$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa File: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (raw, json) Hash identifier: WMB572OriY7OKNmhFvdEBkase4yBRTMM9Ky+WZetjbA= Subject key identifier: FC:0F:E7:5F:12:B6:38:A1:FC:85:38:8F:B4:F5:3E:03:50:F2:70:71 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 011A Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa Signing time: Sat 20 Jul 2024 23:59:24 +0000 ROA not before: Sat 20 Jul 2024 23:59:24 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 204174 IP address blocks: 2400:e3e0:100::/40 maxlen: 48 2400:e3e0:f00::/40 maxlen: 48 2400:e3e0:f5d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Jul 20 23:59:24 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=669c4f5b-0f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:b8:12:c8:01:94:7a:7d:2f:f5:dc:a5:c1: fb:05:3e:ed:8e:20:42:fe:88:96:20:ef:ea:52:eb: 69:7a:d0:6d:00:13:ee:90:8d:6c:ac:57:9a:4d:37: e1:e8:11:ea:41:8c:e5:f9:3d:b4:2a:b9:d9:57:da: da:f6:a4:8f:39:be:78:5f:fd:2a:0b:86:9d:c9:8f: b7:d3:98:2c:0a:f3:1e:7c:2c:4c:54:40:07:72:d2: 76:48:bd:41:d8:43:27:bc:e2:aa:e0:9a:64:b1:44: 02:72:ce:cf:82:4b:49:32:97:ab:98:68:4d:17:c6: e8:cd:34:85:92:fc:a1:4c:ad:2e:8e:fc:3f:17:70: c2:99:50:ae:f4:9e:8b:a2:88:ce:d4:e8:27:56:e5: 1f:08:a4:2a:66:29:34:96:86:47:b1:47:04:f0:b8: 5f:fe:6f:68:e7:7c:01:4b:8f:74:21:5b:de:4b:22: 2b:3d:34:b0:27:4d:36:b0:fb:c0:ea:1c:16:da:b2: 2d:4e:ee:8b:47:c5:0d:7f:a9:0f:15:82:72:78:ff: 37:68:1b:90:4d:7f:b5:f9:bd:13:1c:ab:41:07:0b: 0c:4f:59:f0:d2:56:19:69:c9:cf:73:d6:3b:cf:6b: 3a:7a:4b:46:b0:59:c3:9c:59:75:38:d1:75:fd:23: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:E7:5F:12:B6:38:A1:FC:85:38:8F:B4:F5:3E:03:50:F2:70:71 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:100::/40 2400:e3e0:f00::/40 2400:e3e0:f5d9::/48 Signature Algorithm: sha256WithRSAEncryption 70:7b:72:24:c8:3c:c3:a3:36:36:62:b3:10:c6:23:b6:85:54: 48:8c:58:0b:07:66:6b:17:65:f8:d7:8d:cd:e5:8b:4e:da:db: dd:77:12:1e:03:93:24:78:7b:ad:d5:bc:0e:9a:0c:b3:53:c2: 55:f7:36:52:02:60:b4:03:af:9e:fb:70:43:c2:48:05:3a:9e: 9f:f6:95:bb:a9:0d:a9:8d:93:cf:4a:c0:06:e3:51:a4:c6:a8: 54:92:9c:57:50:ab:f6:e0:32:e1:0b:44:a6:cb:d8:67:ac:72: 58:36:bd:ce:e4:83:e8:be:4b:09:f4:ac:96:45:cd:63:0f:37: 64:56:0b:86:7e:a8:5e:35:c3:5b:f3:de:ef:1b:10:75:7a:11: be:65:3e:15:fb:aa:35:ab:a7:f1:82:1f:e1:2d:ab:ea:09:a3: 22:11:d6:de:0c:0c:55:83:6c:32:4d:46:96:b4:69:28:24:41: 20:2e:c3:19:7c:72:9d:52:d0:b8:c9:fd:f9:15:81:72:15:9a: 0b:b7:03:0a:04:5c:d3:17:73:d8:a9:cd:79:7d:58:19:77:3e: 89:0c:b5:3b:25:95:11:50:a5:09:9c:d6:f6:60:db:5f:b5:60: 97:f7:47:ac:16:65:e8:65:9a:fa:65:fd:c1:8e:4c:f0:66:c0: cc:2b:c0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjQwNzIwMjM1OTI0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjljNGY1Yi0wZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3He4EsgBlHp9L/XcpcH7BT7tjiBC/oiWIO/qUutpetBtABPukI1srFeaTTfh 6BHqQYzl+T20KrnZV9ra9qSPOb54X/0qC4adyY+305gsCvMefCxMVEAHctJ2SL1B 2EMnvOKq4JpksUQCcs7PgktJMpermGhNF8bozTSFkvyhTK0ujvw/F3DCmVCu9J6L oojO1OgnVuUfCKQqZik0loZHsUcE8Lhf/m9o53wBS490IVveSyIrPTSwJ002sPvA 6hwW2rItTu6LR8UNf6kPFYJyeP83aBuQTX+1+b0THKtBBwsMT1nw0lYZacnPc9Y7 z2s6ektGsFnDnFl1ONF1/SMapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwP518S tjih/IU4j7T1PgNQ8nBxMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvMzRENUVEMTIx MEY1MTFFRUJDRTJBODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgACMBkDBgAkAOPgAQMGACQA4+APAwcAJADj4PXZMA0GCSqGSIb3DQEB CwUAA4IBAQBwe3IkyDzDozY2YrMQxiO2hVRIjFgLB2ZrF2X4143N5YtO2tvddxIe A5MkeHut1bwOmgyzU8JV9zZSAmC0A6+e+3BDwkgFOp6f9pW7qQ2pjZPPSsAG41Gk xqhUkpxXUKv24DLhC0Smy9hnrHJYNr3O5IPovksJ9KyWRc1jDzdkVguGfqheNcNb 897vGxB1ehG+ZT4V+6o1q6fxgh/hLavqCaMiEdbeDAxVg2wyTUaWtGkoJEEgLsMZ fHKdUtC4yf35FYFyFZoLtwMKBFzTF3PYqc15fVgZdz6JDLU7JZURUKUJnNb2YNtf tWCX90esFmXoZZr6Zf3BjkzwZsDMK8Ay -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:02 2024 by rpki-client on console-fra.rpki-client.org