$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa File: 12615B88BDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: 3+JUsEwebwwIIQlDk4tvUckMiyfOkUER/5w94rtL7qE= Subject key identifier: 81:8D:2C:1A:84:89:E9:BA:AA:89:5A:81:7A:13:4D:3A:DE:53:45:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6DB5 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa Signing time: Wed 10 May 2023 16:30:40 +0000 ROA not before: Wed 10 May 2023 16:30:40 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138770 IP address blocks: 2001:df1:9980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28085 (0x6db5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:30:40 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc6af-51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:c6:53:5a:d2:43:b9:f3:e5:d2:d1:e2:1a: 41:20:84:8f:90:f4:66:28:fe:ff:78:fb:cb:36:75: 19:11:0a:18:9a:e4:ee:6d:02:4b:0b:b6:3a:0e:e0: 20:d4:a9:7a:e1:15:f5:6b:d2:55:f5:1f:3f:98:91: 92:a9:ae:7f:32:54:75:44:26:b0:3c:37:0a:21:f4: ab:03:7e:97:b9:c0:85:c8:f1:7d:4d:cc:bd:30:0e: 4d:f2:15:12:9e:76:b6:c2:50:7e:e6:82:ae:0c:24: 56:f5:89:39:c2:a5:d9:63:c0:9e:ca:10:60:25:77: 68:5d:da:1f:38:d5:e8:13:8c:1b:3e:3c:f4:f7:46: 8c:c0:ad:a2:96:83:e3:ea:72:10:ed:2a:45:ea:b6: 26:ff:79:a3:8b:c8:31:ba:83:11:f5:98:d0:8b:ef: fc:95:38:22:26:a9:fe:ba:be:d2:7d:cb:2f:bf:63: d8:ff:e9:13:12:72:92:1c:d7:14:0d:6e:1e:93:c3: ae:66:21:23:07:28:47:f6:91:9c:d7:35:93:5a:07: bf:ad:7a:68:46:e4:cd:eb:a0:c5:e4:84:8f:0a:19: 2b:81:93:f2:64:a2:de:62:d6:4e:bf:1f:f5:a0:e3: ae:68:89:69:a2:21:5a:2a:1b:ff:7c:86:f7:bc:d4: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8D:2C:1A:84:89:E9:BA:AA:89:5A:81:7A:13:4D:3A:DE:53:45:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:9980::/48 Signature Algorithm: sha256WithRSAEncryption 66:ba:ca:86:50:45:f6:81:87:3c:ba:b9:62:de:b6:04:72:2e: e5:3c:22:4d:5a:1d:27:1c:5c:17:0b:49:35:33:2c:d1:8c:18: cb:f0:77:7f:dc:2e:76:0a:4e:a4:62:ba:91:83:fb:ca:56:49: c5:49:63:52:d2:fc:65:ed:0b:88:bb:4a:22:fb:68:66:0c:87: 98:41:e3:e6:1b:44:a8:34:5c:2e:63:c8:24:c1:d8:3b:b3:ce: b4:ac:6d:b0:5a:2e:fa:af:11:fe:ba:52:44:a7:2e:f3:59:3d: c6:37:7c:c4:4d:db:55:c0:39:5f:14:6e:2a:9d:3b:d6:4d:89: fb:78:82:cc:11:f4:9b:3f:1c:a5:11:01:f4:35:f7:78:58:c5: b2:95:f6:31:fa:79:ef:05:dd:74:8e:b0:cd:d4:cd:58:96:5c: 58:02:d1:c7:c8:5b:86:63:63:3a:09:09:b1:ff:a2:71:90:ae: 9a:2c:9f:f9:61:e1:7c:e9:5f:b0:60:d6:52:43:09:2b:8e:ed: 8b:7b:12:5b:d7:8b:84:5d:34:ca:5d:73:ef:ea:7c:c4:bd:74: 73:7a:f1:ab:28:4a:50:f8:ae:c8:f0:80:2e:de:2c:5c:43:9f: 14:af:03:ab:22:d9:c2:f2:56:e0:ed:a3:9b:a7:61:07:3a:ba: 75:21:04:1c -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICbbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzMDQwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzZhZi01MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCLGU1rSQ7nz5dLR4hpBIISPkPRmKP7/ePvLNnUZEQoYmuTubQJLC7Y6DuAg 1Kl64RX1a9JV9R8/mJGSqa5/MlR1RCawPDcKIfSrA36XucCFyPF9Tcy9MA5N8hUS nna2wlB+5oKuDCRW9Yk5wqXZY8CeyhBgJXdoXdofONXoE4wbPjz090aMwK2iloPj 6nIQ7SpF6rYm/3mji8gxuoMR9ZjQi+/8lTgiJqn+ur7Sfcsvv2PY/+kTEnKSHNcU DW4ek8OuZiEjByhH9pGc1zWTWge/rXpoRuTN66DF5ISPChkrgZPyZKLeYtZOvx/1 oOOuaIlpoiFaKhv/fIb3vNR6kQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIGNLBqE iem6qolagXoTTTreU0XHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTI2MTVCODhC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xmYAwDQYJKoZIhvcNAQELBQADggEBAGa6yoZQRfaB hzy6uWLetgRyLuU8Ik1aHSccXBcLSTUzLNGMGMvwd3/cLnYKTqRiupGD+8pWScVJ Y1LS/GXtC4i7SiL7aGYMh5hB4+YbRKg0XC5jyCTB2DuzzrSsbbBaLvqvEf66UkSn LvNZPcY3fMRN21XAOV8UbiqdO9ZNift4gswR9Js/HKURAfQ193hYxbKV9jH6ee8F 3XSOsM3UzViWXFgC0cfIW4ZjYzoJCbH/onGQrposn/lh4XzpX7Bg1lJDCSuO7Yt7 ElvXi4RdNMpdc+/qfMS9dHN68asoSlD4rsjwgC7eLFxDnxSvA6si2cLyVuDto5un YQc6unUhBBw= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:26 2024 by rpki-client on console-ams.rpki-client.org