$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa File: 610B51267AE711EFACC0CA34C4F9AE02.roa (raw, json) Hash identifier: Sia8Gi3qcpCvgS981cn17WU6AtoHaTrcG1W6ziIGcuE= Subject key identifier: 11:5E:10:94:95:4D:9A:B5:3F:C3:D2:8D:E4:20:33:71:DE:C5:78:03 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 0146 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa Signing time: Wed 25 Sep 2024 03:06:44 +0000 ROA not before: Wed 25 Sep 2024 03:06:44 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 151331 IP address blocks: 2400:e3e0:aa00::/40 maxlen: 48 2400:e3e0:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 02:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Sep 25 03:06:44 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66f37e44-7c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:47:49:41:33:81:33:da:22:b0:21:db:d4: 2f:71:f3:a4:ed:c5:8e:ef:1a:46:86:e0:3c:64:5c: 03:34:35:72:f6:5f:4d:d2:4b:e4:4a:ef:7a:fd:6d: 7b:83:d4:33:2c:ad:e3:2e:0f:ae:9c:67:e8:bb:a0: 1d:95:bf:b8:f4:cd:26:de:f5:77:6d:b7:b7:99:84: bc:79:83:b0:a5:c5:3c:77:57:c0:3f:80:ed:ba:1c: 40:1e:40:c9:b8:d7:12:6f:b2:62:ab:ac:dc:c8:90: 2c:9b:9c:6d:3f:63:45:3d:9d:b5:4f:92:a0:24:5e: 00:d7:6a:e3:3d:d4:ca:e8:9e:1a:e8:c3:f0:11:ae: e0:33:a0:2c:7b:0c:6f:a8:b4:73:96:48:f3:ee:70: f9:da:21:c1:c2:71:b6:25:9d:d3:a2:c8:7e:31:11: 95:29:a2:0d:58:21:26:78:10:5d:94:bb:a2:25:50: 1b:84:44:87:de:88:75:44:68:d3:ce:f7:53:15:3c: 7a:dc:2f:1f:b5:7a:3d:bd:b9:5d:20:ac:79:8f:78: 33:38:ea:42:93:68:e6:10:31:fc:a4:11:e2:51:ea: ae:9b:22:f0:b1:00:8d:c9:f9:b9:05:e3:5c:79:9c: f7:c5:01:43:e8:93:d7:4d:86:3c:8e:3d:5f:bd:34: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:10:94:95:4D:9A:B5:3F:C3:D2:8D:E4:20:33:71:DE:C5:78:03 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/610B51267AE711EFACC0CA34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:aa00::/39 Signature Algorithm: sha256WithRSAEncryption 5a:88:e8:ba:69:f5:56:fb:66:3c:91:1a:09:08:dd:23:f2:6e: 91:b7:8c:9c:c7:68:e6:24:24:9e:b6:2e:ec:47:33:7f:db:fd: e3:3d:f9:08:90:d7:eb:33:8a:99:6d:37:9f:27:29:a4:7c:fe: c7:b5:c1:02:93:88:0c:8c:6a:19:2f:a4:44:20:c5:04:4a:56: 98:38:74:a5:65:41:ef:27:ee:23:2d:04:db:14:98:d5:2f:18: 86:92:d5:fd:20:eb:14:d7:63:71:5a:2b:d7:07:05:28:12:a5: 03:de:b4:98:78:00:2a:15:ff:19:83:d2:a6:1e:f7:a2:20:0a: 7c:a9:82:c0:7b:81:00:0e:8d:91:81:b5:72:fc:4b:1c:ce:71: ce:cf:9d:ff:ed:b9:35:a0:cb:b3:fc:c4:cd:72:bf:b3:46:80: e5:50:2c:2c:2c:ab:e4:c0:29:e7:b3:ed:10:7e:3e:e9:bf:24: 17:e6:46:4f:19:ae:44:3b:f8:3b:f6:b6:d8:be:b5:47:e5:ea: 51:75:6f:ed:7b:c5:7d:d5:9a:cb:3a:3a:81:c7:d5:81:51:fe: 23:d6:ee:8b:af:85:91:48:36:10:19:23:eb:0f:49:2e:67:31: 38:89:64:d6:94:a1:62:c4:cd:1d:b1:a9:5a:38:2a:09:9e:f1: a0:50:eb:fa -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjQwOTI1MDMwNjQ0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzN2U0NC03YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR5HSUEzgTPaIrAh29QvcfOk7cWO7xpGhuA8ZFwDNDVy9l9N0kvkSu96/W17 g9QzLK3jLg+unGfou6Adlb+49M0m3vV3bbe3mYS8eYOwpcU8d1fAP4DtuhxAHkDJ uNcSb7Jiq6zcyJAsm5xtP2NFPZ21T5KgJF4A12rjPdTK6J4a6MPwEa7gM6Asewxv qLRzlkjz7nD52iHBwnG2JZ3Tosh+MRGVKaINWCEmeBBdlLuiJVAbhESH3oh1RGjT zvdTFTx63C8ftXo9vbldIKx5j3gzOOpCk2jmEDH8pBHiUequmyLwsQCNyfm5BeNc eZz3xQFD6JPXTYY8jj1fvTT9HwIDAQABo4IClzCCApMwHQYDVR0OBBYEFBFeEJSV TZq1P8PSjeQgM3HexXgDMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvNjEwQjUxMjY3 QUU3MTFFRkFDQzBDQTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgEkAOPgqjANBgkqhkiG9w0BAQsFAAOCAQEAWojoumn1Vvtm PJEaCQjdI/JukbeMnMdo5iQknrYu7Eczf9v94z35CJDX6zOKmW03nycppHz+x7XB ApOIDIxqGS+kRCDFBEpWmDh0pWVB7yfuIy0E2xSY1S8YhpLV/SDrFNdjcVor1wcF KBKlA960mHgAKhX/GYPSph73oiAKfKmCwHuBAA6NkYG1cvxLHM5xzs+d/+25NaDL s/zEzXK/s0aA5VAsLCyr5MAp57PtEH4+6b8kF+ZGTxmuRDv4O/a22L61R+XqUXVv 7XvFfdWayzo6gcfVgVH+I9bui6+FkUg2EBkj6w9JLmcxOIlk1pShYsTNHbGpWjgq CZ7xoFDr+g== -----END CERTIFICATE-----Generated at Mon Nov 25 04:43:57 2024 by rpki-client on console-ams.rpki-client.org