$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/365A5A4CB04B11EEA0F3EA4AC4F9AE02.roa File: 365A5A4CB04B11EEA0F3EA4AC4F9AE02.roa (raw, json) Hash identifier: 6XmCguUnesEThtBREJRanCv3tTHJuDizZrGeJUcb+KQ= Subject key identifier: A4:87:F0:7E:2A:D1:21:F2:B2:C2:D1:85:E5:29:CE:9D:C7:D5:48:F0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8146 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/365A5A4CB04B11EEA0F3EA4AC4F9AE02.roa Signing time: Thu 11 Jan 2024 06:32:38 +0000 ROA not before: Thu 11 Jan 2024 06:32:38 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151720 IP address blocks: 2401:5fe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33094 (0x8146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 11 06:32:38 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=659f8b85-046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:42:75:a4:16:26:a2:55:71:14:a6:93:a5: 32:bf:ee:6c:0b:3d:74:d8:b6:91:2f:2c:16:86:8b: 86:50:6a:d4:c6:d5:3b:56:ea:00:7e:51:2f:7f:ee: 0e:4e:d0:9b:c7:d4:15:45:2c:e9:27:a0:8d:dd:08: 43:a4:df:3e:42:c9:d2:b7:9b:83:bc:75:78:65:1d: 11:4d:91:26:26:0e:eb:c2:e2:53:f9:52:39:cb:79: 76:8f:18:32:75:5f:b2:b7:d8:dc:df:7d:a1:31:61: 36:b8:1c:40:48:4d:31:6c:cc:41:89:28:6c:37:5c: 95:04:6e:3b:09:e1:3b:64:63:48:3b:fd:e2:d5:5b: 0a:bb:53:42:de:18:01:f7:de:43:a4:0b:b4:1b:48: bf:7c:03:71:c0:84:9b:1d:c0:e3:79:38:0f:0b:12: ca:f6:88:49:21:2f:95:68:b0:6f:6b:ee:0b:0c:c4: 8c:e9:34:be:eb:fc:fa:90:56:3a:27:ab:b4:cf:81: bd:a6:23:56:ba:5d:3b:04:45:89:1e:6d:c1:e4:d3: 00:57:72:02:06:b5:27:c1:22:1a:9d:c0:6d:ce:08: 45:c1:96:f9:ed:83:4d:6b:f0:88:fe:35:91:53:c6: 35:fd:7a:95:85:cc:3a:0a:3c:8b:9d:9d:f4:58:94: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:87:F0:7E:2A:D1:21:F2:B2:C2:D1:85:E5:29:CE:9D:C7:D5:48:F0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/365A5A4CB04B11EEA0F3EA4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:5fe0::/32 Signature Algorithm: sha256WithRSAEncryption b4:d0:65:c0:81:54:54:ab:f7:e1:ee:f9:ae:76:f5:5c:84:da: 3f:c9:f0:78:55:c0:9f:dd:7c:2d:c7:ab:20:cf:ec:21:97:ca: 0e:df:f7:ad:d2:60:ca:fe:78:5c:2c:07:04:97:d3:39:0d:85: a1:6a:58:d2:bd:4e:53:60:e2:08:ad:24:27:d8:40:d0:5c:8e: f8:54:ed:aa:78:71:73:78:24:be:5a:a4:8e:31:4e:7f:d0:54: 24:4a:82:76:b1:ec:db:d6:27:27:ca:37:93:20:55:f5:46:52: 02:6d:c8:b8:b2:2a:83:6b:2d:1e:0a:e0:ca:b7:b1:c9:99:a2: 70:77:94:23:a3:98:90:2d:6f:b5:22:af:21:b6:cc:4c:6e:67: 19:40:fd:e7:c3:67:3c:ea:b6:d5:57:54:0d:59:1d:e4:3f:19: 85:23:b4:ca:61:3f:9c:c3:cb:bf:43:91:77:3f:bb:75:77:8b: 77:d9:11:12:63:fa:1b:f5:4b:01:3b:45:af:1c:30:d4:5a:2f: 73:f0:59:89:06:a0:79:14:2d:fc:33:0d:c1:c1:75:49:f6:b4: 9d:00:95:77:78:21:25:a6:1c:25:a3:35:9f:c3:9b:6c:19:af: 89:ba:77:7c:24:b8:8e:53:ae:8d:77:a9:1d:f0:cd:cf:8d:1d: 6c:ab:6c:73 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIDAIFGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDExMTA2MzIzOFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjU5ZjhiODUtMDQ2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMx7QnWkFiaiVXEUppOlMr/ubAs9dNi2kS8sFoaLhlBq1MbVO1bqAH5RL3/u Dk7Qm8fUFUUs6Segjd0IQ6TfPkLJ0rebg7x1eGUdEU2RJiYO68LiU/lSOct5do8Y MnVfsrfY3N99oTFhNrgcQEhNMWzMQYkobDdclQRuOwnhO2RjSDv94tVbCrtTQt4Y AffeQ6QLtBtIv3wDccCEmx3A43k4DwsSyvaISSEvlWiwb2vuCwzEjOk0vuv8+pBW OiertM+BvaYjVrpdOwRFiR5tweTTAFdyAga1J8EiGp3Abc4IRcGW+e2DTWvwiP41 kVPGNf16lYXMOgo8i52d9FiUF7kCAwEAAaOCApYwggKSMB0GA1UdDgQWBBSkh/B+ KtEh8rLC0YXlKc6dx9VI8DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM2NUE1QTRD QjA0QjExRUVBMEYzRUE0QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/ BBEwDzANBAIAAjAHAwUAJAFf4DANBgkqhkiG9w0BAQsFAAOCAQEAtNBlwIFUVKv3 4e75rnb1XITaP8nweFXAn918LcerIM/sIZfKDt/3rdJgyv54XCwHBJfTOQ2FoWpY 0r1OU2DiCK0kJ9hA0FyO+FTtqnhxc3gkvlqkjjFOf9BUJEqCdrHs29YnJ8o3kyBV 9UZSAm3IuLIqg2stHgrgyrexyZmicHeUI6OYkC1vtSKvIbbMTG5nGUD958NnPOq2 1VdUDVkd5D8ZhSO0ymE/nMPLv0ORdz+7dXeLd9kREmP6G/VLATtFrxww1Fovc/BZ iQageRQt/DMNwcF1Sfa0nQCVd3ghJaYcJaM1n8ObbBmvibp3fCS4jlOujXepHfDN z40dbKtscw== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org