$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa File: 04A6C29A009D11EF8CC8927AC4F9AE02.roa (raw, json) Hash identifier: MPklioATCG0BeCQDGyRXDduRrojqaESlxQEhUjqq/uE= Subject key identifier: 53:80:2A:6C:43:93:6E:E8:67:F2:A5:7E:4B:9B:AF:2E:08:AB:69:2E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 905F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa Signing time: Thu 30 May 2024 16:27:40 +0000 ROA not before: Thu 30 May 2024 16:27:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151726 IP address blocks: 2401:73e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 12:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36959 (0x905f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:27:40 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a8fb-7312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:5f:67:1d:5d:dc:fd:1e:5f:8a:73:14:75: 57:da:a7:17:d9:d7:ba:93:10:bf:d1:17:c5:bd:db: dc:cb:62:06:77:c6:63:da:b8:c5:01:80:57:e6:f7: c8:79:16:0f:c2:55:44:00:1c:ba:eb:65:ae:67:93: c5:fe:06:51:3b:c3:4d:0d:aa:da:34:07:a4:93:6f: e1:9e:51:e8:17:ce:72:eb:bc:03:8a:16:64:a3:f8: 9d:8d:20:0b:f6:62:96:13:32:16:d8:fb:7e:ff:1f: 23:90:56:0a:03:5d:31:6a:b9:5d:3e:34:fd:a7:2e: 60:58:d0:62:24:56:c9:48:7c:ec:f8:f7:2d:a9:bd: c7:c4:eb:b8:30:24:e7:b6:b5:2a:97:e5:14:47:aa: d4:52:4b:f4:4e:0a:0f:c7:85:07:9d:23:e1:be:89: 7a:4f:d4:63:5c:65:3e:5b:54:8f:e2:7f:13:12:d4: ae:59:44:44:96:8f:4f:b8:df:79:8f:d2:e6:1f:fc: eb:80:04:db:33:d8:fd:ff:77:18:68:5d:1f:9f:c3: c3:29:a5:6b:38:1b:77:4f:db:7f:ef:7c:8e:90:df: ed:89:7f:04:4d:42:cf:9a:ee:b4:fb:2a:a7:42:7d: 15:f4:0d:f5:c2:18:6a:3a:ff:36:69:db:8f:e6:76: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:2A:6C:43:93:6E:E8:67:F2:A5:7E:4B:9B:AF:2E:08:AB:69:2E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04A6C29A009D11EF8CC8927AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:73e0::/32 Signature Algorithm: sha256WithRSAEncryption 93:6c:20:b7:a0:07:ef:33:17:93:92:c1:55:d9:84:e9:fc:1b: 22:c1:5c:55:b5:83:7d:93:61:e7:b5:99:ce:94:c3:27:a8:9e: 83:16:43:d4:b4:b0:11:d7:f2:50:ff:3e:db:6e:fa:e8:59:20: 48:00:21:05:f0:e7:60:ae:12:28:fb:c2:8d:c2:c4:bb:57:de: a4:df:c8:c0:68:b5:69:4b:6e:c1:47:3c:40:3f:e5:fb:60:c0: 9c:30:35:26:51:36:d0:64:c6:ee:a3:cf:55:56:4a:98:dd:fb: e1:54:56:bc:e1:25:e6:85:66:48:20:68:cf:d4:22:ae:76:c6: 38:98:f3:7f:12:03:bf:ee:73:b8:63:47:98:aa:c2:8f:67:db: a6:98:7c:19:1f:55:5b:1e:df:48:7a:69:b6:2f:48:c2:d7:c3: f6:5f:5e:c9:e3:46:70:c6:cc:5a:94:47:04:60:48:0e:65:25: 47:63:b0:fb:19:e7:75:c8:85:19:77:4b:46:ee:34:67:90:bf: c1:35:3a:88:7d:63:de:9b:96:1f:c1:ec:36:80:dc:f1:94:7d: ea:4f:13:78:81:81:d5:d0:9b:27:74:6b:74:b1:fb:06:e5:c9: 18:ad:11:93:37:2d:ac:bf:ed:f6:23:ca:a5:f5:5f:8e:8e:4d: 94:ab:8d:ca -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAJBfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2Mjc0MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4ZmItNzMxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzkX2cdXdz9Hl+KcxR1V9qnF9nXupMQv9EXxb3b3MtiBnfGY9q4xQGAV+b3 yHkWD8JVRAAcuutlrmeTxf4GUTvDTQ2q2jQHpJNv4Z5R6BfOcuu8A4oWZKP4nY0g C/ZilhMyFtj7fv8fI5BWCgNdMWq5XT40/acuYFjQYiRWyUh87Pj3Lam9x8TruDAk 57a1KpflFEeq1FJL9E4KD8eFB50j4b6Jek/UY1xlPltUj+J/ExLUrllERJaPT7jf eY/S5h/864AE2zPY/f93GGhdH5/Dwymlazgbd0/bf+98jpDf7Yl/BE1Cz5rutPsq p0J9FfQN9cIYajr/Nmnbj+Z2pykCAwEAAaOCApYwggKSMB0GA1UdDgQWBBRTgCps Q5Nu6GfypX5Lm68uCKtpLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA0QTZDMjlB MDA5RDExRUY4Q0M4OTI3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAFz4DANBgkqhkiG9w0BAQsFAAOCAQEAk2wgt6AH7zMX k5LBVdmE6fwbIsFcVbWDfZNh57WZzpTDJ6iegxZD1LSwEdfyUP8+22766FkgSAAh BfDnYK4SKPvCjcLEu1fepN/IwGi1aUtuwUc8QD/l+2DAnDA1JlE20GTG7qPPVVZK mN374VRWvOEl5oVmSCBoz9QirnbGOJjzfxIDv+5zuGNHmKrCj2fbpph8GR9VWx7f SHppti9IwtfD9l9eyeNGcMbMWpRHBGBIDmUlR2Ow+xnndciFGXdLRu40Z5C/wTU6 iH1j3puWH8HsNoDc8ZR96k8TeIGB1dCbJ3RrdLH7BuXJGK0RkzctrL/t9iPKpfVf jo5NlKuNyg== -----END CERTIFICATE-----Generated at Fri Nov 22 13:34:46 2024 by rpki-client on console-fra.rpki-client.org