$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa File: EF57185A9D5911EEAA9F0413C4F9AE02.roa (raw, json) Hash identifier: fNsgTUHzpXKVp4vMklhbAG0A6cCm/Jq7Z0ItTN8ghXI= Subject key identifier: 7C:B9:8A:E2:6B:92:99:2B:22:85:F0:71:4A:C0:08:27:93:CF:29:F0 Certificate issuer: /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Certificate serial: 3E36 Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa Signing time: Mon 18 Dec 2023 04:00:09 +0000 ROA not before: Mon 18 Dec 2023 04:00:09 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 3130 IP address blocks: 2001:df7:5380::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15926 (0x3e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015 Validity Not Before: Dec 18 04:00:09 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=657fc3c9-28ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:af:d4:31:14:81:17:bf:e9:cf:92:9c:b0: 80:9a:02:5a:6c:bd:cd:00:d9:3f:77:e0:25:ab:36: 60:a7:db:fc:7f:cc:66:b6:9b:fd:cb:93:e3:ba:0f: 21:1c:d3:ce:25:ef:66:c2:ac:a0:91:97:bc:73:29: a2:4a:be:94:f5:43:75:15:d0:7f:94:11:cb:00:66: cb:75:e6:69:1a:8a:46:6b:6e:aa:29:cc:88:b6:57: 88:f4:6d:4a:f8:72:63:9f:82:4d:76:56:de:2e:9a: 9d:7c:2c:25:90:58:07:31:f2:1c:f2:7b:d3:86:0a: 55:2e:3f:08:2c:5c:fd:60:d9:70:41:9c:16:40:9e: 59:00:6d:0d:43:e3:96:12:56:74:32:06:7b:22:cd: e9:1c:c3:3f:79:a0:e7:84:4f:cf:c9:a6:f1:3e:05: 08:61:0b:61:46:9a:50:d2:94:0c:98:65:c7:5f:c6: b8:b6:62:10:75:20:79:23:79:b9:fd:77:ab:69:86: a7:57:aa:5e:d2:05:d5:3b:af:d2:fe:1c:e1:59:99: c5:81:68:33:6e:98:9e:b5:c8:38:ec:32:14:aa:8e: 4e:de:21:fc:5a:b9:41:9e:d5:87:b3:9c:99:12:ea: d0:49:37:15:54:22:c3:8d:57:2c:04:b5:82:ca:1c: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B9:8A:E2:6B:92:99:2B:22:85:F0:71:4A:C0:08:27:93:CF:29:F0 X509v3 Authority Key Identifier: keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df7:5380::/47 Signature Algorithm: sha256WithRSAEncryption 15:e4:12:4d:8a:98:50:63:1b:96:c5:8c:97:b8:be:73:7a:b1: 9e:bf:36:5a:f5:01:29:7f:eb:b7:54:09:d8:b2:fe:32:47:a2: b1:4a:1a:50:57:d7:42:ae:11:fa:4f:56:4d:01:e9:87:1d:d2: 45:e6:0c:5b:10:25:5a:57:7f:7a:5d:27:66:a5:a2:dc:96:3c: 4e:3a:0c:1e:e1:bf:2f:ab:f5:fa:4d:13:33:df:67:5a:c4:1a: 05:04:29:b7:99:53:ee:68:82:ef:20:64:b9:2b:33:37:58:65: e0:a9:98:b7:cf:83:dc:c8:bf:f3:47:72:dc:f6:8a:0a:15:e6: 01:d0:6e:c3:24:19:6c:dd:fb:67:e6:ce:88:94:eb:5c:de:6a: 23:20:b5:eb:77:1c:a3:38:96:82:3d:90:b6:d8:87:52:20:16: 98:b3:7f:9f:47:3c:75:11:40:c9:a3:f5:cf:20:1d:c5:53:37: 51:38:fe:98:73:9b:31:16:35:19:2b:4f:4a:5f:48:7c:5e:32: cb:0d:dd:34:fc:58:6a:06:3b:e4:ea:ed:66:91:ab:3d:d2:70: f9:e7:4b:f8:ca:30:88:1d:86:c4:fe:a5:90:13:ae:47:16:6e: 71:a0:5f:d9:04:9a:e2:d1:44:18:0f:20:0d:15:15:b2:4b:53: ab:0f:48:4a -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICPjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwMUUxMTAvBgNVBAUTKDgyNzhGNDdERUM1QjdBREMyMDE4OTdGOTlCQ0M2RTJC RkE4OEQwMTUwHhcNMjMxMjE4MDQwMDA5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdmYzNjOS0yOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcOv1DEUgRe/6c+SnLCAmgJabL3NANk/d+AlqzZgp9v8f8xmtpv9y5Pjug8h HNPOJe9mwqygkZe8cymiSr6U9UN1FdB/lBHLAGbLdeZpGopGa26qKcyItleI9G1K +HJjn4JNdlbeLpqdfCwlkFgHMfIc8nvThgpVLj8ILFz9YNlwQZwWQJ5ZAG0NQ+OW ElZ0MgZ7Is3pHMM/eaDnhE/PyabxPgUIYQthRppQ0pQMmGXHX8a4tmIQdSB5I3m5 /XeraYanV6pe0gXVO6/S/hzhWZnFgWgzbpietcg47DIUqo5O3iH8WrlBntWHs5yZ EurQSTcVVCLDjVcsBLWCyhxswwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHy5iuJr kpkrIoXwcUrACCeTzynwMB8GA1UdIwQYMBaAFIJ49H3sW3rcIBiX+ZvMbiv6iNAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDAxRS8zNUZBMEY1NjFE NzgxMUUyOTM3NzFGQzQwOEIwMkNEMi9nbmowZmV4YmV0d2dHSmY1bTh4dUtfcUkw QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2duajBmZXhiZXR3Z0dKZjVtOHh1S19xSTBCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAwMUUvMzVGQTBGNTYxRDc4MTFFMjkzNzcxRkM0MDhCMDJDRDIvRUY1NzE4NUE5 RDU5MTFFRUFBOUYwNDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwEgAQ33U4AwDQYJKoZIhvcNAQELBQADggEBABXkEk2KmFBj G5bFjJe4vnN6sZ6/Nlr1ASl/67dUCdiy/jJHorFKGlBX10KuEfpPVk0B6Ycd0kXm DFsQJVpXf3pdJ2alotyWPE46DB7hvy+r9fpNEzPfZ1rEGgUEKbeZU+5ogu8gZLkr MzdYZeCpmLfPg9zIv/NHctz2igoV5gHQbsMkGWzd+2fmzoiU61zeaiMgtet3HKM4 loI9kLbYh1IgFpizf59HPHURQMmj9c8gHcVTN1E4/phzmzEWNRkrT0pfSHxeMssN 3TT8WGoGO+Tq7WaRqz3ScPnnS/jKMIgdhsT+pZATrkcWbnGgX9kEmuLRRBgPIA0V FbJLU6sPSEo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:59 2024 by rpki-client on console-ams.rpki-client.org