$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa File: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (raw, json) Hash identifier: L+MQl2N4HWMJyowT/sQLapWMqlpwpjacwTEIlXHA4EM= Subject key identifier: 74:9B:B8:F6:01:51:37:D9:84:C4:A1:94:0F:B7:06:1E:7A:E9:CE:75 Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: 03 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa Signing time: Tue 22 Oct 2024 10:20:00 +0000 ROA not before: Tue 22 Oct 2024 10:20:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153359 IP address blocks: 2001:df4:6340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Oct 22 10:20:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67177c50-3f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:52:3f:57:1c:33:36:71:55:c6:3a:b4:01: d2:f0:3d:4c:30:ed:96:9e:b9:e0:02:35:24:25:1a: af:57:c7:47:49:36:5a:29:07:53:a0:95:fb:bf:eb: 83:dd:36:73:96:8f:19:02:24:97:80:90:dd:04:dc: 0c:27:04:03:32:e5:3a:a7:94:65:42:81:f3:c9:0c: 11:6a:8c:db:30:19:c4:7d:1b:9e:cb:72:99:4a:34: 43:77:2c:1b:e0:5c:b1:a5:48:46:b0:03:50:0e:be: 46:90:1e:c9:5d:97:25:ca:83:d5:a9:94:3c:f2:0a: 8d:3d:1f:52:22:10:39:b5:e8:7b:c4:dd:0b:fe:49: 44:0e:e3:d8:4f:02:8a:57:79:db:c0:54:c2:a3:ad: c2:e5:d5:85:e1:0f:86:27:0d:4c:9b:57:cc:6f:df: 80:be:8d:8d:6f:96:fd:70:33:b1:57:5a:06:d3:e6: 87:8a:06:aa:ee:79:a9:0b:ae:e8:d9:1a:c3:42:db: 13:81:62:c9:f4:71:46:23:d7:4b:21:47:8d:1c:82: 04:92:9d:30:01:0f:ad:53:1e:b1:cc:20:c1:31:00: db:f2:89:ab:97:6a:f4:4f:9b:93:57:5b:1b:ef:1d: 6a:4f:7d:ac:98:8c:2f:ea:7e:9a:bf:85:36:e7:3b: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:B8:F6:01:51:37:D9:84:C4:A1:94:0F:B7:06:1E:7A:E9:CE:75 X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:6340::/48 Signature Algorithm: sha256WithRSAEncryption 63:a1:1b:93:22:98:52:86:1f:29:32:9b:7f:1b:fa:4b:ad:c6: 13:0f:4c:27:99:0a:8a:04:6d:9e:96:fb:d3:0b:c5:aa:d3:00: 8f:20:91:2c:96:74:0b:2d:17:a7:72:5d:d0:4d:32:f8:bc:3a: ea:59:b5:84:d9:76:d6:1c:e2:3e:7e:ce:4b:c2:2f:f9:67:d0: f9:50:bb:6d:75:b5:c7:8a:b6:4e:2d:ef:bf:64:2b:90:03:14: 5b:e4:3d:b5:5a:8f:28:f5:38:93:be:c6:7e:e6:ce:fb:66:1f: 27:e7:5b:6b:6c:04:c4:21:eb:c3:ff:89:f9:95:f2:59:4f:a2: 9d:b8:04:02:7e:e5:e0:41:b3:8f:d8:29:7c:23:64:b7:94:be: 76:6c:6c:a1:88:b3:9b:70:5d:42:05:47:1a:65:29:4c:cb:ef: fb:fc:2f:f8:ab:16:03:68:c2:86:28:40:af:f7:f6:04:55:22: 58:44:a5:fb:ab:36:44:ae:bf:34:d4:45:06:69:2b:a9:45:0c: bc:69:0e:91:3d:9c:f5:1b:0e:ff:20:18:1b:d9:50:78:6c:39: a2:64:75:ec:7b:9c:05:71:bd:14:02:af:43:39:15:ef:8f:c5: 5b:d7:f1:d5:67:5f:c2:c1:a7:26:e8:10:eb:03:ce:3e:0f:21: e8:ea:37:7b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDg4RjExMC8GA1UEBRMoMzk0M0Q0MjYxNTc5Q0RFMEU4MkEwNUNBMkFCNTRCMzg3 QkE1MTkzMzAeFw0yNDEwMjIxMDIwMDBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MTc3YzUwLTNmOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuF1I/VxwzNnFVxjq0AdLwPUww7ZaeueACNSQlGq9Xx0dJNlopB1Oglfu/64Pd NnOWjxkCJJeAkN0E3AwnBAMy5TqnlGVCgfPJDBFqjNswGcR9G57LcplKNEN3LBvg XLGlSEawA1AOvkaQHsldlyXKg9WplDzyCo09H1IiEDm16HvE3Qv+SUQO49hPAopX edvAVMKjrcLl1YXhD4YnDUybV8xv34C+jY1vlv1wM7FXWgbT5oeKBqrueakLrujZ GsNC2xOBYsn0cUYj10shR40cggSSnTABD61THrHMIMExANvyiauXavRPm5NXWxvv HWpPfayYjC/qfpq/hTbnO9O7AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUdJu49gFR N9mExKGUD7cGHnrpznUwHwYDVR0jBBgwFoAUOUPUJhV5zeDoKgXKKrVLOHulGTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEODhGLzg0QTVCQzgwOTA1 RDExRUZBNEYzMUQyRUM0RjlBRTAyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1VQVUpoVjV6ZURvS2dYS0tyVkxPSHVsR1RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDg4Ri84NEE1QkM4MDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi8zMUMzNkI2NDkw NUYxMUVGQUY0OUVCNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfRjQDANBgkqhkiG9w0BAQsFAAOCAQEAY6EbkyKYUoYf KTKbfxv6S63GEw9MJ5kKigRtnpb70wvFqtMAjyCRLJZ0Cy0Xp3Jd0E0y+Lw66lm1 hNl21hziPn7OS8Iv+WfQ+VC7bXW1x4q2Ti3vv2QrkAMUW+Q9tVqPKPU4k77GfubO +2YfJ+dba2wExCHrw/+J+ZXyWU+inbgEAn7l4EGzj9gpfCNkt5S+dmxsoYizm3Bd QgVHGmUpTMvv+/wv+KsWA2jChihAr/f2BFUiWESl+6s2RK6/NNRFBmkrqUUMvGkO kT2c9RsO/yAYG9lQeGw5omR17HucBXG9FAKvQzkV74/FW9fx1WdfwsGnJugQ6wPO Pg8h6Oo3ew== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:23 2024 by rpki-client on console-fra.rpki-client.org