$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa File: 07FC93D4A54911EE9A3EC84EC4F9AE02.roa (raw, json) Hash identifier: fXCQvzmqcIFTf9DA9c+P1JYXxfFMOZls+hciqTNV2YM= Subject key identifier: 23:44:AA:05:D5:CD:29:8C:47:5B:82:FC:03:3F:6B:C1:39:64:BC:C4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8FFB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa Signing time: Thu 30 May 2024 16:26:03 +0000 ROA not before: Thu 30 May 2024 16:26:03 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150659 IP address blocks: 2400:daa0::/32 maxlen: 32 2400:daa0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36859 (0x8ffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:26:03 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a89b-45a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:98:03:27:5b:e2:aa:44:6f:00:11:7a:5a: e3:38:60:a1:dd:1e:be:8a:e2:4c:61:d1:4c:13:02: 5b:c2:02:7a:fe:3a:52:e2:1c:23:d9:c4:c3:92:ce: c6:b3:0e:08:fb:e8:fb:f5:c7:62:a8:d6:ad:eb:15: c2:cc:5a:61:71:c7:ff:8b:67:e2:c5:b7:f5:ab:5a: be:c5:00:96:a0:f3:9b:ff:a6:c7:de:c3:07:93:9f: 37:ff:34:38:97:1b:db:47:50:16:4e:c1:dd:e0:53: 93:0d:f5:1e:36:5c:8b:df:f4:a8:84:c1:5a:6e:c9: b3:a0:36:bf:17:29:38:ed:9f:83:78:c4:9c:5d:af: f8:34:21:41:fe:eb:de:74:ea:2f:7a:c4:3c:eb:b9: f5:cb:75:90:62:e2:f4:84:c9:a2:b9:93:ce:0e:7b: f0:de:7d:9b:90:53:aa:45:c8:cb:73:e1:85:6f:ca: 1d:15:53:03:3e:1d:d2:82:60:55:0c:2d:b3:02:54: df:78:4f:83:94:79:ea:45:52:86:33:fb:46:f6:81: 5f:6e:9f:28:64:72:1e:23:f2:f8:aa:b6:b4:9b:d3: 8a:bb:d6:08:e5:06:75:55:ea:46:f1:44:34:28:7b: bc:be:88:21:55:ec:27:5f:71:d3:b6:e9:49:68:8c: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:44:AA:05:D5:CD:29:8C:47:5B:82:FC:03:3F:6B:C1:39:64:BC:C4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07FC93D4A54911EE9A3EC84EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:daa0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:45:a4:f5:1f:fc:22:02:6f:6e:b6:c2:1d:ab:30:de:06:e4: 59:ea:03:f1:fc:2a:81:1b:36:16:dc:ee:5e:fd:cc:ba:6c:f0: 4c:aa:73:3c:df:a9:5e:74:12:fb:53:76:27:f1:e5:b7:25:ac: 5b:97:6e:0b:f3:8f:4c:c3:5c:16:11:70:15:04:27:f8:dd:38: 91:72:6d:6e:bd:14:25:60:71:fd:ca:da:27:a8:96:b9:b7:98: 02:3e:8f:d1:99:05:fd:7d:3c:4a:74:c6:17:aa:46:47:f9:cd: 2e:55:8b:22:d9:88:df:0f:dd:3d:b5:85:1e:aa:81:a7:95:0f: b1:83:a0:72:d5:38:f0:f0:eb:5d:d4:49:c1:e4:51:58:f6:71: 83:79:3e:6b:4c:f8:94:9e:e7:0a:05:ea:4e:29:d6:4c:6a:37: 26:29:4c:db:cd:21:66:63:e9:74:61:e7:da:67:28:25:4b:c2: bb:36:da:08:89:68:59:07:cc:6d:ef:a7:9b:8c:60:b6:91:81: 05:91:55:5a:59:60:27:96:5a:0c:73:d9:7f:ff:8b:53:d4:c6: 72:70:21:48:37:16:cf:e8:e6:cd:5c:9d:2e:fc:78:c4:c5:1a: 1e:53:12:17:29:a3:d2:2b:fb:17:15:ea:a8:60:e3:fc:ef:10: 88:2a:8c:06 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAI/7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjYwM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4OWItNDVhMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAONHmAMnW+KqRG8AEXpa4zhgod0evoriTGHRTBMCW8ICev46UuIcI9nEw5LO xrMOCPvo+/XHYqjWresVwsxaYXHH/4tn4sW39atavsUAlqDzm/+mx97DB5OfN/80 OJcb20dQFk7B3eBTkw31HjZci9/0qITBWm7Js6A2vxcpOO2fg3jEnF2v+DQhQf7r 3nTqL3rEPOu59ct1kGLi9ITJormTzg578N59m5BTqkXIy3PhhW/KHRVTAz4d0oJg VQwtswJU33hPg5R56kVShjP7RvaBX26fKGRyHiPy+Kq2tJvTirvWCOUGdVXqRvFE NCh7vL6IIVXsJ19x07bpSWiMUwcCAwEAAaOCApYwggKSMB0GA1UdDgQWBBQjRKoF 1c0pjEdbgvwDP2vBOWS8xDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3RkM5M0Q0 QTU0OTExRUU5QTNFQzg0RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJADaoDANBgkqhkiG9w0BAQsFAAOCAQEAC0Wk9R/8IgJv brbCHasw3gbkWeoD8fwqgRs2FtzuXv3MumzwTKpzPN+pXnQS+1N2J/HltyWsW5du C/OPTMNcFhFwFQQn+N04kXJtbr0UJWBx/craJ6iWubeYAj6P0ZkF/X08SnTGF6pG R/nNLlWLItmI3w/dPbWFHqqBp5UPsYOgctU48PDrXdRJweRRWPZxg3k+a0z4lJ7n CgXqTinWTGo3JilM280hZmPpdGHn2mcoJUvCuzbaCIloWQfMbe+nm4xgtpGBBZFV WllgJ5ZaDHPZf/+LU9TGcnAhSDcWz+jmzVydLvx4xMUaHlMSFymj0iv7FxXqqGDj /O8QiCqMBg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:40 2024 by rpki-client on console-fra.rpki-client.org