d:73:25:02:cc:f2:fc:77:27:f5:cf:94:88:b5:56: 63:7c:c2:62:b2:ff:83:a5:0f:f3:43:07:b5:57:06: b8:1c:86:6e:fa:fb:92:2c:a4:ad:20:fb:3c:d9:d3: d5:ce:78:19:df:2c:3e:bd:d7:7a:a6:98:b4:a4:14: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:59:E2:1F:3D:E3:F3:FB:02:D6:E0:C2:B3:1B:DA:6D:C2:07:F3 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1fe0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 6f:71:62:5d:4a:6e:a6:75:4d:ac:b1:75:3c:c0:d1:44:6f:6d: a8:85:c8:0e:2e:6c:e6:3f:ba:74:64:78:a6:63:57:0c:76:9d: 81:4b:66:38:01:b6:00:74:cb:54:a2:38:fe:26:a7:69:b2:62: 57:8c:f2:12:5a:b5:5f:b8:41:58:e1:ba:78:af:03:c4:65:cb: 46:a7:8f:00:79:69:1e:a2:a7:6b:9b:c6:1b:99:d7:78:0f:9e: f8:ea:44:eb:d2:89:fd:c9:c3:a9:d3:c5:db:cd:ca:51:c6:8b: 26:5d:80:5a:97:a4:92:e2:a1:8c:a3:1f:17:a6:d5:cc:a5:c5: 29:ce:48:8f:a1:41:51:17:5c:d3:9a:3a:87:67:c8:43:ad:ed: 90:df:17:94:de:76:43:e2:d7:83:a9:64:ab:67:d3:6b:34:38: e5:4c:a8:76:c0:9d:2a:63:c5:20:7e:cf:84:cf:01:5f:eb:b3: 79:56:57:80:f3:b8:e3:84:7d:2e:b5:0f:eb:f0:ca:cd:25:ce: b8:66:95:c7:b7:77:f6:76:e9:d8:32:f2:ad:6e:9e:b8:e1:77: bd:0a:a5:67:b8:59:16:a3:8c:0e:88:e7:8f:05:5f:f2:27:4b: 77:62:23:34:0e:22:51:9d:c2:cd:02:8e:3e:27:12:96:77:27: 2e:d6:f9:c4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjQwODA1MTI0MDIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIwYzgzNi1lYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNGAV8DxsKND35rJhdVtirOj5tm4YXiKwxhLfFkfc8Nu+79LochJR5LXAtbp elT3T5TsqxsXh6/h01CTSip8t7u1dQcwTiO+ftxXkqAEwUprfIaDZIiOSHsY/DEI s0fildQGNFWCmEWRORnv2AXLyyK40jqQumGjmDMR89qShYnxL3jni/2h6SoKeYAf lZtS2SFRzPAbE4c8gEWW3t02Q9lqL9dFXDY0XoXhFWzcfjcyO1vzdBDw3YhF5crg lREC2QMNcyUCzPL8dyf1z5SItVZjfMJisv+DpQ/zQwe1Vwa4HIZu+vuSLKStIPs8 2dPVzngZ3yw+vdd6ppi0pBQANQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFD8AWeIf PePz+wLW4MKzG9ptwgfzMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNBMzEvMDkwRjE0RkE1MDBDMTFFRTgyQjI2ODYzQzRGOUFFMDIvRTE5RUMzOEM1 MzI3MTFFRjlFODNDODQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAR/g//8wDQYJKoZIhvcNAQELBQADggEBAG9xYl1KbqZ1 TayxdTzA0URvbaiFyA4ubOY/unRkeKZjVwx2nYFLZjgBtgB0y1SiOP4mp2myYleM 8hJatV+4QVjhunivA8Rly0anjwB5aR6ip2ubxhuZ13gPnvjqROvSif3Jw6nTxdvN ylHGiyZdgFqXpJLioYyjHxem1cylxSnOSI+hQVEXXNOaOodnyEOt7ZDfF5TedkPi 14OpZKtn02s0OOVMqHbAnSpjxSB+z4TPAV/rs3lWV4DzuOOEfS61D+vwys0lzrhm lce3d/Z26dgy8q1unrjhd70KpWe4WRajjA6I548FX/InS3diIzQOIlGdws0Cjj4n EpZ3Jy7W+cQ= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org