$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10892282BDE011EAAEA46554C4F9AE02.roa File: 10892282BDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: PJV+P1tEUdVTePVasPzHWJKIvR44/M9pNoz+li6C/gA= Subject key identifier: A2:4D:24:7A:64:98:13:78:DB:94:5A:BF:AF:9A:97:53:7C:73:9F:4B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C7C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10892282BDE011EAAEA46554C4F9AE02.roa Signing time: Wed 10 May 2023 16:24:45 +0000 ROA not before: Wed 10 May 2023 16:24:45 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136371 IP address blocks: 2001:df3:b480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27772 (0x6c7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:45 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc54d-3611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:a2:e6:41:f5:71:cf:05:08:bc:4a:d4:99: 53:4c:a3:0e:ff:1b:42:07:97:bf:ef:6f:f1:f8:d6: 79:50:c2:ad:3a:43:27:33:64:df:81:61:fb:8b:56: 0b:a7:80:76:60:ad:d2:1c:58:e4:d2:fb:5c:dc:df: 8a:ad:6a:ef:48:f9:8c:38:66:0c:05:4f:d1:12:da: 97:c6:3f:f6:d1:89:49:2e:f9:77:d0:fc:4b:d4:a0: da:80:f7:d8:6a:96:e7:ac:13:06:ad:86:c8:25:b2: 42:cc:27:29:74:09:1a:d9:b8:83:7c:3a:8e:61:59: 43:83:aa:3f:12:b6:08:c3:21:b0:e9:1d:06:f4:3a: 85:03:70:4d:cd:65:bb:66:89:c3:7c:f2:20:08:45: 05:5a:1e:3a:27:62:0e:ba:d5:67:3f:55:c7:ed:2d: 96:1a:b8:91:2c:62:eb:1b:6c:59:92:36:0a:aa:b1: ec:4b:f8:7b:6b:ea:63:43:85:2c:7e:65:d9:8d:46: df:94:c3:5c:8d:d5:73:52:80:00:fd:8d:c9:eb:22: dd:96:90:69:f7:4a:9f:6d:3c:e6:64:8a:4a:26:18: 72:15:94:ea:47:2a:c2:70:5e:45:60:41:72:84:00: c2:9e:9c:7e:0e:c1:d0:ef:f1:6b:6a:9e:21:f6:94: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:24:7A:64:98:13:78:DB:94:5A:BF:AF:9A:97:53:7C:73:9F:4B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10892282BDE011EAAEA46554C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:b480::/48 Signature Algorithm: sha256WithRSAEncryption 77:14:1a:60:63:08:43:73:67:f6:a3:68:65:41:67:36:a0:29: 02:e9:0a:8a:84:6d:0b:a0:b5:14:99:3c:4e:6c:d7:9a:5a:8b: 99:0f:2f:a6:e1:9e:b3:e6:43:31:49:fc:16:7a:d0:4f:97:1e: 4d:a2:ef:14:2a:ee:91:cf:f0:1a:e6:14:cc:91:e0:e5:8e:32: 2a:31:92:c9:44:d4:cb:71:01:f3:7e:66:72:8d:ed:f2:2c:ce: 19:a1:1d:5b:8b:cf:df:e1:e0:1f:66:11:c5:88:89:b7:08:34: e6:47:08:60:28:42:95:7b:4d:98:40:48:41:a8:a4:0c:b7:15: 96:64:ef:b0:cf:2d:be:fd:71:cb:96:c8:b8:3e:5f:34:d4:2a: 48:07:40:c7:4e:69:d9:4e:16:58:80:0b:99:5a:ce:54:a1:20: 1d:3a:1e:24:b3:82:53:a2:e1:52:3d:33:0c:67:d6:4e:bf:06: 3a:f0:6c:40:e7:d8:3c:ba:b2:f1:9d:ce:df:48:94:e7:56:da: 3c:1f:8a:52:49:91:e6:79:ba:07:48:30:53:29:6a:51:c7:55: 4e:36:e4:a4:58:70:5c:b5:9f:2a:10:64:db:df:8f:9a:c1:93: 70:c7:c6:7d:86:a9:6f:43:e7:86:e8:ff:5b:2f:fe:fa:da:8e: 5d:9d:82:60 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICbHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU0ZC0zNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT+i5kH1cc8FCLxK1JlTTKMO/xtCB5e/72/x+NZ5UMKtOkMnM2TfgWH7i1YL p4B2YK3SHFjk0vtc3N+KrWrvSPmMOGYMBU/REtqXxj/20YlJLvl30PxL1KDagPfY apbnrBMGrYbIJbJCzCcpdAka2biDfDqOYVlDg6o/ErYIwyGw6R0G9DqFA3BNzWW7 ZonDfPIgCEUFWh46J2IOutVnP1XH7S2WGriRLGLrG2xZkjYKqrHsS/h7a+pjQ4Us fmXZjUbflMNcjdVzUoAA/Y3J6yLdlpBp90qfbTzmZIpKJhhyFZTqRyrCcF5FYEFy hADCnpx+DsHQ7/Frap4h9pTVkQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKJNJHpk mBN425Rav6+al1N8c59LMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTA4OTIyODJC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3ztIAwDQYJKoZIhvcNAQELBQADggEBAHcUGmBjCENz Z/ajaGVBZzagKQLpCoqEbQugtRSZPE5s15pai5kPL6bhnrPmQzFJ/BZ60E+XHk2i 7xQq7pHP8BrmFMyR4OWOMioxkslE1MtxAfN+ZnKN7fIszhmhHVuLz9/h4B9mEcWI ibcINOZHCGAoQpV7TZhASEGopAy3FZZk77DPLb79ccuWyLg+XzTUKkgHQMdOadlO FliAC5lazlShIB06HiSzglOi4VI9Mwxn1k6/BjrwbEDn2Dy6svGdzt9IlOdW2jwf ilJJkeZ5ugdIMFMpalHHVU425KRYcFy1nyoQZNvfj5rBk3DHxn2GqW9D54bo/1sv /vrajl2dgmA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org