$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa File: 4EC3982870C811ED8F53F009C4F9AE02.roa (raw, json) Hash identifier: lWgWNc4FFP8hv0MbihUHWdkgS+eHivQ0GN8ABZ9XnCQ= Subject key identifier: D2:0C:85:F1:F7:67:72:CC:07:B4:FD:D0:70:78:AF:42:AB:3C:E8:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8B36 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa Signing time: Thu 30 May 2024 16:06:15 +0000 ROA not before: Thu 30 May 2024 16:06:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136682 IP address blocks: 144.48.250.0/23 maxlen: 24 2001:df1:9b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35638 (0x8b36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:06:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a3f7-555c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:fd:f5:e0:4b:18:18:cb:57:35:c2:a9:65: a7:c1:3b:99:23:29:d2:ea:da:63:e0:31:6b:9c:6a: 9a:d7:24:fb:1e:05:82:a8:bb:14:44:2b:8b:19:e4: 1d:de:c8:41:6d:3d:93:b1:cd:13:f5:f1:93:0d:8f: b1:d4:86:64:1d:69:09:2a:e8:40:e9:12:51:6b:72: 13:16:75:9f:89:22:84:0f:9b:98:e4:26:0e:8d:58: 96:b7:69:c5:99:23:30:6f:74:d2:5f:b3:f2:45:0d: f7:31:b1:68:7a:e8:6d:36:7d:91:59:2e:af:e4:b0: 6e:f7:06:11:82:72:b0:72:1b:40:ec:65:19:40:f5: 0a:d0:93:a6:0d:cc:55:1d:99:b3:a7:08:cd:9f:29: 7d:6d:2b:0d:17:56:db:4e:8b:92:02:a8:4e:6d:5b: 45:aa:2a:be:fa:8c:33:01:5a:d7:89:06:5d:49:1d: 63:a2:b9:46:2f:a7:11:86:88:87:06:eb:f9:ca:8f: f1:dc:c5:eb:67:54:5b:02:62:6f:43:9e:c3:4b:89: 3d:3c:2d:f9:f7:89:3b:a2:be:49:6e:d5:03:1c:81: fc:39:1f:b1:a2:62:a5:78:75:c8:6e:54:db:2e:46: dd:2c:a7:a2:91:10:03:ef:c1:10:7d:40:20:50:45: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:85:F1:F7:67:72:CC:07:B4:FD:D0:70:78:AF:42:AB:3C:E8:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4EC3982870C811ED8F53F009C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.48.250.0/23 IPv6: 2001:df1:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 28:0b:66:be:73:36:96:34:92:33:3e:bb:fe:0f:50:dc:56:9c: 13:dd:44:80:79:a1:16:b0:16:75:17:24:3f:6b:f7:e6:1c:fe: 6e:99:2c:43:c2:10:43:0e:b0:54:a2:0f:4d:50:94:7f:c3:2b: 4a:25:aa:a3:bd:0a:d9:fc:e6:a9:19:24:89:65:06:0a:a9:92: 87:59:b9:41:f2:3d:52:fd:ed:24:4f:51:86:54:09:a4:9d:60: 9d:aa:c4:32:45:a3:ec:16:45:e5:21:68:86:ff:53:71:29:b8: 14:fa:9f:f2:a8:dd:50:e5:fd:9c:a4:0b:81:ff:93:4b:47:ca: 86:3e:9a:fb:c2:c2:7f:e8:c3:6e:29:93:60:90:80:d6:76:9b: 48:8e:10:23:8b:f3:1e:18:09:58:a7:88:d6:52:62:21:87:f1: 8a:9a:b7:c6:bf:af:f9:2b:4d:d3:59:53:85:3a:d4:d8:3c:08: 0a:2e:eb:ea:35:58:f5:f0:6f:17:55:3a:2c:b3:6d:1b:ad:e2: 28:ff:2d:51:60:af:50:ca:7f:33:56:f6:cd:ed:ed:89:bc:24: a0:f0:10:47:b1:94:7c:2f:81:9a:34:54:b7:e3:fd:38:44:bd: bf:e0:7b:4f:6f:68:bf:b5:ab:b5:e3:a0:d9:5e:01:62:1c:b5: 2d:f5:7c:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIs2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDYxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEzZjctNTU1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDG/fXgSxgYy1c1wqllp8E7mSMp0uraY+Axa5xqmtck+x4Fgqi7FEQrixnk Hd7IQW09k7HNE/Xxkw2PsdSGZB1pCSroQOkSUWtyExZ1n4kihA+bmOQmDo1Ylrdp xZkjMG900l+z8kUN9zGxaHrobTZ9kVkur+SwbvcGEYJysHIbQOxlGUD1CtCTpg3M VR2Zs6cIzZ8pfW0rDRdW206LkgKoTm1bRaoqvvqMMwFa14kGXUkdY6K5Ri+nEYaI hwbr+cqP8dzF62dUWwJib0Oew0uJPTwt+feJO6K+SW7VAxyB/DkfsaJipXh1yG5U 2y5G3SynopEQA+/BEH1AIFBFjT8CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTSDIXx 92dyzAe0/dBweK9CqzzoRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRFQzM5ODI4 NzBDODExRUQ4RjUzRjAwOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBkDD6MA8EAgACMAkDBwAgAQ3xm0AwDQYJKoZIhvcNAQEL BQADggEBACgLZr5zNpY0kjM+u/4PUNxWnBPdRIB5oRawFnUXJD9r9+Yc/m6ZLEPC EEMOsFSiD01QlH/DK0olqqO9Ctn85qkZJIllBgqpkodZuUHyPVL97SRPUYZUCaSd YJ2qxDJFo+wWReUhaIb/U3EpuBT6n/Ko3VDl/ZykC4H/k0tHyoY+mvvCwn/ow24p k2CQgNZ2m0iOECOL8x4YCViniNZSYiGH8Yqat8a/r/krTdNZU4U61Ng8CAou6+o1 WPXwbxdVOiyzbRut4ij/LVFgr1DKfzNW9s3t7Ym8JKDwEEexlHwvgZo0VLfj/ThE vb/ge09vaL+1q7XjoNleAWIctS31fGk= -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:13 2024 by rpki-client on console-ams.rpki-client.org