$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4B005EE69B11EEA61CC220C4F9AE02.roa File: 4D4B005EE69B11EEA61CC220C4F9AE02.roa (raw, json) Hash identifier: cSluvJXi0aVab6phfZu0Tpcrzw2qPC7pSvcm2ks/nhA= Subject key identifier: CC:6F:D8:33:67:70:23:FC:FC:1A:62:11:81:63:25:ED:2E:C9:B4:6F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8519 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4B005EE69B11EEA61CC220C4F9AE02.roa Signing time: Wed 20 Mar 2024 09:21:59 +0000 ROA not before: Wed 20 Mar 2024 09:21:59 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133716 IP address blocks: 2001:df2:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 15:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34073 (0x8519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 20 09:21:59 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65faaab6-458c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:3b:6e:74:f4:3b:05:be:0a:d0:d3:41:62: 4e:14:26:ff:33:05:67:7d:3b:b9:46:80:7a:73:68: fc:a5:86:1d:61:f8:96:a0:8f:a2:e4:58:ce:09:68: 04:25:c2:d9:d9:12:86:f8:75:da:56:ba:78:50:6b: 30:70:1f:81:c6:91:6c:50:18:ad:26:f6:56:62:f5: 0a:42:f5:8c:b9:d3:8e:e1:a8:cd:2d:3a:7d:b5:13: a6:a5:10:be:ba:28:da:b4:64:c1:a4:3f:f3:15:7a: c5:19:0a:95:5e:30:e3:26:bb:33:d5:53:9d:80:42: e5:a1:45:da:76:e9:47:e6:2c:df:92:2c:a1:12:59: d4:f0:a7:46:46:00:85:ad:89:75:a3:c8:a2:e6:d8: cc:e7:37:cb:1f:b7:cb:4a:64:6f:85:68:6d:b3:73: 7a:55:e4:76:aa:7c:b7:28:4c:98:0c:24:22:bd:3b: c9:b3:e8:1d:a1:4f:a5:c4:8b:5f:27:d7:9f:eb:36: dd:6d:fa:03:a3:5f:88:71:0f:a9:d5:3e:ed:c1:c3: 3e:10:ce:e5:8c:8e:bf:cb:af:cc:8e:cf:03:bc:42: 8d:d3:28:db:0f:d7:72:4f:92:9b:45:f5:f9:06:a1: c0:5f:22:8c:4c:21:f5:13:ca:4b:e1:bb:c6:4b:55: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:D8:33:67:70:23:FC:FC:1A:62:11:81:63:25:ED:2E:C9:B4:6F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4B005EE69B11EEA61CC220C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:f640::/48 Signature Algorithm: sha256WithRSAEncryption 74:45:00:28:65:e2:44:3c:c4:23:9d:0c:85:aa:35:29:00:97: 74:7d:33:45:1d:6e:27:8e:99:df:a0:f7:7c:17:2c:27:08:07: d6:2b:9c:59:f2:f4:7e:de:13:0a:8c:73:bb:6a:21:7d:fd:ec: 12:45:d6:eb:55:01:38:ab:a9:97:da:ef:56:e2:82:c5:dd:5a: 85:eb:3e:1d:dd:ff:fa:38:4f:d2:d5:f4:c2:2d:c6:28:a4:a7: 1f:2f:3d:b9:1e:b2:0b:b8:87:d1:4d:9c:51:06:b3:26:db:7b: af:b6:e5:d5:19:25:62:11:49:4b:6e:62:39:37:96:37:a8:f0: 00:ab:b1:bd:6f:31:6c:10:52:7d:b9:73:0e:cc:08:64:25:88: 8c:f4:10:96:b3:65:85:b2:6c:d6:e6:c2:e8:b4:43:66:f2:65: 16:ab:7e:68:95:2d:0f:5a:e1:b1:2a:21:ea:f4:e9:62:82:c2: 37:bc:ca:e0:6a:1b:45:6b:00:24:76:09:4b:ce:fc:b0:8b:90: 98:cb:dd:95:f1:82:38:f2:58:d7:9a:05:53:fa:ce:a7:99:48: cd:cf:48:2b:52:c7:54:20:a5:59:fa:35:47:95:fa:de:23:94: 01:5f:4f:09:90:56:c6:62:11:8d:70:a7:d1:b6:05:2b:13:4a: 68:9f:52:0d -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAIUZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMyMDA5MjE1OVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVmYWFhYjYtNDU4YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN53O2509DsFvgrQ00FiThQm/zMFZ307uUaAenNo/KWGHWH4lqCPouRYzglo BCXC2dkShvh12la6eFBrMHAfgcaRbFAYrSb2VmL1CkL1jLnTjuGozS06fbUTpqUQ vroo2rRkwaQ/8xV6xRkKlV4w4ya7M9VTnYBC5aFF2nbpR+Ys35IsoRJZ1PCnRkYA ha2JdaPIoubYzOc3yx+3y0pkb4VobbNzelXkdqp8tyhMmAwkIr07ybPoHaFPpcSL XyfXn+s23W36A6NfiHEPqdU+7cHDPhDO5YyOv8uvzI7PA7xCjdMo2w/Xck+Sm0X1 +QahwF8ijEwh9RPKS+G7xktVZZECAwEAAaOCApgwggKUMB0GA1UdDgQWBBTMb9gz Z3Aj/PwaYhGBYyXtLsm0bzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRENEIwMDVF RTY5QjExRUVBNjFDQzIyMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8vZAMA0GCSqGSIb3DQEBCwUAA4IBAQB0RQAoZeJE PMQjnQyFqjUpAJd0fTNFHW4njpnfoPd8FywnCAfWK5xZ8vR+3hMKjHO7aiF9/ewS RdbrVQE4q6mX2u9W4oLF3VqF6z4d3f/6OE/S1fTCLcYopKcfLz25HrILuIfRTZxR BrMm23uvtuXVGSViEUlLbmI5N5Y3qPAAq7G9bzFsEFJ9uXMOzAhkJYiM9BCWs2WF smzW5sLotENm8mUWq35olS0PWuGxKiHq9OligsI3vMrgahtFawAkdglLzvywi5CY y92V8YI48ljXmgVT+s6nmUjNz0grUsdUIKVZ+jVHlfreI5QBX08JkFbGYhGNcKfR tgUrE0pon1IN -----END CERTIFICATE-----Generated at Sun Apr 28 16:49:18 2024 by rpki-client on console-ams.rpki-client.org