$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01524046997911EE846ECB2EC4F9AE02.roa File: 01524046997911EE846ECB2EC4F9AE02.roa (raw, json) Hash identifier: 2P4pJwMPd/Ls4jr3Kq2l0ZzN8Ho3LcZKJM+2Wum+UuI= Subject key identifier: E4:B8:34:E6:D2:FB:08:D1:32:B0:74:DB:39:B1:2C:F9:DF:E8:DB:D6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7FD2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01524046997911EE846ECB2EC4F9AE02.roa Signing time: Wed 13 Dec 2023 05:32:29 +0000 ROA not before: Wed 13 Dec 2023 05:32:29 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136339 IP address blocks: 2001:df2:bc40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32722 (0x7fd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 13 05:32:29 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=657941ed-5d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3f:42:4d:63:a7:c0:48:60:e2:f0:60:d4:0d: e3:3b:08:30:59:96:d1:b6:97:d2:75:1a:f7:76:ef: 6f:95:1a:e4:fc:c4:49:20:61:ae:a5:6c:f9:a1:32: 4a:1a:9a:d3:1e:51:30:1d:10:bc:06:81:09:2b:ed: f1:23:11:7b:49:6c:19:54:43:b3:a7:85:11:86:4e: 15:97:a8:87:5f:f2:fb:62:de:51:e0:d7:4a:eb:b1: 23:88:93:fd:29:6d:d5:43:a0:64:01:4b:04:07:3d: 22:98:2a:19:aa:2c:07:11:b8:4b:2c:af:64:2a:35: 0d:c4:c9:cc:b6:ff:e5:39:be:bb:1d:d3:c3:05:04: c1:c9:35:31:6e:d2:14:a7:47:4d:da:73:91:ec:c6: 00:97:77:8c:3e:4f:e4:17:e8:fe:6b:17:12:2b:dc: a5:86:a8:f6:ab:15:68:70:27:60:e8:80:4d:9c:2d: 32:c9:82:f4:d3:6b:91:cb:79:08:4c:fe:b0:bb:02: d7:a5:39:a2:a4:26:0c:bd:2f:24:49:ed:60:12:bb: 91:e1:59:98:91:af:35:f2:a4:b8:a5:4d:32:f8:ad: ff:f8:7b:c0:03:93:7a:a8:65:d6:f5:30:8f:b1:e6: 0f:ec:f2:d5:d3:cd:53:4a:f2:8b:5f:32:3a:44:7c: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B8:34:E6:D2:FB:08:D1:32:B0:74:DB:39:B1:2C:F9:DF:E8:DB:D6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01524046997911EE846ECB2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:bc40::/48 Signature Algorithm: sha256WithRSAEncryption 90:20:8e:d0:ae:3a:36:7a:c1:cc:9c:2e:ee:9b:9c:95:24:fe: 58:0f:08:16:50:e2:c7:a8:ea:53:73:5b:86:52:4e:bd:3d:26: 9a:80:6b:95:9a:1b:e4:d8:3f:5d:99:3a:89:4b:66:ae:bf:80: f8:6a:3d:d3:20:c8:17:11:6d:ff:cd:38:80:93:43:9a:61:9c: bd:f4:5c:96:04:e3:a0:71:fc:dd:01:de:cb:21:a4:28:46:d0: 16:00:08:99:3d:c1:f5:18:b2:2a:90:4b:3c:af:88:fe:c7:a0: b6:5d:1c:4d:e1:b9:13:82:b2:f3:ac:ed:5f:fa:62:c3:0b:87: 58:b5:23:8d:fa:d5:d3:21:e1:15:f8:01:da:97:5a:fe:ce:92: 62:64:3e:e8:c8:4e:06:22:90:8c:d5:66:6c:bf:ce:a3:1f:b7: f1:3e:5d:c0:47:7e:4f:2b:7a:06:32:92:e1:f9:5d:d9:0b:d3: b4:a7:41:a4:82:d0:ff:e5:72:6a:ba:c7:d8:14:6e:77:cf:79: 21:a6:43:7a:a6:2f:b0:98:ee:8e:4c:f1:98:77:1c:a8:28:c9: b4:87:ce:22:aa:11:85:65:e7:f4:20:db:b3:cc:2a:19:83:b5: d6:ed:a2:e2:db:32:f0:c4:aa:88:81:97:32:3f:a9:be:82:7e: 56:c1:01:71 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICf9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMjEzMDUzMjI5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTc5NDFlZC01ZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T9CTWOnwEhg4vBg1A3jOwgwWZbRtpfSdRr3du9vlRrk/MRJIGGupWz5oTJK GprTHlEwHRC8BoEJK+3xIxF7SWwZVEOzp4URhk4Vl6iHX/L7Yt5R4NdK67EjiJP9 KW3VQ6BkAUsEBz0imCoZqiwHEbhLLK9kKjUNxMnMtv/lOb67HdPDBQTByTUxbtIU p0dN2nOR7MYAl3eMPk/kF+j+axcSK9ylhqj2qxVocCdg6IBNnC0yyYL002uRy3kI TP6wuwLXpTmipCYMvS8kSe1gEruR4VmYka818qS4pU0y+K3/+HvAA5N6qGXW9TCP seYP7PLV081TSvKLXzI6RHz6bwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOS4NObS +wjRMrB02zmxLPnf6NvWMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDE1MjQwNDY5 OTc5MTFFRTg0NkVDQjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3yvEAwDQYJKoZIhvcNAQELBQADggEBAJAgjtCuOjZ6 wcycLu6bnJUk/lgPCBZQ4seo6lNzW4ZSTr09JpqAa5WaG+TYP12ZOolLZq6/gPhq PdMgyBcRbf/NOICTQ5phnL30XJYE46Bx/N0B3sshpChG0BYACJk9wfUYsiqQSzyv iP7HoLZdHE3huROCsvOs7V/6YsMLh1i1I4361dMh4RX4AdqXWv7OkmJkPujITgYi kIzVZmy/zqMft/E+XcBHfk8regYykuH5XdkL07SnQaSC0P/lcmq6x9gUbnfPeSGm Q3qmL7CY7o5M8Zh3HKgoybSHziKqEYVl5/Qg27PMKhmDtdbtouLbMvDEqoiBlzI/ qb6CflbBAXE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org