$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa File: D7C533DC5DEF11EF929D3B33C4F9AE02.roa (raw, json) Hash identifier: MNyqkIy88mv7j5sUybsgvzEs26dJJvFGlwqfT7Z1ge0= Subject key identifier: D0:CE:8E:E5:24:C5:BB:48:9E:92:B7:AA:6E:01:51:4E:5D:10:7B:01 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 96EC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa Signing time: Mon 19 Aug 2024 05:56:57 +0000 ROA not before: Mon 19 Aug 2024 05:56:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152549 IP address blocks: 2401:a760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38636 (0x96ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Aug 19 05:56:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66c2dea9-eb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:fa:ac:78:ab:cf:1b:12:3c:2c:59:58:b4: 66:32:79:95:b9:8c:3e:19:ec:16:e3:d7:d8:6f:76: 18:c0:d3:63:03:65:87:22:72:52:ff:8f:cf:ae:3b: 82:6c:6b:74:13:7d:64:e2:56:2b:04:1d:0f:df:0c: 64:e5:cf:3a:74:ff:e1:08:0a:8a:45:13:2e:f2:2a: bb:99:82:f3:ff:02:09:64:b6:56:e0:62:6a:b7:fb: da:17:43:39:1a:78:01:12:11:ed:6f:ed:c1:85:5a: eb:9c:84:69:4f:5d:29:91:09:b9:0f:d2:0e:c5:0e: f6:09:98:ce:47:ac:db:8c:5d:a0:95:84:d7:37:f6: c7:5d:77:8d:6c:04:51:77:8f:76:d5:4a:d5:d8:cc: cb:22:3a:68:27:84:79:8c:db:38:9c:d9:0d:ab:38: 02:44:44:95:4b:e9:c2:1c:10:9f:8b:41:2e:26:d9: 68:da:00:35:5b:65:49:3b:9a:82:c1:4e:01:fc:92: 1e:da:69:80:61:29:e5:c7:63:81:51:65:93:17:99: ce:42:a0:13:22:2d:5c:a0:83:5b:94:13:ed:79:70: 33:92:fb:5a:13:b8:ff:8f:ae:bb:32:2a:ab:28:cc: a6:06:9d:1d:89:b1:8a:a8:93:17:94:11:6f:43:4c: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:8E:E5:24:C5:BB:48:9E:92:B7:AA:6E:01:51:4E:5D:10:7B:01 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7C533DC5DEF11EF929D3B33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:a760::/32 Signature Algorithm: sha256WithRSAEncryption 7a:be:41:19:0a:70:66:c1:50:2e:72:dd:14:20:c1:b2:17:4a: b5:a5:56:74:55:5b:55:38:72:18:80:76:b9:ae:d5:cc:02:b9: e6:a9:ab:48:7e:2d:e0:11:68:97:ba:bb:9c:6c:f0:07:b1:2d: ee:81:de:0c:3f:f4:63:61:ec:22:2b:83:4c:7c:3a:76:34:5a: 2c:c3:6f:16:05:3c:fd:2a:55:fb:06:be:e3:47:f1:34:c8:ef: 46:fd:a0:b5:e9:c3:ad:49:78:89:b9:78:24:52:bd:49:3a:5f: 93:a3:d5:6a:fb:fa:c0:bb:13:6b:af:62:58:e5:33:fb:f4:9d: e8:89:ea:3f:bc:c9:e1:f3:b1:03:d9:cf:53:05:8a:05:54:e0: b0:cc:a8:7e:b1:79:8c:ad:11:2d:9b:07:a7:41:78:92:3c:69: a2:24:df:e4:29:68:ea:45:9a:4f:46:7d:d4:bd:eb:ee:d5:5c: ea:c8:9d:ee:6c:6e:76:d7:ec:f2:d3:82:5b:06:54:25:dd:92: 58:90:42:bc:a7:76:07:27:c3:a0:46:8f:35:92:9b:54:2a:04: f0:95:3f:66:fc:ac:cc:ee:54:93:56:46:45:07:66:7d:7c:cb: a6:4b:b0:92:28:f6:5a:9e:0b:9b:c1:26:1b:6a:f6:e1:f2:e6: da:38:41:83 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAJbsMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDgxOTA1NTY1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZjMmRlYTktZWIyZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2P+qx4q88bEjwsWVi0ZjJ5lbmMPhnsFuPX2G92GMDTYwNlhyJyUv+Pz647 gmxrdBN9ZOJWKwQdD98MZOXPOnT/4QgKikUTLvIqu5mC8/8CCWS2VuBiarf72hdD ORp4ARIR7W/twYVa65yEaU9dKZEJuQ/SDsUO9gmYzkes24xdoJWE1zf2x113jWwE UXePdtVK1djMyyI6aCeEeYzbOJzZDas4AkRElUvpwhwQn4tBLibZaNoANVtlSTua gsFOAfySHtppgGEp5cdjgVFlkxeZzkKgEyItXKCDW5QT7XlwM5L7WhO4/4+uuzIq qyjMpgadHYmxiqiTF5QRb0NMgh0CAwEAAaOCApYwggKSMB0GA1UdDgQWBBTQzo7l JMW7SJ6St6puAVFOXRB7ATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Q3QzUzM0RD NURFRjExRUY5MjlEM0IzM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAGnYDANBgkqhkiG9w0BAQsFAAOCAQEAer5BGQpwZsFQ LnLdFCDBshdKtaVWdFVbVThyGIB2ua7VzAK55qmrSH4t4BFol7q7nGzwB7Et7oHe DD/0Y2HsIiuDTHw6djRaLMNvFgU8/SpV+wa+40fxNMjvRv2gtenDrUl4ibl4JFK9 STpfk6PVavv6wLsTa69iWOUz+/Sd6InqP7zJ4fOxA9nPUwWKBVTgsMyofrF5jK0R LZsHp0F4kjxpoiTf5Clo6kWaT0Z91L3r7tVc6sid7mxudtfs8tOCWwZUJd2SWJBC vKd2ByfDoEaPNZKbVCoE8JU/ZvyszO5Uk1ZGRQdmfXzLpkuwkij2Wp4Lm8EmG2r2 4fLm2jhBgw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:36:28 2025 by rpki-client