$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa File: 2DCE9F38D8C511EBB077C81FC4F9AE02.roa (raw, json) Hash identifier: Rad3Dw0mOH+1vgP1rGfIjNMY9Z0Ta86pTeUMemOpoxw= Subject key identifier: 16:7F:69:DE:C9:E9:35:1D:4D:42:BC:94:CC:B6:80:DD:4B:98:E1:7F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8DE8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa Signing time: Thu 30 May 2024 16:17:32 +0000 ROA not before: Thu 30 May 2024 16:17:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141882 IP address blocks: 2001:df6:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36328 (0x8de8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:17:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a69c-b9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:cd:b9:8b:ec:11:ed:4c:b2:60:5b:22:50: 04:64:02:c2:ce:c3:cd:11:2a:69:fb:1b:f7:05:a4: 90:ca:bb:18:d4:dc:2f:74:5c:71:b8:a3:7e:17:68: ab:4e:82:b2:41:48:a0:90:22:f4:17:d3:0f:aa:f3: fc:bb:a7:b0:14:9a:0b:75:0f:4f:a9:9d:22:f9:42: 43:49:0d:52:1e:14:ae:ef:33:a1:3a:2a:6e:1b:06: 1d:3f:14:49:9e:6d:45:17:54:9f:06:23:3b:24:45: 5a:b0:13:98:1c:8b:40:5c:63:82:95:86:6e:fb:38: 10:cd:99:2a:ac:00:b7:6d:94:46:69:ea:af:f3:e8: 0e:18:21:51:06:08:bf:34:ca:ba:f1:65:b1:70:73: 13:6f:a9:85:ae:31:22:14:13:a0:d3:02:e1:a2:9a: 16:12:ee:60:71:40:fd:94:db:f2:c3:64:dc:87:6b: 7c:47:68:6e:2d:05:da:71:61:3f:df:42:6d:b4:2f: e0:3b:1c:15:5d:ff:1c:65:49:43:90:57:0a:da:f0: 18:9d:fe:c5:19:57:59:c0:ba:63:01:be:c0:e8:c4: 3e:bf:1c:89:ca:88:8c:5f:52:19:ba:77:4e:e6:51: 0d:f4:b3:14:e8:e6:3a:fb:0d:57:ae:2a:be:d1:c7: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:69:DE:C9:E9:35:1D:4D:42:BC:94:CC:B6:80:DD:4B:98:E1:7F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DCE9F38D8C511EBB077C81FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:4180::/48 Signature Algorithm: sha256WithRSAEncryption 2d:a5:fe:b1:93:89:dd:f8:a0:a0:65:a3:1f:93:6f:7d:29:ae: f0:bb:49:06:f8:54:f2:8c:3c:9e:3c:54:49:15:7c:1d:0a:92: 8a:74:64:9d:eb:82:82:84:b5:7f:93:ad:87:28:49:66:fd:6e: c7:8b:e0:7f:62:05:fb:b5:10:3b:c1:36:e3:9f:56:a5:b9:07: c4:53:24:8e:97:ea:91:77:35:ef:de:3b:33:f8:a2:9b:32:e1: 3c:74:12:99:9b:f4:62:1f:64:1d:e0:11:8d:b0:75:cc:a5:7f: 20:2f:e6:92:b1:40:3f:0d:e1:d8:64:77:3b:a1:bd:ef:56:ec: ed:36:89:c4:4f:b3:81:44:31:e9:0b:d4:b9:c4:0b:f0:20:e8: 1b:51:00:ef:32:89:d4:15:f5:c9:d3:58:f3:49:e7:06:9a:10: 13:91:50:6a:8a:5f:26:df:0d:3e:28:c3:3d:8e:e1:c3:ee:41: 78:99:88:a4:60:55:08:03:a1:75:3d:81:dd:04:18:f5:4b:f5: d6:27:cb:8a:3c:25:ac:9c:45:b3:f4:f2:42:80:0f:b3:0a:7e: 01:0c:1a:8a:f0:ae:04:07:68:11:da:75:0d:dc:54:8d:a4:73: 39:c9:96:59:4c:bd:12:07:fb:af:1e:f0:ae:a3:f2:20:63:15: 58:83:a7:bf -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAI3oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTczMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE2OWMtYjliNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfmzbmL7BHtTLJgWyJQBGQCws7DzREqafsb9wWkkMq7GNTcL3Rccbijfhdo q06CskFIoJAi9BfTD6rz/LunsBSaC3UPT6mdIvlCQ0kNUh4Uru8zoToqbhsGHT8U SZ5tRRdUnwYjOyRFWrATmByLQFxjgpWGbvs4EM2ZKqwAt22URmnqr/PoDhghUQYI vzTKuvFlsXBzE2+pha4xIhQToNMC4aKaFhLuYHFA/ZTb8sNk3IdrfEdobi0F2nFh P99CbbQv4DscFV3/HGVJQ5BXCtrwGJ3+xRlXWcC6YwG+wOjEPr8cicqIjF9SGbp3 TuZRDfSzFOjmOvsNV64qvtHHz8cCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQWf2ne yek1HU1CvJTMtoDdS5jhfzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJEQ0U5RjM4 RDhDNTExRUJCMDc3QzgxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9kGAMA0GCSqGSIb3DQEBCwUAA4IBAQAtpf6xk4nd +KCgZaMfk299Ka7wu0kG+FTyjDyePFRJFXwdCpKKdGSd64KChLV/k62HKElm/W7H i+B/YgX7tRA7wTbjn1aluQfEUySOl+qRdzXv3jsz+KKbMuE8dBKZm/RiH2Qd4BGN sHXMpX8gL+aSsUA/DeHYZHc7ob3vVuztNonET7OBRDHpC9S5xAvwIOgbUQDvMonU FfXJ01jzSecGmhATkVBqil8m3w0+KMM9juHD7kF4mYikYFUIA6F1PYHdBBj1S/XW J8uKPCWsnEWz9PJCgA+zCn4BDBqK8K4EB2gR2nUN3FSNpHM5yZZZTL0SB/uvHvCu o/IgYxVYg6e/ -----END CERTIFICATE-----Generated at Mon Nov 25 13:04:46 2024 by rpki-client on console-fra.rpki-client.org