$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa File: 9DD5C0CA3CF111EF9B00241AC4F9AE02.roa (raw, json) Hash identifier: Vzjlo3eMf2O4IBh/bC41Zpj6fLBsLS9zqd+uaUeJ8rg= Subject key identifier: 34:F6:C2:88:CB:52:DA:8A:5C:A7:15:3B:4C:0B:38:07:72:71:5F:00 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 942D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa Signing time: Mon 08 Jul 2024 06:16:31 +0000 ROA not before: Mon 08 Jul 2024 06:16:31 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152539 IP address blocks: 2001:df3:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37933 (0x942d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 8 06:16:31 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=668b843e-22b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:ee:39:ab:5f:80:34:2a:3e:71:27:26:b1: 2a:bd:23:59:73:e3:61:78:11:e2:77:ad:54:6d:a3: 07:74:16:97:e6:b1:99:0e:50:d3:a7:31:3f:7c:46: 66:51:f3:e0:7e:bb:c9:41:6a:d1:ee:07:42:d2:5f: 84:c3:91:03:12:8d:a8:00:bf:86:f6:8b:f0:7a:8a: d8:d9:f0:f6:42:56:0c:94:0e:9d:46:8c:33:43:62: bd:f5:9e:26:33:22:7d:cf:9c:13:0f:6b:bc:9d:55: 32:2c:0f:15:40:ad:bd:01:c1:3b:58:f8:0c:df:dd: 15:f3:28:ec:7f:1d:6e:ae:a1:01:f8:45:c2:30:a6: 2e:82:c4:34:06:14:ed:01:00:57:db:2b:3d:cf:57: 78:d0:28:c4:62:2f:bb:72:99:e1:84:b5:1b:49:fa: 38:29:01:ea:d5:f9:9c:50:fd:5b:4e:90:e0:79:45: 8d:3d:aa:98:09:7e:3d:e1:5b:64:94:51:ae:7c:48: eb:1b:fc:ee:55:3d:08:ca:d5:4c:f5:50:7f:39:60: 97:01:b9:1b:6f:9c:ec:6f:a5:6a:67:82:11:32:1b: a3:ec:90:1e:de:7a:e1:20:b8:47:b8:64:f2:f9:4d: 33:a2:b7:b8:3f:de:f9:95:8a:4c:06:41:4c:2b:95: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:C2:88:CB:52:DA:8A:5C:A7:15:3B:4C:0B:38:07:72:71:5F:00 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DD5C0CA3CF111EF9B00241AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:70:09:a8:d4:66:fd:25:6b:42:27:83:60:a5:93:66:a3:4e: 03:89:a6:6c:6a:5f:72:23:e1:95:33:0f:5d:89:9c:56:79:6b: 87:08:e1:02:5d:b6:bc:37:e2:c7:6d:fb:ba:8a:a1:b5:92:36: d6:d6:b8:96:70:45:c7:27:0c:90:04:b1:62:2d:49:cf:95:ce: cc:70:fa:1c:49:23:18:60:26:fc:5a:c8:a1:73:78:16:98:6e: d0:04:91:e3:47:a0:3e:7b:c1:c2:b8:9c:37:4c:15:ad:ca:ea: 64:ff:a0:2a:f4:30:37:fe:1e:cb:26:3d:c1:a2:29:ec:d6:db: fc:c1:3b:f5:74:ce:b6:89:c4:98:f9:8f:6d:4f:8b:22:b3:87: 89:50:88:1d:50:69:a7:2a:ff:3e:8a:d1:7a:bc:56:92:aa:d6: 53:42:72:f7:9e:df:90:0e:fd:2a:61:ed:df:a7:24:3a:ab:2b: 7f:48:65:28:c8:ce:09:14:5b:bd:75:9e:3d:31:c9:75:a3:88: 06:62:07:89:62:bc:4f:2c:7b:97:97:bb:5f:30:46:01:cd:89: ae:46:c6:b9:14:36:a5:c8:cd:96:fa:63:8f:42:c7:92:76:99: 08:76:07:5f:36:af:fb:64:6d:5d:9f:27:45:92:2e:01:86:88: 54:04:87:c1 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAJQtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDcwODA2MTYzMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY4Yjg0M2UtMjJiNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKS17jmrX4A0Kj5xJyaxKr0jWXPjYXgR4netVG2jB3QWl+axmQ5Q06cxP3xG ZlHz4H67yUFq0e4HQtJfhMORAxKNqAC/hvaL8HqK2Nnw9kJWDJQOnUaMM0NivfWe JjMifc+cEw9rvJ1VMiwPFUCtvQHBO1j4DN/dFfMo7H8dbq6hAfhFwjCmLoLENAYU 7QEAV9srPc9XeNAoxGIvu3KZ4YS1G0n6OCkB6tX5nFD9W06Q4HlFjT2qmAl+PeFb ZJRRrnxI6xv87lU9CMrVTPVQfzlglwG5G2+c7G+lameCETIbo+yQHt564SC4R7hk 8vlNM6K3uD/e+ZWKTAZBTCuVoC0CAwEAAaOCApgwggKUMB0GA1UdDgQWBBQ09sKI y1LailynFTtMCzgHcnFfADAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlERDVDMENB M0NGMTExRUY5QjAwMjQxQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8/3AMA0GCSqGSIb3DQEBCwUAA4IBAQBccAmo1Gb9 JWtCJ4NgpZNmo04DiaZsal9yI+GVMw9diZxWeWuHCOECXba8N+LHbfu6iqG1kjbW 1riWcEXHJwyQBLFiLUnPlc7McPocSSMYYCb8Wsihc3gWmG7QBJHjR6A+e8HCuJw3 TBWtyupk/6Aq9DA3/h7LJj3Boins1tv8wTv1dM62icSY+Y9tT4sis4eJUIgdUGmn Kv8+itF6vFaSqtZTQnL3nt+QDv0qYe3fpyQ6qyt/SGUoyM4JFFu9dZ49Mcl1o4gG YgeJYrxPLHuXl7tfMEYBzYmuRsa5FDalyM2W+mOPQseSdpkIdgdfNq/7ZG1dnydF ki4BhohUBIfB -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:03 2024 by rpki-client on console-fra.rpki-client.org