$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa File: 06A6F940403711EBB87CD90DC4F9AE02.roa (raw, json) Hash identifier: Zt3Gbb/EXdgJMJNpgFqVMDkCZd2Uqu70Tfn7bUTgZM8= Subject key identifier: 54:89:05:76:36:23:B5:24:77:FA:40:B0:1A:B3:DB:2D:F6:03:85:D8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C80 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa Signing time: Wed 10 May 2023 16:24:50 +0000 ROA not before: Wed 10 May 2023 16:24:50 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136375 IP address blocks: 2001:df2:9280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27776 (0x6c80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:50 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc552-0e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:d1:fe:7e:47:9b:12:33:60:8c:84:fc:87: 11:c0:3b:85:89:90:2e:0f:9a:44:fe:b7:d6:d0:36: ff:f3:23:64:b5:8b:c6:72:3d:3b:c7:30:79:9f:32: ca:15:0c:68:d9:89:60:74:81:75:75:81:20:d9:ca: 3b:f3:00:8b:c3:cf:6f:cc:82:0f:bd:45:82:85:1d: fd:6a:3b:9e:f4:a9:ec:7f:29:1f:2d:6f:0a:bc:5b: a2:26:02:d9:6d:69:e0:97:93:84:50:e9:b5:51:3a: 0f:64:1c:54:b7:a5:f6:8c:ca:9c:32:bb:1f:f3:b3: ec:1b:10:35:db:0b:bc:1c:07:69:44:d3:17:1a:a1: 0c:a7:f7:57:9e:b9:11:eb:75:9a:43:a5:02:c0:46: dd:7f:f1:37:fa:d2:c7:83:dd:31:27:25:dc:a5:8d: 98:66:1f:10:32:11:0f:a9:ed:e6:59:44:fa:31:27: 30:bd:7b:a7:00:17:85:df:46:c9:b4:8d:b5:9b:89: c8:4d:23:a1:ff:32:e8:1c:71:71:6c:20:80:83:0f: 4d:4d:11:b5:c6:53:d8:b0:e4:26:51:1e:dd:42:37: 4a:6d:75:7d:0a:1f:ab:fd:24:b6:06:b6:3b:0f:22: 09:80:a2:3b:1e:47:38:54:5d:91:2c:4a:2e:b2:0f: 75:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:05:76:36:23:B5:24:77:FA:40:B0:1A:B3:DB:2D:F6:03:85:D8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06A6F940403711EBB87CD90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:9280::/48 Signature Algorithm: sha256WithRSAEncryption 94:e4:0f:b2:7c:11:34:0e:2f:8a:42:cf:d8:1f:19:e2:72:16: e7:d0:29:e0:d8:e0:06:37:38:3c:f1:b4:41:21:75:f4:aa:cd: 1c:e1:e3:d9:23:06:8a:d3:db:17:d9:bd:ce:9a:c1:ae:37:f0: 4f:86:a6:79:b9:8a:05:a3:86:c3:47:3e:ca:97:7e:2d:8f:58: 6d:f6:37:0c:fc:14:47:14:ee:b0:ee:2d:e1:5a:f2:71:7e:1a: d6:46:0c:02:11:1b:47:58:92:87:86:ff:97:c7:c7:52:2c:d5: 0f:c4:38:2c:2f:e4:56:fc:a3:82:7b:ea:c3:6d:c2:3b:ab:e0: e2:94:f4:b8:0e:8d:c3:9a:01:37:6d:d1:a3:80:ad:3e:44:88: 32:59:c9:06:56:0d:ac:b0:08:74:d8:e9:2a:d5:48:da:5d:e8: d9:1b:bd:45:37:fe:68:a2:f6:e9:32:64:ca:69:d6:a8:c8:df: f3:99:e2:9c:5f:0d:46:aa:17:57:71:fc:89:90:05:69:25:b6: 8c:bf:96:c6:be:6c:51:69:fc:cb:ff:2c:49:2f:72:c3:f2:62: ee:ad:5d:07:4d:fe:e8:83:c3:ff:6b:1e:d6:bf:62:d9:b9:2d: c2:8f:db:75:4c:b0:29:53:ec:b5:fa:cd:70:8c:ef:62:aa:b6: f6:0c:e4:e0 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICbIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDUwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU1Mi0wZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro3R/n5HmxIzYIyE/IcRwDuFiZAuD5pE/rfW0Db/8yNktYvGcj07xzB5nzLK FQxo2YlgdIF1dYEg2co78wCLw89vzIIPvUWChR39ajue9KnsfykfLW8KvFuiJgLZ bWngl5OEUOm1UToPZBxUt6X2jMqcMrsf87PsGxA12wu8HAdpRNMXGqEMp/dXnrkR 63WaQ6UCwEbdf/E3+tLHg90xJyXcpY2YZh8QMhEPqe3mWUT6MScwvXunABeF30bJ tI21m4nITSOh/zLoHHFxbCCAgw9NTRG1xlPYsOQmUR7dQjdKbXV9Ch+r/SS2BrY7 DyIJgKI7Hkc4VF2RLEousg91CQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFSJBXY2 I7Ukd/pAsBqz2y32A4XYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDZBNkY5NDA0 MDM3MTFFQkI4N0NEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3ykoAwDQYJKoZIhvcNAQELBQADggEBAJTkD7J8ETQO L4pCz9gfGeJyFufQKeDY4AY3ODzxtEEhdfSqzRzh49kjBorT2xfZvc6awa438E+G pnm5igWjhsNHPsqXfi2PWG32Nwz8FEcU7rDuLeFa8nF+GtZGDAIRG0dYkoeG/5fH x1Is1Q/EOCwv5Fb8o4J76sNtwjur4OKU9LgOjcOaATdt0aOArT5EiDJZyQZWDayw CHTY6SrVSNpd6NkbvUU3/mii9ukyZMpp1qjI3/OZ4pxfDUaqF1dx/ImQBWkltoy/ lsa+bFFp/Mv/LEkvcsPyYu6tXQdN/uiDw/9rHta/Ytm5LcKP23VMsClT7LX6zXCM 72KqtvYM5OA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:25 2024 by rpki-client on console-ams.rpki-client.org