$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa File: 61E0CE4ED20611EEAD3BE953C4F9AE02.roa (raw, json) Hash identifier: vZsXokgOXf8oanbiePyjRL4E0TzThEVXjYc5bcpsBc8= Subject key identifier: 21:CB:54:04:D5:93:F1:7F:ED:44:C3:DB:6C:C2:3E:22:A5:E9:9E:BC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8370 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa Signing time: Fri 23 Feb 2024 04:45:35 +0000 ROA not before: Fri 23 Feb 2024 04:45:35 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151747 IP address blocks: 2001:df3:7a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33648 (0x8370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 23 04:45:35 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65d822ef-1183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:be:4a:d2:03:c9:7c:87:13:0a:3b:71:f9: d2:66:53:b9:f5:53:d6:e7:a4:e5:2a:68:0b:56:35: b4:74:48:11:55:66:46:05:24:dc:12:57:90:8d:b8: 8d:87:c6:d1:c1:b1:43:c5:a0:de:8c:e5:f5:4c:c2: 09:ac:67:85:2c:3c:80:7c:a3:cc:ec:3e:82:db:f5: 00:28:c4:a9:e1:25:62:b4:28:f3:ac:77:ab:8a:8f: 8f:7a:5b:52:76:11:4c:7d:42:fb:b9:da:fc:df:1f: 11:ef:8a:b5:70:5f:dc:c0:92:0c:16:be:27:df:fe: 5a:1d:b0:dd:cd:de:05:72:35:83:63:3d:5e:6d:b0: 18:6f:68:e7:e1:36:04:3c:a9:2e:90:e4:48:cc:b1: 65:3d:0b:a7:eb:12:92:7f:02:b8:3a:76:45:ec:b5: 70:d9:3f:c7:4f:bb:1c:3d:b7:50:4d:ee:2d:f3:ca: 53:a7:e5:4a:4e:f3:ca:c5:70:42:47:17:ef:8e:24: 4f:6d:3d:e4:04:cc:24:cd:b4:51:74:29:a9:8d:f2: b6:f9:b9:89:4a:c1:34:e4:89:e9:fd:f1:a6:2a:75: 1d:65:72:22:c1:72:91:a7:a8:79:f0:7b:1a:23:e8: 7e:33:e5:03:24:29:c2:dd:68:e1:a6:9e:bd:3d:14: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:54:04:D5:93:F1:7F:ED:44:C3:DB:6C:C2:3E:22:A5:E9:9E:BC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:7a40::/48 Signature Algorithm: sha256WithRSAEncryption 52:f4:d9:81:1e:a6:43:5a:34:1c:44:86:f9:06:e3:32:2a:18: 3b:76:d2:d3:39:6e:5d:7a:bf:25:32:c5:7a:67:1c:d8:fd:a2: f3:22:77:64:bf:09:e1:d5:65:58:73:d0:16:37:67:72:cb:e1: fd:3a:42:3d:4d:56:60:66:fd:94:33:2a:fe:bd:98:07:19:9a: d0:e9:f6:e3:0d:b3:72:ad:7c:6f:d9:1c:67:af:10:26:63:44: 87:27:ac:e7:1c:e4:f8:71:87:7c:05:6b:fa:f2:35:f3:7a:9e: d0:89:b4:99:42:d7:09:ee:47:70:89:97:10:a6:5d:95:6e:7b: f7:26:ee:17:2c:b7:3c:ab:0a:12:61:b4:90:97:05:f6:7a:d6: 94:ae:3a:25:5d:78:af:97:dd:30:3a:c5:47:e0:eb:0d:4f:a5: 8c:32:67:20:ce:80:50:fd:c6:87:a3:35:ae:29:d8:b6:52:da: 99:1b:6c:c9:84:8b:b9:95:ac:16:e4:b4:55:64:d9:71:89:90: 71:d6:45:0f:d0:43:7f:4e:a7:ee:cc:73:02:a8:a5:06:d6:96: 00:be:c9:bc:4f:81:18:36:39:87:89:e3:4d:a4:12:86:b4:49: d1:a2:19:d1:d4:fb:91:22:09:f5:b7:93:0d:ca:3a:4a:2a:63: 85:96:63:89 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAINwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIyMzA0NDUzNVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVkODIyZWYtMTE4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANxzvkrSA8l8hxMKO3H50mZTufVT1uek5SpoC1Y1tHRIEVVmRgUk3BJXkI24 jYfG0cGxQ8Wg3ozl9UzCCaxnhSw8gHyjzOw+gtv1ACjEqeElYrQo86x3q4qPj3pb UnYRTH1C+7na/N8fEe+KtXBf3MCSDBa+J9/+Wh2w3c3eBXI1g2M9Xm2wGG9o5+E2 BDypLpDkSMyxZT0Lp+sSkn8CuDp2Rey1cNk/x0+7HD23UE3uLfPKU6flSk7zysVw QkcX744kT2095ATMJM20UXQpqY3ytvm5iUrBNOSJ6f3xpip1HWVyIsFykaeoefB7 GiPofjPlAyQpwt1o4aaevT0UecUCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQhy1QE 1ZPxf+1Ew9tswj4ipemevDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYxRTBDRTRF RDIwNjExRUVBRDNCRTk1M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN83pAMA0GCSqGSIb3DQEBCwUAA4IBAQBS9NmBHqZD WjQcRIb5BuMyKhg7dtLTOW5der8lMsV6ZxzY/aLzIndkvwnh1WVYc9AWN2dyy+H9 OkI9TVZgZv2UMyr+vZgHGZrQ6fbjDbNyrXxv2RxnrxAmY0SHJ6znHOT4cYd8BWv6 8jXzep7QibSZQtcJ7kdwiZcQpl2Vbnv3Ju4XLLc8qwoSYbSQlwX2etaUrjolXXiv l90wOsVH4OsNT6WMMmcgzoBQ/caHozWuKdi2UtqZG2zJhIu5lawW5LRVZNlxiZBx 1kUP0EN/TqfuzHMCqKUG1pYAvsm8T4EYNjmHieNNpBKGtEnRohnR1PuRIgn1t5MN yjpKKmOFlmOJ -----END CERTIFICATE-----Generated at Thu May 16 17:51:33 2024 by rpki-client on console-ams.rpki-client.org