$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2D8A40E1D711EEA0F9737AC4F9AE02.roa File: 4A2D8A40E1D711EEA0F9737AC4F9AE02.roa (raw, json) Hash identifier: kQca4Kyy3ZX+ReoBe3DUigb5+PwEtOy9/E2UgRf+VPg= Subject key identifier: 42:E8:19:A0:7E:AF:3F:EB:3E:50:93:0F:67:43:1D:A7:59:1B:37:4A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9091 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2D8A40E1D711EEA0F9737AC4F9AE02.roa Signing time: Thu 30 May 2024 16:28:30 +0000 ROA not before: Thu 30 May 2024 16:28:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152581 IP address blocks: 2001:df3:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37009 (0x9091) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:28:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a92d-c537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:31:0d:46:8d:d1:c1:aa:66:4a:bf:c0:96: 10:ed:f2:56:44:55:aa:63:3e:93:60:22:66:e5:91: 27:21:5e:99:f2:da:fb:82:06:0a:6f:0b:06:ff:6c: 98:b1:91:96:2b:99:24:a1:ef:9f:31:03:6d:ae:a5: 01:c7:93:c9:ce:ca:f7:fb:fd:54:a4:38:9e:0d:86: 58:19:ff:65:02:e8:6d:7a:03:5c:93:9a:eb:9e:38: 7d:33:4b:29:70:a9:6c:c5:d3:73:24:47:e7:4c:55: 8d:ed:50:32:02:5a:52:1b:b9:e4:45:e5:18:d6:7f: 3c:63:33:de:81:1a:21:27:47:24:09:a2:f9:30:4b: 5d:e0:b3:f1:21:97:a8:a3:8d:a5:86:ef:3e:14:12: df:8b:33:16:2e:e4:e0:39:9e:c9:52:dc:97:f0:38: 54:c1:1a:e2:fc:6d:45:4e:c2:14:1c:47:7a:4c:f4: d3:c3:aa:73:59:cf:2b:1e:46:aa:4e:5d:3d:d2:dd: bb:0e:e5:72:1d:8c:fd:62:31:3d:98:70:17:65:20: e4:fc:1e:a0:06:d4:aa:a1:c2:0b:26:5a:d8:8a:2e: 54:b7:a7:8f:68:e0:3e:a4:ee:8f:fc:71:54:0f:2b: de:c9:df:02:48:82:d2:b2:19:95:26:00:78:1e:3b: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E8:19:A0:7E:AF:3F:EB:3E:50:93:0F:67:43:1D:A7:59:1B:37:4A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2D8A40E1D711EEA0F9737AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:8840::/48 Signature Algorithm: sha256WithRSAEncryption 2d:e6:0b:5b:27:ce:56:60:b5:70:25:f1:e5:0d:bb:86:ce:03: f0:c8:89:cf:00:c3:3e:b2:e3:ef:28:3f:c6:15:4d:12:20:ac: 98:c2:42:2d:ac:0d:33:1e:f4:a6:e4:8c:17:36:a5:d8:85:11: cc:52:77:75:d5:f7:d3:b1:e4:a1:ee:ed:a4:af:68:bc:84:44: d7:dd:3c:6b:4a:c5:98:3c:53:7c:38:71:5f:bd:77:d9:89:20: f4:b8:51:97:cc:c7:87:9a:3a:72:e7:72:2f:6f:cd:29:c2:96: e8:88:f4:bd:9d:ad:84:19:af:16:9c:87:ae:98:c7:ff:7a:2e: fa:45:d3:7d:01:78:1b:63:50:ff:ca:d5:ce:68:ea:ea:62:af: eb:ec:79:8c:56:72:06:22:58:22:5e:c0:5c:ff:ba:54:f9:e4: bd:5b:08:12:2c:f6:09:a0:d1:5c:e0:65:f9:13:bc:94:0e:4a: 79:e9:36:a6:77:9c:8e:2d:b6:76:eb:8f:61:b6:89:21:bd:02: cb:fd:c8:3e:2b:b7:40:a7:6d:ba:dd:33:2c:a8:9a:9b:40:77: e1:9f:54:e3:4c:a1:89:da:94:33:bc:d8:57:b1:a7:01:be:67: 99:a9:46:a6:5b:38:36:76:2d:6c:d8:38:02:e0:72:12:dc:93: 8c:f0:28:75 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAJCRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjgzMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5MmQtYzUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnxMQ1GjdHBqmZKv8CWEO3yVkRVqmM+k2AiZuWRJyFemfLa+4IGCm8LBv9s mLGRliuZJKHvnzEDba6lAceTyc7K9/v9VKQ4ng2GWBn/ZQLobXoDXJOa6544fTNL KXCpbMXTcyRH50xVje1QMgJaUhu55EXlGNZ/PGMz3oEaISdHJAmi+TBLXeCz8SGX qKONpYbvPhQS34szFi7k4DmeyVLcl/A4VMEa4vxtRU7CFBxHekz008Oqc1nPKx5G qk5dPdLduw7lch2M/WIxPZhwF2Ug5PweoAbUqqHCCyZa2IouVLenj2jgPqTuj/xx VA8r3snfAkiC0rIZlSYAeB47BdsCAwEAAaOCApgwggKUMB0GA1UdDgQWBBRC6Bmg fq8/6z5Qkw9nQx2nWRs3SjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBMkQ4QTQw RTFENzExRUVBMEY5NzM3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN84hAMA0GCSqGSIb3DQEBCwUAA4IBAQAt5gtbJ85W YLVwJfHlDbuGzgPwyInPAMM+suPvKD/GFU0SIKyYwkItrA0zHvSm5IwXNqXYhRHM Und11ffTseSh7u2kr2i8hETX3TxrSsWYPFN8OHFfvXfZiSD0uFGXzMeHmjpy53Iv b80pwpboiPS9na2EGa8WnIeumMf/ei76RdN9AXgbY1D/ytXOaOrqYq/r7HmMVnIG IlgiXsBc/7pU+eS9WwgSLPYJoNFc4GX5E7yUDkp56Tamd5yOLbZ2649htokhvQLL /cg+K7dAp2263TMsqJqbQHfhn1TjTKGJ2pQzvNhXsacBvmeZqUamWzg2di1s2DgC 4HIS3JOM8Ch1 -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:50 2025 by rpki-client