$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa File: EAEF64628F9C11EFBDA27B51C4F9AE02.roa (raw, json) Hash identifier: r+j+1VzwfxW4Bwz25DGvXAlBpHRC1kkHnLYYzq4boE0= Subject key identifier: 36:82:D2:DD:E8:65:09:2E:F9:71:DE:B6:6E:23:53:E2:48:39:4F:96 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9BF0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa Signing time: Mon 21 Oct 2024 11:09:19 +0000 ROA not before: Mon 21 Oct 2024 11:09:19 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153261 IP address blocks: 160.20.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39920 (0x9bf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Oct 21 11:09:19 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6716365f-b60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:ab:81:46:2d:9e:0a:9c:88:0d:1d:ea:d6: 54:c6:9c:7b:36:b7:dc:41:0a:d8:e5:08:cc:07:cc: 7f:88:0f:53:b8:30:94:0a:d3:63:78:90:be:d4:bd: 8b:68:1b:37:37:49:a7:e3:8b:44:1b:ea:ce:4a:a3: 5c:79:75:3b:1e:82:47:7f:12:32:21:ad:d5:ec:53: 71:f0:74:85:51:39:b5:2d:50:db:45:a7:35:2c:87: 4f:0d:15:a5:9a:fc:27:73:1d:0e:f8:8c:61:37:93: 0d:b7:d8:60:03:7e:65:8f:4a:0c:25:66:d7:5e:43: 10:07:1a:42:4a:01:78:97:eb:15:ff:0d:bf:a1:91: c3:18:93:15:a9:a2:ec:f1:96:d0:ee:1e:64:f9:9f: 1f:b4:53:f6:ae:f1:fe:8a:50:c4:48:3d:1b:d1:13: 32:b2:d7:a6:bf:3a:d4:df:00:74:c7:e8:88:d1:57: 93:6d:4d:83:3c:a0:86:e2:6a:b4:1c:68:39:9c:08: f1:07:1d:27:ea:c5:4f:6e:7a:10:92:a5:c7:bb:d8: 2e:4f:e4:87:0d:46:4f:67:e3:88:bf:e6:3f:a6:1e: 6e:5d:93:a4:94:b0:ee:93:71:f5:68:eb:37:97:ab: a9:d1:09:08:4e:4c:d3:aa:fe:5e:b2:45:6e:b8:ab: b3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:82:D2:DD:E8:65:09:2E:F9:71:DE:B6:6E:23:53:E2:48:39:4F:96 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAEF64628F9C11EFBDA27B51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.6.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:28:36:59:1d:0d:99:34:bb:04:86:cd:21:21:b8:b7:a3:dc: 36:83:b7:58:52:19:c3:49:d0:f4:03:10:1c:9d:80:e0:2b:f8: 4b:04:6e:af:f4:7c:75:a5:dc:29:07:ef:65:37:1e:ec:29:6b: 64:e7:22:d6:99:ae:f5:b5:e6:f2:5c:5d:5a:05:5b:19:ed:8c: 95:6a:e3:f0:9b:9e:72:a5:a3:ea:63:08:f7:53:74:7b:bd:62: 9f:78:1e:d1:99:d5:05:b7:97:2a:93:20:10:17:c7:fa:6f:34: 99:ab:4e:22:33:1d:c2:ff:6d:3e:63:08:a7:e1:31:00:db:01: 2b:53:3c:17:ec:d9:30:94:de:e9:3d:f3:4e:73:ab:d2:59:dd: 21:67:1c:c8:4c:68:13:99:89:91:bb:1b:11:6e:62:27:99:cd: 51:6b:e9:75:d3:2c:87:8a:32:e0:d9:0b:d0:7c:15:19:b7:cf: 27:4c:74:a1:e8:8c:ac:34:a1:e4:40:87:33:60:05:ed:e8:05: 84:4c:d7:41:f3:24:a1:09:80:da:1d:f4:19:57:5b:b4:1a:d4: bf:19:b1:47:70:d6:a1:b6:87:4d:4f:ad:03:80:0e:76:e8:52: fe:48:09:e7:f7:a4:92:89:1d:7d:e7:53:8c:0a:e1:a6:84:84: 9d:ab:5f:ab -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJvwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTAyMTExMDkxOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjcxNjM2NWYtYjYwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPcq4FGLZ4KnIgNHerWVMaceza33EEK2OUIzAfMf4gPU7gwlArTY3iQvtS9 i2gbNzdJp+OLRBvqzkqjXHl1Ox6CR38SMiGt1exTcfB0hVE5tS1Q20WnNSyHTw0V pZr8J3MdDviMYTeTDbfYYAN+ZY9KDCVm115DEAcaQkoBeJfrFf8Nv6GRwxiTFami 7PGW0O4eZPmfH7RT9q7x/opQxEg9G9ETMrLXpr861N8AdMfoiNFXk21NgzyghuJq tBxoOZwI8QcdJ+rFT256EJKlx7vYLk/khw1GT2fjiL/mP6Yebl2TpJSw7pNx9Wjr N5erqdEJCE5M06r+XrJFbrirs2MCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ2gtLd 6GUJLvlx3rZuI1PiSDlPljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VBRUY2NDYy OEY5QzExRUZCREEyN0I1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBoBQGMA0GCSqGSIb3DQEBCwUAA4IBAQAsKDZZHQ2ZNLsE hs0hIbi3o9w2g7dYUhnDSdD0AxAcnYDgK/hLBG6v9Hx1pdwpB+9lNx7sKWtk5yLW ma71tebyXF1aBVsZ7YyVauPwm55ypaPqYwj3U3R7vWKfeB7RmdUFt5cqkyAQF8f6 bzSZq04iMx3C/20+Ywin4TEA2wErUzwX7NkwlN7pPfNOc6vSWd0hZxzITGgTmYmR uxsRbmInmc1Ra+l10yyHijLg2QvQfBUZt88nTHSh6IysNKHkQIczYAXt6AWETNdB 8yShCYDaHfQZV1u0GtS/GbFHcNahtodNT60DgA526FL+SAnn96SSiR1951OMCuGm hISdq1+r -----END CERTIFICATE-----Generated at Fri Nov 22 11:48:05 2024 by rpki-client on console-ams.rpki-client.org