$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa File: 61E5795E511911ED9308A55CC4F9AE02.roa (raw, json) Hash identifier: ZnIkf/BhiUwM/NPfwJJ2XagMMRcwFgm1NH7W/ZXqxDI= Subject key identifier: E3:2C:B0:9B:44:D9:F9:F9:82:20:F1:0B:4E:C9:3A:5E:20:33:97:83 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6C84 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa Signing time: Wed 10 May 2023 16:24:54 +0000 ROA not before: Wed 10 May 2023 16:24:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 136629 IP address blocks: 2406:ffc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27780 (0x6c84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:24:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc556-e1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:4f:a2:5a:b9:07:a1:91:28:d0:71:8c:82: 66:89:ba:eb:f2:72:46:ee:a2:2a:81:59:58:a0:b1: a5:85:41:c1:ca:bd:69:5b:39:b1:b2:bf:09:4a:1a: d8:c4:af:dc:cb:7c:ec:af:0e:f1:0f:f6:3a:ed:9b: 81:2d:d8:86:78:9d:1b:00:f6:97:48:45:60:25:12: e1:b3:ce:89:b5:98:0a:1d:f7:93:82:73:69:a2:c7: ce:21:cc:03:68:c3:51:9d:27:10:9e:29:29:de:52: 45:b3:89:eb:4c:73:08:6d:77:1c:25:5c:aa:39:45: 6b:61:e4:9e:14:10:3f:98:87:aa:71:5a:6f:61:87: 11:02:ec:0f:dc:4d:0e:dc:61:fa:20:7d:03:e8:bd: e0:a7:af:79:1f:81:2d:80:cb:55:62:cf:9e:84:d9: 27:07:b1:94:c9:60:3d:10:ea:e4:e6:9d:cf:6e:7e: 64:dc:ce:a8:e1:c3:39:7a:f7:52:03:ca:4f:cf:41: c3:81:ad:3f:79:1c:47:5a:b3:95:ef:bc:c5:07:10: 70:01:71:58:af:2a:b3:cb:85:68:ad:d1:0b:ea:8c: 23:ad:2c:76:e2:d7:85:80:64:bc:fa:55:11:bd:9f: e5:94:c1:6f:85:f5:77:07:78:90:7d:33:52:9e:40: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2C:B0:9B:44:D9:F9:F9:82:20:F1:0B:4E:C9:3A:5E:20:33:97:83 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2406:ffc0::/32 Signature Algorithm: sha256WithRSAEncryption 95:fe:43:a6:85:37:fd:68:50:e2:7e:3f:93:5f:85:c9:03:ca: 2c:ec:b6:5e:a0:d7:e5:0d:8b:9e:e0:d8:f1:c3:62:12:8e:c2: 23:d9:63:3d:14:44:0b:42:f5:fd:0e:4d:f4:db:31:3d:04:55: d3:3c:9d:bb:e6:a7:ef:eb:30:03:c0:17:d6:78:27:14:dd:77: 7a:92:42:08:04:84:1e:be:09:7f:2d:2a:61:6a:22:da:31:d7: 44:ef:87:fe:84:3e:ea:40:0b:ec:da:28:db:15:55:fa:90:36: 04:37:28:4e:a6:3f:c2:6b:60:af:fd:d6:93:9b:c1:69:2c:fa: 66:31:af:44:74:c6:d6:78:ee:e4:57:f2:dd:9c:c5:4d:cd:e8: 7f:24:39:44:c6:33:3c:3d:90:52:96:71:eb:f1:0b:d4:4c:1b: 72:cf:fb:96:d6:fd:4e:65:cd:77:ca:db:ac:04:67:99:16:28: db:23:72:cd:f6:06:f4:4c:6e:26:76:5a:3b:57:cf:a9:29:15: c7:68:cd:f6:db:19:13:b9:99:78:ad:e4:47:ec:98:98:33:6f: a1:62:38:08:a7:6d:7b:c6:84:67:b3:b2:22:e5:10:5f:c8:48: 22:47:8e:ad:5f:f2:a8:ed:30:0e:43:ac:38:7b:27:c6:21:08: d8:b1:6f:60 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICbIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyNDU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzU1Ni1lMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNtPolq5B6GRKNBxjIJmibrr8nJG7qIqgVlYoLGlhUHByr1pWzmxsr8JShrY xK/cy3zsrw7xD/Y67ZuBLdiGeJ0bAPaXSEVgJRLhs86JtZgKHfeTgnNposfOIcwD aMNRnScQnikp3lJFs4nrTHMIbXccJVyqOUVrYeSeFBA/mIeqcVpvYYcRAuwP3E0O 3GH6IH0D6L3gp695H4EtgMtVYs+ehNknB7GUyWA9EOrk5p3Pbn5k3M6o4cM5evdS A8pPz0HDga0/eRxHWrOV77zFBxBwAXFYryqzy4VordEL6owjrSx24teFgGS8+lUR vZ/llMFvhfV3B3iQfTNSnkByDQIDAQABo4ICljCCApIwHQYDVR0OBBYEFOMssJtE 2fn5giDxC07JOl4gM5eDMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjFFNTc5NUU1 MTE5MTFFRDkzMDhBNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBv/AMA0GCSqGSIb3DQEBCwUAA4IBAQCV/kOmhTf9aFDi fj+TX4XJA8os7LZeoNflDYue4Njxw2ISjsIj2WM9FEQLQvX9Dk302zE9BFXTPJ27 5qfv6zADwBfWeCcU3Xd6kkIIBIQevgl/LSphaiLaMddE74f+hD7qQAvs2ijbFVX6 kDYENyhOpj/Ca2Cv/daTm8FpLPpmMa9EdMbWeO7kV/LdnMVNzeh/JDlExjM8PZBS lnHr8QvUTBtyz/uW1v1OZc13ytusBGeZFijbI3LN9gb0TG4mdlo7V8+pKRXHaM32 2xkTuZl4reRH7JiYM2+hYjgIp217xoRns7Ii5RBfyEgiR46tX/Ko7TAOQ6w4eyfG IQjYsW9g -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org