$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa File: 5835972CD53911EEB6855F57C4F9AE02.roa (raw, json) Hash identifier: 4zbun/kbucK0zgTkmsHZLSZl+tlykCf8ftYPSFHB1x0= Subject key identifier: 58:D3:E0:8D:A0:EE:AC:91:D3:30:2B:6C:4F:E3:7B:ED:12:E3:2B:04 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 83B8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa Signing time: Tue 27 Feb 2024 06:27:56 +0000 ROA not before: Tue 27 Feb 2024 06:27:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150656 IP address blocks: 2001:df1:e540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33720 (0x83b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 27 06:27:56 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65dd80ec-5a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:64:c3:61:fa:65:c2:f7:4e:45:d6:25:81: b8:90:83:ed:6b:0f:d3:09:78:93:7b:e7:c7:d0:7d: c2:37:3c:80:cb:5e:6c:5d:ac:b5:cc:4a:f8:45:e4: f2:df:cf:99:fc:5e:4a:d2:09:de:99:a1:d4:27:88: cc:a1:87:64:24:2d:66:2e:bb:c0:59:b7:6d:5c:6c: ab:09:4c:06:e4:27:25:06:69:49:d6:24:75:b3:3e: 81:02:2e:66:be:2a:09:db:59:83:26:74:48:24:a5: e4:3b:2a:6a:81:1a:c8:10:36:2b:d5:bb:12:4b:cb: 24:b3:40:a2:4d:46:b1:0c:07:78:ff:dd:28:96:ba: 7b:10:9d:03:f5:e0:65:9c:e3:dc:9a:77:5c:e6:64: ee:fa:de:c8:c6:f2:6f:34:82:69:34:0d:7b:d5:b5: aa:4f:9b:69:60:fa:68:cd:01:8e:f2:2f:9c:b6:a0: 51:f4:5a:a0:81:43:bf:ef:af:4f:10:76:2b:77:a8: 12:5c:a9:89:37:4d:f8:88:8e:1c:88:db:a3:50:8c: 82:e6:2a:92:fb:47:ad:04:00:22:0b:b1:aa:35:97: c9:41:18:9b:87:28:dd:22:62:ee:66:6b:63:76:55: 48:be:36:05:ba:97:a8:fd:19:cd:b5:65:e9:06:df: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D3:E0:8D:A0:EE:AC:91:D3:30:2B:6C:4F:E3:7B:ED:12:E3:2B:04 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5835972CD53911EEB6855F57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:e540::/48 Signature Algorithm: sha256WithRSAEncryption ba:bc:b2:d9:0d:06:a8:7c:d7:a4:68:f3:52:ab:89:2f:fd:f3: 6b:19:b3:bb:c9:80:cf:16:c7:af:5e:0c:34:81:67:5e:17:66: 86:a7:e1:d8:e8:da:e9:40:b8:a9:4c:9d:00:ad:2b:ec:06:e9: ab:fb:f8:40:d7:f4:34:4a:8e:af:6f:37:f8:77:09:ff:d0:88: 15:20:99:d6:47:0c:c2:f6:a8:0c:69:f9:ff:d4:3a:b6:ba:f1: 4c:a4:df:d7:f1:ae:1a:ca:25:a1:58:e6:44:d7:fa:bc:d6:31: 8d:73:20:59:11:51:85:df:78:3e:6b:0b:34:4d:ab:99:13:38: b2:ba:bb:62:99:cf:1c:7f:94:87:5a:65:07:f8:a1:1f:7b:27: 30:09:5d:eb:38:45:c3:bf:27:41:71:3a:b7:bf:41:78:f6:d5: 29:cb:27:6e:57:d2:22:82:80:fa:b1:3f:08:42:ed:d7:54:b7: e8:3d:ec:fb:32:8c:2d:47:a3:2b:46:10:6c:0a:45:13:87:27: 51:64:f1:6a:a2:44:25:08:ec:36:76:c4:68:5d:99:98:fd:02: f8:44:80:ff:63:93:41:4c:3a:82:fa:ea:ea:8f:2e:65:b7:94: be:31:5d:b7:dc:46:04:64:18:c0:d5:ba:06:b9:49:a8:7e:9d: e2:46:95:c8 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAIO4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDIyNzA2Mjc1NloXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVkZDgwZWMtNWEwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1OZMNh+mXC905F1iWBuJCD7WsP0wl4k3vnx9B9wjc8gMtebF2stcxK+EXk 8t/PmfxeStIJ3pmh1CeIzKGHZCQtZi67wFm3bVxsqwlMBuQnJQZpSdYkdbM+gQIu Zr4qCdtZgyZ0SCSl5DsqaoEayBA2K9W7EkvLJLNAok1GsQwHeP/dKJa6exCdA/Xg ZZzj3Jp3XOZk7vreyMbybzSCaTQNe9W1qk+baWD6aM0BjvIvnLagUfRaoIFDv++v TxB2K3eoElypiTdN+IiOHIjbo1CMguYqkvtHrQQAIguxqjWXyUEYm4co3SJi7mZr Y3ZVSL42BbqXqP0ZzbVl6QbfkQ8CAwEAAaOCApgwggKUMB0GA1UdDgQWBBRY0+CN oO6skdMwK2xP43vtEuMrBDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzU4MzU5NzJD RDUzOTExRUVCNjg1NUY1N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8eVAMA0GCSqGSIb3DQEBCwUAA4IBAQC6vLLZDQao fNekaPNSq4kv/fNrGbO7yYDPFsevXgw0gWdeF2aGp+HY6NrpQLipTJ0ArSvsBumr +/hA1/Q0So6vbzf4dwn/0IgVIJnWRwzC9qgMafn/1Dq2uvFMpN/X8a4ayiWhWOZE 1/q81jGNcyBZEVGF33g+aws0TauZEziyurtimc8cf5SHWmUH+KEfeycwCV3rOEXD vydBcTq3v0F49tUpyyduV9IigoD6sT8IQu3XVLfoPez7MowtR6MrRhBsCkUThydR ZPFqokQlCOw2dsRoXZmY/QL4RID/Y5NBTDqC+urqjy5lt5S+MV233EYEZBjA1boG uUmofp3iRpXI -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org