$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8691348C8C2E11EDBA232975C4F9AE02.roa File: 8691348C8C2E11EDBA232975C4F9AE02.roa (raw, json) Hash identifier: SVNV4SSNRbkJuBExGYRdYV7ht5U+w954MgueSXSJfTA= Subject key identifier: AD:86:F5:51:BC:B7:DC:72:2A:10:56:68:37:BF:54:66:DF:92:01:F0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8BD5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8691348C8C2E11EDBA232975C4F9AE02.roa Signing time: Thu 30 May 2024 16:08:50 +0000 ROA not before: Thu 30 May 2024 16:08:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137657 IP address blocks: 2403:74c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35797 (0x8bd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:08:50 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a492-35f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:1d:fd:fc:09:22:bf:e6:99:b9:77:8c:59: b5:b8:44:13:e7:bc:68:c3:c0:29:8b:c6:24:f3:20: 65:28:5d:f6:a3:5c:62:87:4d:d0:8c:58:b1:03:d4: 65:b4:2a:6e:e0:57:ea:08:70:d7:d0:cb:14:58:ac: fd:11:4c:fe:dc:ec:58:3f:29:c6:4f:fb:9c:ac:62: ad:49:dc:d9:13:fa:54:c9:a0:92:48:8d:bc:af:02: 61:a9:60:12:e3:80:14:53:0b:f5:55:7d:b4:a9:a3: 73:ca:f4:eb:1f:27:a4:c1:9f:9b:04:1c:d6:b2:b0: c5:b3:f0:38:f5:ff:aa:41:36:a3:b3:3b:dc:88:d2: 2e:de:4a:9e:d9:18:87:43:c1:e0:ad:f8:71:86:fa: fc:0e:2c:e1:9c:81:7a:ec:6c:a9:31:84:2a:5d:c7: 20:35:0a:3e:c9:14:21:0a:e6:02:5e:31:bb:b2:01: 7f:66:5e:01:f7:c8:13:04:66:8e:86:59:b7:c9:d4: 9f:bc:1b:83:6c:36:10:e2:18:3c:b5:f7:ef:e1:0c: aa:09:ca:a4:e3:ee:7e:f4:b6:61:8f:5d:48:d6:d4: db:9c:54:06:9e:d7:94:e8:81:93:4e:7a:77:9b:25: ea:77:db:b8:df:99:ce:d3:31:6c:ba:67:43:a4:a5: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:86:F5:51:BC:B7:DC:72:2A:10:56:68:37:BF:54:66:DF:92:01:F0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8691348C8C2E11EDBA232975C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:74c0::/32 Signature Algorithm: sha256WithRSAEncryption 34:e5:10:1a:7f:e5:40:19:0d:fb:8d:71:21:27:ea:38:71:a6: 28:72:f7:4f:e2:e6:9b:b5:f0:e3:5c:83:79:fc:d2:65:2f:5d: 87:ab:13:55:1e:95:94:3e:bf:0e:05:5a:90:ed:88:a3:01:cc: 71:91:d9:c5:20:98:fc:10:fe:25:b0:de:b2:02:23:ba:b3:ef: fb:a0:f0:86:85:b3:9e:e4:1a:3c:a3:26:cf:a4:c1:93:9d:bd: 8f:0d:61:5b:5d:a3:23:3a:24:fc:b8:0c:e5:3c:e5:06:cb:4a: 6b:f5:c5:75:fe:13:f0:ae:ab:81:72:cf:81:b7:63:c6:47:de: cb:ce:8e:09:07:31:e8:d1:bc:14:3c:18:a8:0a:84:c1:cc:65: 7b:2f:6b:21:a4:31:13:0e:89:98:e4:a6:93:d9:1a:c3:a5:aa: 81:d5:3e:f8:80:b3:c6:e8:76:2c:36:a1:fe:27:e0:c6:9e:a7: 93:ba:c6:df:2a:e5:07:5e:35:83:27:75:e0:4b:59:af:3e:e9: 49:6c:9c:94:15:01:bc:81:f0:ce:3c:28:68:09:d0:2e:b9:19: 91:79:5d:1b:de:17:59:86:5c:dd:f5:19:84:59:a0:e5:7f:98: 93:e3:3a:b7:66:3f:85:02:58:e4:3a:b5:5b:96:ca:10:5b:c0: 2f:68:eb:dd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAIvVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDg1MFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0OTItMzVmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMk/Hf38CSK/5pm5d4xZtbhEE+e8aMPAKYvGJPMgZShd9qNcYodN0IxYsQPU ZbQqbuBX6ghw19DLFFis/RFM/tzsWD8pxk/7nKxirUnc2RP6VMmgkkiNvK8CYalg EuOAFFML9VV9tKmjc8r06x8npMGfmwQc1rKwxbPwOPX/qkE2o7M73IjSLt5KntkY h0PB4K34cYb6/A4s4ZyBeuxsqTGEKl3HIDUKPskUIQrmAl4xu7IBf2ZeAffIEwRm joZZt8nUn7wbg2w2EOIYPLX37+EMqgnKpOPufvS2YY9dSNbU25xUBp7XlOiBk056 d5sl6nfbuN+ZztMxbLpnQ6Sld4MCAwEAAaOCApYwggKSMB0GA1UdDgQWBBSthvVR vLfccioQVmg3v1Rm35IB8DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg2OTEzNDhD OEMyRTExRURCQTIzMjk3NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAN0wDANBgkqhkiG9w0BAQsFAAOCAQEANOUQGn/lQBkN +41xISfqOHGmKHL3T+Lmm7Xw41yDefzSZS9dh6sTVR6VlD6/DgVakO2IowHMcZHZ xSCY/BD+JbDesgIjurPv+6DwhoWznuQaPKMmz6TBk529jw1hW12jIzok/LgM5Tzl BstKa/XFdf4T8K6rgXLPgbdjxkfey86OCQcx6NG8FDwYqAqEwcxley9rIaQxEw6J mOSmk9kaw6WqgdU++ICzxuh2LDah/ifgxp6nk7rG3yrlB141gyd14EtZrz7pSWyc lBUBvIHwzjwoaAnQLrkZkXldG94XWYZc3fUZhFmg5X+Yk+M6t2Y/hQJY5Dq1W5bK EFvAL2jr3Q== -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:44 2024 by rpki-client on console-fra.rpki-client.org