$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa File: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (raw, json) Hash identifier: OTeHqw+CjLL4mDAibcY1jyCiUST8su4DGvU3cyeVuSU= Subject key identifier: 86:53:0A:48:D7:3D:F3:2D:98:FE:6F:B1:77:57:74:D8:A9:95:E0:74 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: DA Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa Signing time: Mon 01 Apr 2024 07:08:26 +0000 ROA not before: Mon 01 Apr 2024 07:08:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 204174 IP address blocks: 2400:e3e0:100::/40 maxlen: 48 2400:e3e0:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 05:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Apr 1 07:08:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660a5d6a-a062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:97:9d:89:0e:e8:26:14:99:df:07:9c:f4: 37:d1:5d:ab:2d:31:f5:3a:98:67:6c:33:62:53:e0: 5c:fc:3e:0f:49:49:7d:e0:58:bc:e5:99:f9:52:6c: 6b:ae:24:fc:cd:71:a3:8d:e6:d2:80:dd:46:20:bf: 56:4e:d5:1b:12:40:1a:8a:31:8f:29:df:69:5a:ca: 21:9a:82:fe:c0:9c:4c:43:4f:80:95:5f:47:95:6a: 0e:b5:19:35:60:dc:ce:db:17:08:7c:76:dd:9a:fa: 8a:22:87:b0:a6:76:5e:59:bd:47:64:c7:6a:e5:7a: 6f:dd:fa:38:99:8d:f9:36:64:fb:b9:67:2f:a7:78: a6:c3:51:f6:85:9f:10:b1:f8:82:14:0a:74:00:7e: 40:78:7e:fb:b7:52:b0:e2:00:c4:91:6a:e9:8f:af: af:b5:7c:04:d5:ed:c1:6d:14:e4:20:e1:ba:74:57: a1:3e:a2:ab:e1:dd:17:31:57:5e:41:99:9d:70:cb: 13:ce:dd:ca:70:f5:f7:35:0f:d9:54:d8:3b:80:ed: 5a:70:05:01:d9:26:84:2f:1c:1a:1d:4a:e4:4b:64: 08:52:1b:01:0c:a2:d9:2a:90:e4:a1:94:35:a1:af: a1:28:4d:07:99:85:d1:05:cb:52:fd:fc:10:a3:d9: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:53:0A:48:D7:3D:F3:2D:98:FE:6F:B1:77:57:74:D8:A9:95:E0:74 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:100::/40 2400:e3e0:f00::/40 Signature Algorithm: sha256WithRSAEncryption ca:9c:27:db:15:ea:ef:33:d2:46:6e:ae:34:93:6a:5e:ea:89: 42:a1:e2:99:37:2e:8f:1e:e1:43:c7:ce:3b:c8:69:8f:c8:79: 10:ac:22:a4:ff:d4:da:1c:bf:31:e9:94:a0:e7:da:ed:22:7d: c3:74:e6:0b:3b:79:32:b4:28:c2:c7:04:f9:11:dc:45:a1:83: d8:98:72:bc:4e:34:23:9f:89:38:bf:22:fc:8e:8e:f7:86:d3: 7a:f7:38:a2:70:e9:35:4e:da:5b:60:83:2a:d1:24:82:10:e9: e1:ec:82:c4:49:71:1f:e8:ac:69:a9:80:c3:ce:e5:c0:16:f4: 50:a7:5f:fe:64:69:22:2a:2e:89:38:de:8e:22:83:d3:3a:06: d2:e7:57:87:82:dd:f1:a8:45:76:04:db:0c:9e:eb:b3:55:37: 74:38:d8:8b:e6:95:b7:34:58:86:47:dc:7a:8a:ec:a1:c1:63: fa:e8:85:18:33:97:04:ff:50:0d:dd:22:2f:fd:b5:98:69:ce: e1:37:83:f9:e2:a6:67:ff:aa:30:63:b4:71:f7:3d:07:cb:04: 0b:5c:7c:01:55:7a:e1:f5:a2:5c:f0:bb:c1:60:8c:be:d0:76: 49:24:ba:ef:4b:bf:b1:73:f0:33:10:74:3a:96:f1:a5:eb:92: 51:e4:9d:99 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjQwNDAxMDcwODI2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBhNWQ2YS1hMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj+XnYkO6CYUmd8HnPQ30V2rLTH1OphnbDNiU+Bc/D4PSUl94Fi85Zn5Umxr riT8zXGjjebSgN1GIL9WTtUbEkAaijGPKd9pWsohmoL+wJxMQ0+AlV9HlWoOtRk1 YNzO2xcIfHbdmvqKIoewpnZeWb1HZMdq5Xpv3fo4mY35NmT7uWcvp3imw1H2hZ8Q sfiCFAp0AH5AeH77t1Kw4gDEkWrpj6+vtXwE1e3BbRTkIOG6dFehPqKr4d0XMVde QZmdcMsTzt3KcPX3NQ/ZVNg7gO1acAUB2SaELxwaHUrkS2QIUhsBDKLZKpDkoZQ1 oa+hKE0HmYXRBctS/fwQo9l1lQIDAQABo4ICnzCCApswHQYDVR0OBBYEFIZTCkjX PfMtmP5vsXdXdNipleB0MB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvMzRENUVEMTIx MEY1MTFFRUJDRTJBODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgAkAOPgAQMGACQA4+APMA0GCSqGSIb3DQEBCwUAA4IBAQDK nCfbFervM9JGbq40k2pe6olCoeKZNy6PHuFDx847yGmPyHkQrCKk/9TaHL8x6ZSg 59rtIn3DdOYLO3kytCjCxwT5EdxFoYPYmHK8TjQjn4k4vyL8jo73htN69ziicOk1 TtpbYIMq0SSCEOnh7ILESXEf6KxpqYDDzuXAFvRQp1/+ZGkiKi6JON6OIoPTOgbS 51eHgt3xqEV2BNsMnuuzVTd0ONiL5pW3NFiGR9x6iuyhwWP66IUYM5cE/1AN3SIv /bWYac7hN4P54qZn/6owY7Rx9z0HywQLXHwBVXrh9aJc8LvBYIy+0HZJJLrvS7+x c/AzEHQ6lvGl65JR5J2Z -----END CERTIFICATE-----Generated at Tue May 21 06:39:47 2024 by rpki-client on console-fra.rpki-client.org