$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E07AAD0AEB411EEBC224D38C4F9AE02.roa File: 3E07AAD0AEB411EEBC224D38C4F9AE02.roa (raw, json) Hash identifier: zfQy3yK3Fmt8MIpD9p5Rtyd5NR0pf5ZVF7y2gPxUv9I= Subject key identifier: BD:AF:E0:65:7A:C2:8D:E9:24:40:83:DF:C0:CF:2A:49:BC:4E:96:2F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8223 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E07AAD0AEB411EEBC224D38C4F9AE02.roa Signing time: Mon 29 Jan 2024 12:22:51 +0000 ROA not before: Mon 29 Jan 2024 12:22:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151157 IP address blocks: 36.50.167.0/24 maxlen: 24 2400:f620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33315 (0x8223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 29 12:22:51 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65b7989b-001e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:91:1e:11:73:89:0c:dc:26:d8:b0:88:d2: 9d:48:b1:cf:a9:79:40:c4:e1:23:f8:e3:64:de:91: 75:90:03:58:dc:9c:15:4d:76:97:e9:6f:f5:9e:6f: f3:19:21:b0:f3:a6:89:65:69:e0:ad:cc:eb:68:3a: 82:0d:bc:6d:98:c0:ca:3a:af:ac:c9:51:47:1e:ae: ad:73:4e:08:aa:39:1b:df:62:25:51:5c:a0:87:ff: 73:5e:7a:f8:b6:a5:be:e3:86:19:0d:00:f4:27:24: 2e:03:0a:60:11:6c:91:c5:01:ff:f0:5d:5a:a1:10: b3:4a:47:c2:56:c0:a2:9a:40:64:0c:66:b1:13:b5: 3e:cd:e9:35:cf:b6:73:4a:1e:7d:b7:8f:11:b4:54: 0f:ca:ee:10:01:11:44:40:f3:5f:f0:20:6d:b6:82: 8e:55:d4:d5:73:fc:1a:a6:38:a6:a6:fc:ea:44:19: f1:06:de:3a:c9:c8:c0:dd:41:1e:4a:61:34:cb:4d: 82:c2:b2:c8:47:88:9b:fa:81:96:45:f4:6c:f7:c6: 42:b5:7d:50:bc:39:16:e1:92:7c:63:b1:36:c6:e4: 7d:5c:17:28:20:4d:e2:6b:95:69:1d:9f:cb:9c:65: ea:9a:11:83:66:ad:c8:b0:c3:a2:2b:b3:da:d8:31: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:E0:65:7A:C2:8D:E9:24:40:83:DF:C0:CF:2A:49:BC:4E:96:2F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E07AAD0AEB411EEBC224D38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.167.0/24 IPv6: 2400:f620::/32 Signature Algorithm: sha256WithRSAEncryption 4f:8a:f4:c0:75:d7:b9:c3:7c:e2:b0:5e:c6:24:55:cc:37:90: b3:da:83:b7:30:84:94:82:47:4d:c3:ec:b2:3c:5d:b3:ff:41: f6:26:8b:86:04:d0:c3:0a:b3:4c:51:a4:ff:9d:79:57:4f:c7: 3d:df:5e:87:fc:2a:a4:db:85:54:a6:6c:66:68:02:67:e4:3d: 53:cb:3f:a1:03:98:62:72:e2:5e:bc:46:93:50:3b:2f:8c:f8: 44:73:f1:d9:05:b1:a6:6f:3b:8b:e9:d6:41:4b:4e:ba:bb:fc: 2f:9e:b4:21:99:34:bf:aa:c9:b1:43:6e:a4:1e:09:3f:56:35: be:4a:cd:8e:c9:31:12:ff:b2:42:8f:6f:f0:4f:1b:e9:3b:8f: 21:29:f4:c1:90:37:9c:38:05:5c:83:2d:cd:a6:7a:d9:73:e5: be:3d:25:41:00:30:1b:11:ec:fd:db:59:6c:62:56:a0:9c:a6: fd:b7:0a:93:d8:78:ce:48:28:2e:bc:64:a1:ec:2f:84:c2:61: d6:cd:e7:02:11:9f:d2:8d:d5:4e:13:d1:8c:2d:03:49:10:83: bc:45:8c:61:9f:53:9b:61:ea:f0:41:2f:af:81:96:26:4b:9f: 86:53:45:b0:6e:c5:41:d7:70:20:60:b1:50:ae:12:1b:cb:21: 8a:f8:f3:9b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAIIjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDEyOTEyMjI1MVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjViNzk4OWItMDAxZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKx8kR4Rc4kM3CbYsIjSnUixz6l5QMThI/jjZN6RdZADWNycFU12l+lv9Z5v 8xkhsPOmiWVp4K3M62g6gg28bZjAyjqvrMlRRx6urXNOCKo5G99iJVFcoIf/c156 +LalvuOGGQ0A9CckLgMKYBFskcUB//BdWqEQs0pHwlbAoppAZAxmsRO1Ps3pNc+2 c0oefbePEbRUD8ruEAERREDzX/AgbbaCjlXU1XP8GqY4pqb86kQZ8QbeOsnIwN1B HkphNMtNgsKyyEeIm/qBlkX0bPfGQrV9ULw5FuGSfGOxNsbkfVwXKCBN4muVaR2f y5xl6poRg2atyLDDoiuz2tgxcSECAwEAAaOCAqQwggKgMB0GA1UdDgQWBBS9r+Bl esKN6SRAg9/AzypJvE6WLzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNFMDdBQUQw QUVCNDExRUVCQzIyNEQzOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQAJDKnMA0EAgACMAcDBQAkAPYgMA0GCSqGSIb3DQEBCwUA A4IBAQBPivTAdde5w3zisF7GJFXMN5Cz2oO3MISUgkdNw+yyPF2z/0H2JouGBNDD CrNMUaT/nXlXT8c9316H/Cqk24VUpmxmaAJn5D1Tyz+hA5hicuJevEaTUDsvjPhE c/HZBbGmbzuL6dZBS066u/wvnrQhmTS/qsmxQ26kHgk/VjW+Ss2OyTES/7JCj2/w TxvpO48hKfTBkDecOAVcgy3NpnrZc+W+PSVBADAbEez921lsYlagnKb9twqT2HjO SCguvGSh7C+EwmHWzecCEZ/SjdVOE9GMLQNJEIO8RYxhn1ObYerwQS+vgZYmS5+G U0WwbsVB13AgYLFQrhIbyyGK+POb -----END CERTIFICATE-----Generated at Sun Apr 28 15:51:18 2024 by rpki-client on console-fra.rpki-client.org