$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/E7A562846FB711EFA3A40A16C4F9AE02.roa File: E7A562846FB711EFA3A40A16C4F9AE02.roa (raw, json) Hash identifier: YPCLoH0ZFEnb10xBRfYXiCERuV2IZbS9meZRrzTxVCM= Subject key identifier: CB:37:E8:67:09:75:71:63:4C:D8:83:EB:C1:FF:E5:0E:9A:AB:CA:64 Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569 Certificate serial: 62 Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/E7A562846FB711EFA3A40A16C4F9AE02.roa Signing time: Tue 10 Sep 2024 21:01:53 +0000 ROA not before: Tue 10 Sep 2024 21:01:53 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 1 IP address blocks: 2001:df0:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569 Validity Not Before: Sep 10 21:01:53 2024 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=66e0b3c1-18c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:3e:64:05:30:1f:f3:11:96:70:01:d4:b5: 0f:cd:b5:1a:a4:d3:b4:b6:53:da:48:f8:ac:73:9b: 9a:2f:ef:63:8d:77:e0:28:bc:20:61:f6:2f:d8:8b: 2b:52:37:d1:29:53:0e:c2:77:a6:48:5a:4d:09:43: 22:bc:54:9f:c2:f7:17:c2:49:61:2e:71:b4:b5:34: 62:19:3c:4f:8d:42:9a:5d:34:b1:f9:92:2d:7c:41: 5b:b8:ee:ac:57:0c:53:b7:50:12:e6:a1:8b:09:e3: 7d:99:16:c5:54:ad:1e:1d:b7:c2:4a:28:fe:16:3f: a1:21:ac:83:70:ba:a6:eb:c3:bb:0a:56:1f:20:4d: 39:6a:61:dc:ee:15:f4:c3:26:14:e5:6e:ec:fe:19: dc:d5:66:b4:ac:c0:c9:b8:a8:3c:a8:7f:3e:2e:43: c2:8c:20:2f:1b:a8:cd:46:b7:72:27:21:e4:64:7f: 8a:39:52:d5:f0:ea:d2:3d:79:63:8d:1e:5a:2b:ba: 51:41:fc:bb:4f:4e:2a:01:a3:72:dd:b3:e7:9b:8c: 69:40:7e:92:08:92:7d:d7:73:43:04:a1:3b:fb:d1: 31:74:cf:b9:f2:6a:20:31:60:57:7f:a8:0e:8e:1b: 81:38:fe:d2:0f:77:67:af:ba:3e:a0:90:01:2a:55: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:E8:67:09:75:71:63:4C:D8:83:EB:C1:FF:E5:0E:9A:AB:CA:64 X509v3 Authority Key Identifier: keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/E7A562846FB711EFA3A40A16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df0:90::/48 Signature Algorithm: sha256WithRSAEncryption 32:90:0a:0c:31:cd:2f:b9:e8:e0:0a:5d:7b:08:c5:44:fe:ed: ba:f0:e6:9a:1b:5b:77:7e:6a:c3:6d:89:5b:ac:a8:03:41:64: ee:8a:b8:f4:bd:2e:1e:91:2f:9c:3b:e5:21:dd:a6:32:2d:3c: be:0a:06:70:21:41:ad:9e:fd:a8:54:8f:bd:6a:09:d7:31:b6: 0e:80:79:1c:8c:01:db:df:4a:16:c4:17:ae:a3:47:7f:0b:fd: e5:e5:c4:d8:6c:75:51:9c:a7:fa:31:e3:9f:f6:61:8d:50:38: 1d:5a:9b:43:25:9a:c9:9e:75:20:7d:28:0f:55:f2:b6:f2:82: ab:f4:6f:f3:f0:ce:6a:a3:b7:15:ac:16:4b:9a:eb:7c:25:64: 1e:1c:24:33:c6:a6:72:da:66:ce:16:0d:81:b3:d7:57:46:0b: ce:22:63:90:13:e5:07:0d:ea:66:64:28:80:1e:7c:15:b1:3c: 93:58:41:db:02:7d:0b:ce:e2:08:66:21:07:f1:d2:47:61:d4: 42:fb:c2:bc:91:d6:ca:97:75:8e:8d:72:a1:c4:84:12:fb:b5: b4:8c:73:df:11:16:3a:09:e8:24:de:ad:57:e0:71:26:15:16: 28:ec:31:7b:b6:44:24:0f:03:98:af:3e:be:6b:f7:7a:2e:1e: 01:14:54:b4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoNDIzOTExN0EyNTU4MkQwMDY3REU0RDBDRURBNUFCQTVD QzdFMzU2OTAeFw0yNDA5MTAyMTAxNTNaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTBiM2MxLTE4YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Mj5kBTAf8xGWcAHUtQ/NtRqk07S2U9pI+Kxzm5ov72ONd+AovCBh9i/YiytS N9EpUw7Cd6ZIWk0JQyK8VJ/C9xfCSWEucbS1NGIZPE+NQppdNLH5ki18QVu47qxX DFO3UBLmoYsJ432ZFsVUrR4dt8JKKP4WP6EhrINwuqbrw7sKVh8gTTlqYdzuFfTD JhTlbuz+GdzVZrSswMm4qDyofz4uQ8KMIC8bqM1Gt3InIeRkf4o5UtXw6tI9eWON HlorulFB/LtPTioBo3Lds+ebjGlAfpIIkn3Xc0MEoTv70TF0z7nyaiAxYFd/qA6O G4E4/tIPd2evuj6gkAEqVVvZAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUyzfoZwl1 cWNM2IPrwf/lDpqrymQwHwYDVR0jBBgwFoAUQjkReiVYLQBn3k0M7aWrpcx+NWkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzY4RDg4MTg0MjQ4 NTExRUY5NDIzNjU3MkM0RjlBRTAyL1Fqa1JlaVZZTFFCbjNrME03YVdycGN4LU5X ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWprUmVpVllMUUJuM2swTTdhV3JwY3gtTldrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny82OEQ4ODE4NDI0ODUxMUVGOTQyMzY1NzJDNEY5QUUwMi9FN0E1NjI4NDZG QjcxMUVGQTNBNDBBMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfAAkDANBgkqhkiG9w0BAQsFAAOCAQEAMpAKDDHNL7no 4ApdewjFRP7tuvDmmhtbd35qw22JW6yoA0Fk7oq49L0uHpEvnDvlId2mMi08vgoG cCFBrZ79qFSPvWoJ1zG2DoB5HIwB299KFsQXrqNHfwv95eXE2Gx1UZyn+jHjn/Zh jVA4HVqbQyWayZ51IH0oD1XytvKCq/Rv8/DOaqO3FawWS5rrfCVkHhwkM8amctpm zhYNgbPXV0YLziJjkBPlBw3qZmQogB58FbE8k1hB2wJ9C87iCGYhB/HSR2HUQvvC vJHWypd1jo1yocSEEvu1tIxz3xEWOgnoJN6tV+BxJhUWKOwxe7ZEJA8DmK8+vmv3 ei4eARRUtA== -----END CERTIFICATE-----Generated at Tue Sep 17 06:07:30 2024 by rpki-client on console-fra.rpki-client.org