$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/18E7B6C80B5B11EB80C8B15FC4F9AE02.roa File: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (raw, json) Hash identifier: 7BAdUQMZjuuZNgHFdOha+SYqXFalxz5F+SZR0XZCmpo= Subject key identifier: 13:7B:E1:AF:46:81:A1:9C:57:89:A3:96:16:26:BA:EC:5A:9B:BF:BD Certificate issuer: /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Certificate serial: 06EC Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/18E7B6C80B5B11EB80C8B15FC4F9AE02.roa Signing time: Wed 26 Jun 2024 22:27:37 +0000 ROA not before: Wed 26 Jun 2024 22:27:37 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132825 IP address blocks: 2407:1100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8 Validity Not Before: Jun 26 22:27:37 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667c95d9-718e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:2a:dc:da:0d:9b:31:2a:b0:3f:84:bf:2e: 65:83:46:3e:31:ef:ab:1c:5f:1f:5b:11:46:73:af: 0a:1e:c9:39:75:bf:99:44:7f:68:14:88:ef:7e:a3: 41:9b:c4:ac:60:be:b3:6f:d0:fc:e9:8b:1f:09:e1: 56:3a:05:df:c0:d6:c5:70:f4:90:6b:55:de:23:1a: e6:c4:c0:77:9c:e3:86:f8:a8:a5:31:66:0f:d0:5e: 24:e3:3f:97:12:04:16:d1:11:1d:b5:31:d1:4d:99: 0d:7d:49:85:6e:c5:17:b7:5e:bd:0f:dd:51:0d:89: 4d:52:ee:38:86:15:46:3b:07:a1:8a:19:81:d7:9d: 77:d4:28:6f:d9:72:57:4a:8c:f1:53:47:bf:a5:f1: 22:91:34:e0:f6:02:77:36:c8:19:c7:dc:6a:fe:c1: 1a:d9:f9:19:5b:4d:fe:38:f7:e0:db:04:e3:f0:e8: 9b:d8:42:f6:36:ef:85:61:1e:14:e7:94:59:a9:bb: 41:4f:b1:99:c6:ad:0b:a5:1c:13:43:63:c2:e8:df: cb:4c:84:4d:c2:3b:1c:7a:b4:1a:6e:21:ce:55:6a: c6:2b:2c:e0:65:25:fc:6e:70:b4:42:eb:0d:b4:95: c9:80:ed:34:df:be:97:98:46:1d:0d:45:3f:98:32: e6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7B:E1:AF:46:81:A1:9C:57:89:A3:96:16:26:BA:EC:5A:9B:BF:BD X509v3 Authority Key Identifier: keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/18E7B6C80B5B11EB80C8B15FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:1100::/32 Signature Algorithm: sha256WithRSAEncryption 66:cb:9d:fa:73:e7:b0:68:9f:9d:b0:99:41:c8:74:2c:1c:6a: 0c:18:d5:3b:11:0d:2b:27:99:49:69:50:a8:2e:c9:6a:25:84: 8c:76:cf:12:2a:57:d4:81:99:30:35:24:3c:97:6b:86:6e:02: fd:53:4c:9c:4b:01:ff:9c:10:4c:b0:24:08:49:a3:e7:dd:6c: f2:58:eb:dc:ec:80:a6:e4:34:7b:bb:6c:7c:7c:39:99:fe:c0: 37:82:5f:41:70:66:d6:b0:9c:d4:21:95:40:fc:15:1c:93:01: e9:e5:4e:19:16:8e:ea:22:84:70:92:aa:d9:0f:ad:50:4b:1d: db:db:bd:5a:0d:15:64:7f:1c:68:7f:ce:49:aa:c2:1e:ea:b0: 5d:ed:8a:c1:0d:c1:08:b0:6e:88:8b:1c:d2:a9:4e:0d:9d:84: f4:14:61:a8:c2:cf:db:8e:7f:34:79:5e:5f:9f:13:e3:b8:e0: 6f:0a:30:53:52:f6:13:c2:3a:c7:ca:38:7c:66:28:e0:3d:9a: d0:52:59:13:7f:12:0f:76:4c:98:cb:04:81:3b:8b:b2:c7:70: 2f:41:41:08:0f:25:4d:31:56:66:d2:30:c9:d7:f7:c7:86:1e: a6:0f:a3:88:f7:0f:9a:9d:6d:60:41:e6:d6:a5:ad:37:ae:41: c3:7e:57:7b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw OTIwMzZCQjgwHhcNMjQwNjI2MjIyNzM3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjOTVkOS03MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs4q3NoNmzEqsD+Evy5lg0Y+Me+rHF8fWxFGc68KHsk5db+ZRH9oFIjvfqNB m8SsYL6zb9D86YsfCeFWOgXfwNbFcPSQa1XeIxrmxMB3nOOG+KilMWYP0F4k4z+X EgQW0REdtTHRTZkNfUmFbsUXt169D91RDYlNUu44hhVGOwehihmB15131Chv2XJX SozxU0e/pfEikTTg9gJ3NsgZx9xq/sEa2fkZW03+OPfg2wTj8Oib2EL2Nu+FYR4U 55RZqbtBT7GZxq0LpRwTQ2PC6N/LTIRNwjscerQabiHOVWrGKyzgZSX8bnC0QusN tJXJgO00376XmEYdDUU/mDLmNwIDAQABo4ICljCCApIwHQYDVR0OBBYEFBN74a9G gaGcV4mjlhYmuuxam7+9MB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VBN0YvRTk2NEFGNEMwQjU5MTFFQjkzNTkwQTVGQzRGOUFFMDIvMThFN0I2Qzgw QjVCMTFFQjgwQzhCMTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBxEAMA0GCSqGSIb3DQEBCwUAA4IBAQBmy536c+ewaJ+d sJlByHQsHGoMGNU7EQ0rJ5lJaVCoLslqJYSMds8SKlfUgZkwNSQ8l2uGbgL9U0yc SwH/nBBMsCQISaPn3WzyWOvc7ICm5DR7u2x8fDmZ/sA3gl9BcGbWsJzUIZVA/BUc kwHp5U4ZFo7qIoRwkqrZD61QSx3b271aDRVkfxxof85JqsIe6rBd7YrBDcEIsG6I ixzSqU4NnYT0FGGows/bjn80eV5fnxPjuOBvCjBTUvYTwjrHyjh8ZijgPZrQUlkT fxIPdkyYywSBO4uyx3AvQUEIDyVNMVZm0jDJ1/fHhh6mD6OI9w+anW1gQebWpa03 rkHDfld7 -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:45 2024 by rpki-client on console-ams.rpki-client.org