$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa File: 415CC3C8604311EF88ACB764C4F9AE02.roa (raw, json) Hash identifier: 6KtayLRWSUzONUeuOfolHFyD0q8vrftx2FhaS35liDM= Subject key identifier: 2A:96:60:62:C3:7A:83:6D:EF:CE:4E:F6:7A:8F:08:42:94:A7:3D:55 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9748 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa Signing time: Thu 22 Aug 2024 04:59:05 +0000 ROA not before: Thu 22 Aug 2024 04:59:05 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152488 IP address blocks: 2001:df3:bfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38728 (0x9748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Aug 22 04:59:05 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66c6c599-0a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:de:ba:34:e4:a9:b8:a4:39:83:a9:3b:57: be:38:25:ca:af:a2:18:6d:14:46:69:69:e5:ae:4f: 00:14:f6:9d:14:5b:db:a0:48:a9:f2:41:cf:4b:02: af:72:d7:ad:c6:9e:c4:3b:b9:c9:96:76:df:f4:98: f8:a2:c4:11:7b:d2:ee:6a:f9:aa:d8:45:64:76:d6: 0d:66:98:b3:fd:25:2f:a5:b0:23:e0:1d:d4:cb:1f: 16:60:88:f1:4d:8b:71:4d:8b:68:75:cb:85:de:3b: 82:fa:e6:bc:cb:4b:46:c7:6e:52:6a:29:12:17:9b: 10:ae:f5:b3:99:2e:5e:b6:1e:c4:bb:e2:81:e1:a0: 39:64:69:7b:f8:3b:55:23:c6:4b:66:96:cd:98:84: 1d:e5:b7:34:0b:b4:07:96:f5:00:fe:d0:fc:53:8f: e6:a8:94:bb:bc:97:5d:47:ef:d3:77:7f:7e:09:3a: 67:7e:c8:4d:15:67:58:fc:ab:48:43:e5:c3:09:73: 15:3f:c0:6e:c4:4a:61:df:74:77:f6:fc:5c:e5:74: 9a:94:4d:fa:66:ae:54:f7:3d:f3:00:05:de:c3:0b: 30:df:b3:40:fa:f8:92:d8:10:20:2e:22:f2:e2:e2: 6e:04:28:bd:6d:41:0f:db:27:4c:3f:60:1d:c7:4f: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:96:60:62:C3:7A:83:6D:EF:CE:4E:F6:7A:8F:08:42:94:A7:3D:55 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:bfc0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:d3:e7:7c:61:08:0e:bf:c9:29:07:92:ce:e9:fc:5f:d4:1e: 5c:31:e3:4d:63:1f:ca:16:78:c2:14:84:69:bf:82:3e:3c:2c: ce:fa:02:9f:ec:c6:31:9c:ec:08:c3:f1:cd:fa:f7:5f:79:61: 7e:a4:0d:a7:c8:50:9f:54:2b:a8:36:0c:4b:4c:89:b9:25:0b: e3:59:db:89:84:fa:f9:27:11:d9:a7:1d:79:e0:99:28:ae:c3: 2e:eb:f1:bf:0a:89:86:74:8d:51:8e:fb:44:2b:53:a0:bf:a9: 3c:93:f2:80:7d:8f:85:f0:9a:85:ae:17:72:49:21:a2:ca:3d: 38:33:38:13:27:2f:6c:14:ba:3c:f6:b7:c8:ab:17:4c:e2:8e: 47:15:ae:54:01:d0:73:e7:9b:ca:5c:00:54:ae:4a:0f:56:0f: a6:47:28:70:d8:f0:4e:cb:ef:65:24:cd:08:44:29:4a:be:9b: 7d:d6:de:5c:42:7c:f0:11:6d:79:af:ef:13:92:2a:53:8e:b9: fd:7c:81:a4:f2:80:28:d0:c0:f9:e1:e3:4f:53:77:bb:5c:81: b2:2d:97:8c:19:2e:b6:d5:db:a0:ee:1f:89:cc:23:69:e0:1d: a9:8a:31:d2:09:c2:76:a0:4a:17:67:dd:12:35:6a:f6:a6:3c: b3:2b:9e:1e -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAJdIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDgyMjA0NTkwNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZjNmM1OTktMGE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzX3ro05Km4pDmDqTtXvjglyq+iGG0URmlp5a5PABT2nRRb26BIqfJBz0sC r3LXrcaexDu5yZZ23/SY+KLEEXvS7mr5qthFZHbWDWaYs/0lL6WwI+Ad1MsfFmCI 8U2LcU2LaHXLhd47gvrmvMtLRsduUmopEhebEK71s5kuXrYexLvigeGgOWRpe/g7 VSPGS2aWzZiEHeW3NAu0B5b1AP7Q/FOP5qiUu7yXXUfv03d/fgk6Z37ITRVnWPyr SEPlwwlzFT/AbsRKYd90d/b8XOV0mpRN+mauVPc98wAF3sMLMN+zQPr4ktgQIC4i 8uLibgQovW1BD9snTD9gHcdPRqkCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQqlmBi w3qDbe/OTvZ6jwhClKc9VTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQxNUNDM0M4 NjA0MzExRUY4OEFDQjc2NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN87/AMA0GCSqGSIb3DQEBCwUAA4IBAQBs0+d8YQgO v8kpB5LO6fxf1B5cMeNNYx/KFnjCFIRpv4I+PCzO+gKf7MYxnOwIw/HN+vdfeWF+ pA2nyFCfVCuoNgxLTIm5JQvjWduJhPr5JxHZpx154JkorsMu6/G/ComGdI1RjvtE K1Ogv6k8k/KAfY+F8JqFrhdySSGiyj04MzgTJy9sFLo89rfIqxdM4o5HFa5UAdBz 55vKXABUrkoPVg+mRyhw2PBOy+9lJM0IRClKvpt91t5cQnzwEW15r+8TkipTjrn9 fIGk8oAo0MD54eNPU3e7XIGyLZeMGS621dug7h+JzCNp4B2pijHSCcJ2oEoXZ90S NWr2pjyzK54e -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:11 2025 by rpki-client