$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa File: 0054432693FA11EEACB4CA40C4F9AE02.roa (raw, json) Hash identifier: lVBAONWKm5fRLxyc5gDL6D1LaH4jMtJHoIBaUDsZUig= Subject key identifier: 01:37:01:D6:5A:8C:3E:57:1D:DA:87:E8:D9:25:2C:AC:55:AA:E8:86 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 80D6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa Signing time: Wed 27 Dec 2023 12:32:52 +0000 ROA not before: Wed 27 Dec 2023 12:32:52 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151709 IP address blocks: 115.187.24.0/23 maxlen: 24 2001:df3:2340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32982 (0x80d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 27 12:32:52 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=658c1974-df23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:a1:97:4e:c8:08:f0:5e:41:f3:33:aa:ee: 50:23:af:17:d7:9c:0c:e1:cf:63:d0:f9:c0:8e:f8: 90:e6:00:28:6d:23:1c:12:97:ba:82:83:e0:a5:de: c9:95:ca:86:2c:b1:8f:da:79:a4:0b:70:97:61:05: 67:b3:23:1a:ae:4d:6b:ff:c4:73:6d:aa:98:b6:9c: 96:44:48:3b:6c:2e:c4:79:0c:c7:ec:72:f7:75:4b: 73:d9:23:87:27:76:84:8b:d3:ff:0f:31:b9:68:b8: 75:14:61:7e:61:2c:a1:a6:b8:61:52:b1:5a:ad:7b: a2:25:1f:95:21:e6:f2:dc:84:9f:b4:10:9b:21:4a: 37:a3:4f:60:88:5e:60:9f:97:cf:04:d4:f5:3a:f4: 09:d8:9f:66:6c:97:34:ba:63:ba:fd:75:6f:68:99: 5b:9e:bd:3f:75:4f:7f:05:ab:cd:b8:23:3a:1a:41: 28:05:67:f8:40:d2:b1:65:a8:96:04:7c:9c:b9:25: 70:f4:7d:f2:2d:be:2e:9c:f1:0c:69:22:8c:ce:c2: 85:87:c5:be:17:2e:37:21:38:7b:cb:30:80:ea:f4: 74:92:cf:bd:17:78:6d:0c:34:8b:08:63:44:73:84: b9:4b:45:d0:06:bc:49:79:b1:ec:89:3a:1e:fd:38: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:01:D6:5A:8C:3E:57:1D:DA:87:E8:D9:25:2C:AC:55:AA:E8:86 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0054432693FA11EEACB4CA40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.187.24.0/23 IPv6: 2001:df3:2340::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c7:97:91:ea:e7:a3:0e:87:00:61:b8:fb:97:ae:5d:e8:45: 5e:b2:97:d6:34:a8:12:61:d7:77:76:d3:f7:32:04:06:cd:7e: 96:24:ba:ff:53:27:1f:30:86:f6:5d:1a:2f:78:60:d4:4c:47: f1:f2:88:a6:58:c9:2b:e0:dd:1a:fb:d2:3f:25:b2:2f:69:0b: 8a:82:58:49:06:40:1a:d4:46:53:95:fb:ab:9e:54:a6:d8:8f: af:25:52:70:cd:73:6c:f2:2f:88:ae:5c:ce:32:4d:6a:5a:e4: 0d:90:f3:65:bc:99:54:c5:a4:0a:dd:ff:71:2b:ef:47:3c:15: bd:62:be:9b:df:07:f0:1f:7c:67:4d:82:fc:b1:82:3d:b4:85: e7:5a:25:c5:17:e2:cc:24:90:fb:a0:fe:91:c4:8f:73:4d:c2: ed:14:a2:46:b0:ad:56:47:ed:45:f2:eb:4f:1e:fc:c5:ca:ff: b9:85:68:bb:f9:6f:74:08:02:fc:2a:66:86:3c:49:91:92:bd: ba:2d:50:25:64:de:54:c5:c3:cd:17:c5:73:2a:de:ac:54:de: f3:60:c8:8b:05:9d:00:13:26:f9:42:46:d4:6e:c1:08:8d:cc: 18:bc:6d:11:4a:e7:fb:d7:20:db:61:72:fa:e1:40:03:46:d8: 1f:37:03:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAIDWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTIzMTIyNzEyMzI1MloXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU4YzE5NzQtZGYyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXxoZdOyAjwXkHzM6ruUCOvF9ecDOHPY9D5wI74kOYAKG0jHBKXuoKD4KXe yZXKhiyxj9p5pAtwl2EFZ7MjGq5Na//Ec22qmLaclkRIO2wuxHkMx+xy93VLc9kj hyd2hIvT/w8xuWi4dRRhfmEsoaa4YVKxWq17oiUflSHm8tyEn7QQmyFKN6NPYIhe YJ+XzwTU9Tr0CdifZmyXNLpjuv11b2iZW569P3VPfwWrzbgjOhpBKAVn+EDSsWWo lgR8nLklcPR98i2+LpzxDGkijM7ChYfFvhcuNyE4e8swgOr0dJLPvRd4bQw0iwhj RHOEuUtF0Aa8SXmx7Ik6Hv04WWECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQBNwHW Wow+Vx3ah+jZJSysVarohjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAwNTQ0MzI2 OTNGQTExRUVBQ0I0Q0E0MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBc7sYMA8EAgACMAkDBwAgAQ3zI0AwDQYJKoZIhvcNAQEL BQADggEBAH7Hl5Hq56MOhwBhuPuXrl3oRV6yl9Y0qBJh13d20/cyBAbNfpYkuv9T Jx8whvZdGi94YNRMR/HyiKZYySvg3Rr70j8lsi9pC4qCWEkGQBrURlOV+6ueVKbY j68lUnDNc2zyL4iuXM4yTWpa5A2Q82W8mVTFpArd/3Er70c8Fb1ivpvfB/AffGdN gvyxgj20hedaJcUX4swkkPug/pHEj3NNwu0UokawrVZH7UXy608e/MXK/7mFaLv5 b3QIAvwqZoY8SZGSvbotUCVk3lTFw80XxXMq3qxU3vNgyIsFnQATJvlCRtRuwQiN zBi8bRFK5/vXINthcvrhQANG2B83A/M= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org