$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00E6FBBC97EC11EE82ABB962C4F9AE02.roa File: 00E6FBBC97EC11EE82ABB962C4F9AE02.roa (raw, json) Hash identifier: mZRRPSOSzzVIc97HfMB0Fg7nQCygd9r1Fj/pA4aylLg= Subject key identifier: B3:0C:69:E6:2E:DD:D8:5D:EF:3A:9E:CF:23:D6:1A:D9:44:59:0F:EC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7FB8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00E6FBBC97EC11EE82ABB962C4F9AE02.roa Signing time: Mon 11 Dec 2023 06:14:29 +0000 ROA not before: Mon 11 Dec 2023 06:14:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151756 IP address blocks: 180.94.18.0/23 maxlen: 24 2001:df3:2cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32696 (0x7fb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 11 06:14:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6576a8c5-bddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:d4:47:af:9e:7f:e0:7a:63:01:fc:29:3a: c4:4a:52:b3:e2:d5:a2:79:7e:9c:87:69:37:86:4c: 55:c7:35:cc:1b:bb:b1:5c:54:7b:eb:15:67:26:1e: 94:d1:f1:45:ed:e8:e0:6f:fa:7c:61:f4:55:8a:cf: 4a:3f:32:90:75:c2:88:48:1d:2d:8a:df:19:68:2d: a3:25:5e:3f:4b:f7:10:55:b6:fa:91:dd:6d:dd:b5: c5:fb:51:1a:38:6e:37:9c:01:ca:91:cc:57:b5:36: 88:ca:da:24:c5:d7:27:3b:5d:10:fe:0c:fc:41:fc: b3:08:fb:b2:7e:fa:c6:c2:76:3f:89:43:be:93:08: 69:c5:1e:f5:c3:af:f1:eb:43:0c:f1:de:3d:90:99: 39:b4:35:b2:24:5e:ef:fa:70:ed:5f:fd:a6:f2:8c: 0e:f7:66:a3:3e:f2:e2:8f:48:be:2c:bf:39:37:5e: 7c:ab:c9:6b:31:da:3d:a2:cc:78:6a:8a:33:b9:f8: 17:67:6d:f4:2d:e4:5e:f7:39:64:fa:b9:7d:d4:ae: d9:31:8d:b0:92:5d:d8:69:d1:82:bf:97:5c:82:9a: 52:c0:9b:46:9f:71:45:a7:7f:39:7d:5b:aa:33:f3: 04:73:f9:9b:7b:5b:33:e6:86:77:f5:bb:a7:62:ae: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:69:E6:2E:DD:D8:5D:EF:3A:9E:CF:23:D6:1A:D9:44:59:0F:EC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/00E6FBBC97EC11EE82ABB962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.94.18.0/23 IPv6: 2001:df3:2cc0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:c0:c3:d0:43:63:c9:fd:37:73:58:eb:b6:bb:43:19:30:55: d8:5f:9f:e2:1b:64:2c:ec:18:da:96:ec:4c:0b:81:03:03:e3: 02:94:e8:16:12:52:b2:4b:b4:03:90:c7:c3:05:e9:5b:47:b2: 34:65:26:af:5c:dd:5a:0d:0b:2c:21:a6:e5:f1:b7:7a:a8:7d: fe:b0:82:5a:f7:25:1b:42:b3:38:e9:f0:b4:ba:c5:89:d5:b8: b0:46:1a:0c:c9:63:28:d3:60:29:45:41:13:a2:64:5d:5b:d2: f8:2a:33:b0:ad:94:ac:99:43:20:44:44:0c:84:d0:34:40:f6: b9:82:67:a2:e1:ad:e8:42:da:33:e5:91:73:01:b6:0c:19:18: 8c:12:aa:96:1e:42:68:9e:21:c8:00:e4:a0:59:89:c2:92:43: a4:82:7c:7c:3d:30:d0:93:c3:eb:3c:f3:29:f9:37:4b:57:8e: 96:fb:7a:eb:b3:56:90:27:2b:ac:b6:d2:b1:c6:1f:cc:60:73: 33:e7:fa:52:89:ff:e8:19:3b:25:b5:5b:d1:75:a0:d8:35:39: ab:c0:c2:1f:1d:7b:de:d3:2d:96:50:cc:bb:3c:2c:e3:b3:07: f5:7b:f4:3a:90:d1:38:5e:30:ae:2e:34:3c:bd:e7:2c:8b:79: c3:e2:2e:66 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICf7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMjExMDYxNDI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc2YThjNS1iZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XvUR6+ef+B6YwH8KTrESlKz4tWieX6ch2k3hkxVxzXMG7uxXFR76xVnJh6U 0fFF7ejgb/p8YfRVis9KPzKQdcKISB0tit8ZaC2jJV4/S/cQVbb6kd1t3bXF+1Ea OG43nAHKkcxXtTaIytokxdcnO10Q/gz8QfyzCPuyfvrGwnY/iUO+kwhpxR71w6/x 60MM8d49kJk5tDWyJF7v+nDtX/2m8owO92ajPvLij0i+LL85N158q8lrMdo9osx4 aoozufgXZ230LeRe9zlk+rl91K7ZMY2wkl3YadGCv5dcgppSwJtGn3FFp385fVuq M/MEc/mbe1sz5oZ39bunYq4gVwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLMMaeYu 3dhd7zqezyPWGtlEWQ/sMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDBFNkZCQkM5 N0VDMTFFRTgyQUJCOTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAG0XhIwDwQCAAIwCQMHACABDfMswDANBgkqhkiG9w0BAQsF AAOCAQEASsDD0ENjyf03c1jrtrtDGTBV2F+f4htkLOwY2pbsTAuBAwPjApToFhJS sku0A5DHwwXpW0eyNGUmr1zdWg0LLCGm5fG3eqh9/rCCWvclG0KzOOnwtLrFidW4 sEYaDMljKNNgKUVBE6JkXVvS+CozsK2UrJlDIEREDITQNED2uYJnouGt6ELaM+WR cwG2DBkYjBKqlh5CaJ4hyADkoFmJwpJDpIJ8fD0w0JPD6zzzKfk3S1eOlvt667NW kCcrrLbSscYfzGBzM+f6Uon/6Bk7JbVb0XWg2DU5q8DCHx173tMtllDMuzws47MH 9Xv0OpDROF4wri40PL3nLIt5w+IuZg== -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:11 2024 by rpki-client on console-ams.rpki-client.org