$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa File: 0B71F7E6B5EE11EABBA2E915C4F9AE02.roa (raw, json) Hash identifier: BzoBKlgCfbgqhB+9wA6yWgI0my1zQDt47FAUMNfxiOs= Subject key identifier: B7:63:A5:79:50:78:04:6F:2D:B1:D3:01:C1:07:4A:02:09:A0:85:18 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8863 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa Signing time: Thu 30 May 2024 15:54:20 +0000 ROA not before: Thu 30 May 2024 15:54:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132524 IP address blocks: 2406:f00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34915 (0x8863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 15:54:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a12c-8fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:1b:8a:46:a2:83:de:73:85:92:b1:18:7e: a9:54:d0:38:38:ce:9a:f6:3b:2c:3c:e6:23:99:38: c0:79:ff:d8:4a:b6:f2:4a:17:e4:4a:af:08:c8:a5: d5:42:70:f6:ae:4a:10:62:65:22:1c:24:c7:54:f2: 2f:85:24:99:47:91:64:ce:72:9d:c2:2d:95:25:a7: 5d:af:fb:d4:5f:16:ee:7b:66:39:76:d9:93:78:3e: 43:bd:6c:51:ac:bc:d5:b2:e9:c8:28:57:2d:28:65: ba:da:18:c9:9b:ea:4d:b5:fd:63:5f:75:cd:87:ed: ed:52:58:0b:ac:86:5d:4a:03:37:32:1c:83:2e:0b: fb:ec:52:b5:e8:d0:65:bb:ee:f6:fb:75:5e:d0:bb: 15:d5:6a:7a:cd:f9:0b:19:e4:d5:68:ee:74:f6:32: f9:ef:33:7e:f5:3d:ae:be:1e:b1:33:80:b8:19:5a: f0:b9:fd:cf:43:6e:0d:63:27:f2:7d:80:12:9f:e1: ac:30:14:03:99:70:88:b3:0d:e5:c5:6d:ab:30:14: 0c:b6:1b:3c:23:21:a6:f7:97:3d:34:b0:e3:15:6b: 8f:2f:7d:23:a1:c4:53:7a:12:9b:98:c4:56:98:32: 8a:4f:b2:87:1e:5b:aa:ff:e8:f3:14:37:40:17:46: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:63:A5:79:50:78:04:6F:2D:B1:D3:01:C1:07:4A:02:09:A0:85:18 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0B71F7E6B5EE11EABBA2E915C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:f00:1::/48 Signature Algorithm: sha256WithRSAEncryption 2b:90:75:0d:1f:a2:7f:9b:42:03:63:92:9e:d2:f7:78:78:d6: 84:40:04:bc:7e:a1:f6:a5:f4:bc:12:49:73:32:f5:e1:b2:5b: bb:51:3d:3f:4e:f6:f5:ae:24:92:ba:df:be:0b:53:39:98:c5: 8d:f1:e4:21:89:72:c6:4c:4d:f9:4d:fe:a1:71:34:76:aa:8f: b4:3c:a4:0a:95:3a:be:0d:cd:ad:58:b3:92:e7:03:23:f0:b7: 73:11:69:4f:98:a8:60:25:d5:50:d7:d5:93:1a:ef:dd:da:ff: 96:52:11:5a:9b:dd:d4:a4:be:dc:d0:e3:1d:76:d2:6e:34:38: 59:50:f6:df:14:e1:d4:44:d6:ef:08:23:6a:db:6e:7d:98:a3: 32:1b:f0:b0:bd:53:cf:a2:57:5d:a0:6d:3c:c0:6c:11:81:d6: a0:a2:ad:3d:91:f5:d8:5f:7b:b6:28:45:97:3b:32:f7:1e:5d: 94:3d:68:bc:68:49:f0:8c:7d:5f:eb:4d:35:a8:9c:b3:af:fd: df:96:5e:9d:14:12:7d:48:1d:df:78:13:4f:35:1d:f4:35:4a: e6:c2:9b:a9:20:42:ad:3c:cc:d6:4a:4b:9d:92:2b:76:20:17: 96:2a:7d:20:95:14:d6:60:43:88:0d:44:dc:fe:c1:45:58:ae: 50:c6:73:f2 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAIhjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE1NTQyMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGExMmMtOGZiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD2G4pGooPec4WSsRh+qVTQODjOmvY7LDzmI5k4wHn/2Eq28koX5EqvCMil 1UJw9q5KEGJlIhwkx1TyL4UkmUeRZM5yncItlSWnXa/71F8W7ntmOXbZk3g+Q71s Uay81bLpyChXLShlutoYyZvqTbX9Y191zYft7VJYC6yGXUoDNzIcgy4L++xStejQ Zbvu9vt1XtC7FdVqes35Cxnk1WjudPYy+e8zfvU9rr4esTOAuBla8Ln9z0NuDWMn 8n2AEp/hrDAUA5lwiLMN5cVtqzAUDLYbPCMhpveXPTSw4xVrjy99I6HEU3oSm5jE Vpgyik+yhx5bqv/o8xQ3QBdG39MCAwEAAaOCApgwggKUMB0GA1UdDgQWBBS3Y6V5 UHgEby2x0wHBB0oCCaCFGDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBCNzFGN0U2 QjVFRTExRUFCQkEyRTkxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAYPAAABMA0GCSqGSIb3DQEBCwUAA4IBAQArkHUNH6J/ m0IDY5Ke0vd4eNaEQAS8fqH2pfS8EklzMvXhslu7UT0/Tvb1riSSut++C1M5mMWN 8eQhiXLGTE35Tf6hcTR2qo+0PKQKlTq+Dc2tWLOS5wMj8LdzEWlPmKhgJdVQ19WT Gu/d2v+WUhFam93UpL7c0OMddtJuNDhZUPbfFOHURNbvCCNq2259mKMyG/CwvVPP olddoG08wGwRgdagoq09kfXYX3u2KEWXOzL3Hl2UPWi8aEnwjH1f6001qJyzr/3f ll6dFBJ9SB3feBNPNR30NUrmwpupIEKtPMzWSkudkit2IBeWKn0glRTWYEOIDUTc /sFFWK5QxnPy -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:27 2024 by rpki-client on console-fra.rpki-client.org