$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa File: 5835972CD53911EEB6855F57C4F9AE02.roa (raw, json) Hash identifier: kxK2zt7T0602FSxqELESmU3G2b/WpqFDYVi+KiyD1r0= Subject key identifier: F2:3E:51:D9:9D:2E:DF:EC:A3:9C:A9:C6:47:DD:59:D1:F3:10:3E:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8FF8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa Signing time: Thu 30 May 2024 16:25:59 +0000 ROA not before: Thu 30 May 2024 16:25:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150656 IP address blocks: 2001:df1:e540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36856 (0x8ff8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:25:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a897-bed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:fd:27:2e:7e:83:c8:35:00:c8:74:1f:63: f6:97:9a:18:bf:88:ff:8e:69:78:d8:98:85:f8:fd: 9f:7a:7b:1e:6d:5c:17:13:ce:12:da:5b:f9:76:c3: f5:38:26:f6:3d:78:c2:db:7a:b0:57:f8:d3:3f:60: 57:d1:e9:1c:38:5a:89:47:f9:8b:6c:38:21:68:a8: 34:c2:57:52:9a:1e:01:1e:db:8e:79:a6:57:c6:3a: 3a:13:ac:80:23:92:db:22:b0:f9:75:51:0f:06:76: bd:45:12:88:48:17:f5:e1:92:3d:ed:a1:09:fb:26: 71:b3:a1:ef:16:95:d3:71:5b:83:b4:a2:69:71:c7: 7b:f3:b1:a6:c2:d8:63:af:4b:28:78:9b:13:99:fc: 10:ac:2d:d9:ca:fb:15:e0:9b:3e:39:1f:75:2c:20: 85:13:be:19:eb:28:2d:9a:3f:4f:2b:1d:84:54:3e: 7d:35:e1:09:e6:52:ac:43:94:80:4d:04:02:bd:b2: 9c:88:49:12:a9:42:16:f4:21:1f:86:66:e9:4f:10: 19:f2:5d:1e:0e:c0:1d:89:50:86:06:c1:32:14:d2: 10:57:f8:d7:d5:80:10:2f:0c:3b:f6:2c:17:ba:78: cd:6b:11:d5:0a:c8:55:95:71:dd:80:d2:07:cd:ba: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:51:D9:9D:2E:DF:EC:A3:9C:A9:C6:47:DD:59:D1:F3:10:3E:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:e540::/48 Signature Algorithm: sha256WithRSAEncryption 42:ce:b9:0f:ec:51:dc:8c:78:6b:41:21:f4:97:8f:cf:b1:61: 4f:dd:cf:b1:2e:69:30:60:4b:99:4b:e8:68:59:4f:c4:1b:1f: 92:b7:c3:8f:7d:b4:46:57:96:a2:14:b0:1b:6c:05:d5:18:8a: 0c:33:e4:1f:e4:b8:6b:78:33:3a:58:55:d3:b4:d4:93:1f:5b: 64:de:ed:7a:79:61:1c:0c:1e:4f:44:6e:38:64:a4:3b:e3:b7: 17:2c:73:61:10:80:88:62:6b:3c:b1:91:78:ff:36:b8:b7:36: 35:43:dc:a5:46:67:36:1a:89:dc:c6:3e:3d:bf:52:77:4e:35: 2b:a4:d7:cc:96:3b:d7:0f:45:df:46:4b:e8:9e:58:5c:e4:f7: 84:eb:c1:ae:9b:0f:6b:b1:11:de:af:2f:a9:61:c5:2e:2f:3e: 03:cd:01:ec:36:72:3b:e3:11:4d:39:52:8c:a4:c5:7c:8a:c6: d9:16:9c:d0:9b:be:48:76:fd:6e:c9:be:f9:53:f8:6c:55:87: 1b:1e:5c:bc:66:01:22:c2:89:fb:43:7e:c0:8a:49:fc:8a:fc: 42:24:02:c6:3f:e0:bf:90:b2:bf:57:85:85:b1:64:93:6c:c1: 0e:0c:0e:ef:53:6f:05:d2:d3:5b:34:f5:26:f7:ff:dc:8f:67: 21:3b:6d:ab -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAI/4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MjU1OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE4OTctYmVkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIW/ScufoPINQDIdB9j9peaGL+I/45peNiYhfj9n3p7Hm1cFxPOEtpb+XbD 9Tgm9j14wtt6sFf40z9gV9HpHDhaiUf5i2w4IWioNMJXUpoeAR7bjnmmV8Y6OhOs gCOS2yKw+XVRDwZ2vUUSiEgX9eGSPe2hCfsmcbOh7xaV03Fbg7SiaXHHe/OxpsLY Y69LKHibE5n8EKwt2cr7FeCbPjkfdSwghRO+GesoLZo/TysdhFQ+fTXhCeZSrEOU gE0EAr2ynIhJEqlCFvQhH4Zm6U8QGfJdHg7AHYlQhgbBMhTSEFf419WAEC8MO/Ys F7p4zWsR1QrIVZVx3YDSB826OokCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTyPlHZ nS7f7KOcqcZH3VnR8xA+BDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4MzU5NzJD RDUzOTExRUVCNjg1NUY1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8eVAMA0GCSqGSIb3DQEBCwUAA4IBAQBCzrkP7FHc jHhrQSH0l4/PsWFP3c+xLmkwYEuZS+hoWU/EGx+St8OPfbRGV5aiFLAbbAXVGIoM M+Qf5LhreDM6WFXTtNSTH1tk3u16eWEcDB5PRG44ZKQ747cXLHNhEICIYms8sZF4 /za4tzY1Q9ylRmc2Goncxj49v1J3TjUrpNfMljvXD0XfRkvonlhc5PeE68Gumw9r sRHery+pYcUuLz4DzQHsNnI74xFNOVKMpMV8isbZFpzQm75Idv1uyb75U/hsVYcb Hly8ZgEiwon7Q37Aikn8ivxCJALGP+C/kLK/V4WFsWSTbMEODA7vU28F0tNbNPUm 9//cj2chO22r -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:43 2025 by rpki-client