$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A2A8A2CED6411ED93157847C4F9AE02.roa File: 6A2A8A2CED6411ED93157847C4F9AE02.roa (raw, json) Hash identifier: wB+wJHYonkQQQBecHM2F5+4ZLZE2E7LHSVPjpNkfJAQ= Subject key identifier: 30:0B:9E:16:B9:EC:D7:3D:8C:31:90:6B:75:64:08:3A:3E:5F:43:E5 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6D88 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A2A8A2CED6411ED93157847C4F9AE02.roa Signing time: Wed 10 May 2023 16:29:49 +0000 ROA not before: Wed 10 May 2023 16:29:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 138708 IP address blocks: 2001:df5:2680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28040 (0x6d88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:29:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc67d-987f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:92:2c:fb:69:05:cb:c8:c0:f9:56:5a:f2: 5c:75:b3:a6:fa:bd:1c:fc:ef:22:e6:b0:22:38:af: 72:e7:cc:7b:aa:13:44:ee:01:9a:e6:50:eb:8f:89: 92:0c:b3:f8:bd:ed:a2:8b:17:fc:29:af:0d:45:0d: 0d:93:9a:07:e9:ee:16:f6:ae:49:3f:54:66:27:9f: fa:a4:ef:94:df:fa:41:3c:52:c4:f2:b1:03:2c:34: 64:c2:d5:42:f5:c5:4a:1f:78:5d:86:3b:87:cb:e7: 00:7b:f7:09:a8:75:45:e2:08:56:51:71:0d:42:2d: 1a:21:89:a1:6f:d0:61:56:73:80:ee:fa:f2:60:e1: 1a:63:61:20:1c:e8:aa:0e:6d:56:dd:43:8c:4f:97: c2:01:7d:7a:2b:6c:43:c2:28:9b:aa:5b:49:25:d6: f8:fb:c3:49:ad:79:91:a9:80:c1:23:2a:5b:21:de: 5d:cd:f7:90:68:41:0e:47:d5:b0:1e:c0:47:7d:dc: ac:a8:99:32:b6:10:1f:bd:61:27:59:90:4d:98:2e: 34:c9:85:c7:b4:36:e4:db:32:36:fd:43:a4:e6:83: 4a:94:b7:4b:e7:3f:f2:54:dc:c9:60:de:fe:2c:6f: 5c:95:ee:ff:f4:17:30:1a:0c:48:50:75:1b:2c:18: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0B:9E:16:B9:EC:D7:3D:8C:31:90:6B:75:64:08:3A:3E:5F:43:E5 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A2A8A2CED6411ED93157847C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:2680::/48 Signature Algorithm: sha256WithRSAEncryption 7f:0e:56:e9:f1:f1:25:e8:f4:92:9a:9d:6f:2d:c3:05:15:3d: 4c:dc:12:61:f1:bb:b5:84:31:1e:dd:02:b1:2a:cb:2d:85:9d: 78:a6:2f:7a:da:e9:f3:68:36:0e:7c:25:aa:24:19:a9:fc:55: b0:67:6b:fa:78:b4:43:b5:7e:6e:9c:7c:c1:c1:00:3f:79:5e: 12:05:5e:ef:bb:71:c2:2a:c1:e7:76:65:99:b6:85:13:51:b0: fe:9b:16:c0:3e:fe:13:da:c5:61:ea:ad:69:75:ca:6c:3b:3a: 67:b1:ae:dc:ad:6a:d8:dd:4b:8b:fd:47:0e:62:b6:ff:fa:97: 37:a4:26:dd:d2:9e:02:16:af:c7:fb:dc:f3:b5:ff:8c:75:0e: 7b:91:f4:15:93:1c:f8:ac:64:4d:94:ac:98:83:fa:fa:e1:59: d2:ae:73:ea:b1:70:5a:95:f3:e0:79:cb:c6:41:4b:17:37:5d: 32:3f:c3:a2:64:f3:76:83:44:0a:1d:d4:7d:20:6c:1d:11:c5: da:f8:6b:7a:d9:00:e5:20:c2:4d:6f:ea:7a:33:ae:95:e6:d7: c4:eb:5a:21:62:72:5d:54:98:dd:0d:27:a7:49:6d:27:5d:17: 9b:b7:c3:55:bd:fb:77:94:6a:48:5f:b6:d4:ce:df:3b:b8:09: 27:0c:dc:49 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICbYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyOTQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzY3ZC05ODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ciSLPtpBcvIwPlWWvJcdbOm+r0c/O8i5rAiOK9y58x7qhNE7gGa5lDrj4mS DLP4ve2iixf8Ka8NRQ0Nk5oH6e4W9q5JP1RmJ5/6pO+U3/pBPFLE8rEDLDRkwtVC 9cVKH3hdhjuHy+cAe/cJqHVF4ghWUXENQi0aIYmhb9BhVnOA7vryYOEaY2EgHOiq Dm1W3UOMT5fCAX16K2xDwiibqltJJdb4+8NJrXmRqYDBIypbId5dzfeQaEEOR9Ww HsBHfdysqJkythAfvWEnWZBNmC40yYXHtDbk2zI2/UOk5oNKlLdL5z/yVNzJYN7+ LG9cle7/9BcwGgxIUHUbLBgd6wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDALnha5 7Nc9jDGQa3VkCDo+X0PlMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkEyQThBMkNF RDY0MTFFRDkzMTU3ODQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ31JoAwDQYJKoZIhvcNAQELBQADggEBAH8OVunx8SXo 9JKanW8twwUVPUzcEmHxu7WEMR7dArEqyy2FnXimL3ra6fNoNg58JaokGan8VbBn a/p4tEO1fm6cfMHBAD95XhIFXu+7ccIqwed2ZZm2hRNRsP6bFsA+/hPaxWHqrWl1 ymw7OmexrtytatjdS4v9Rw5itv/6lzekJt3SngIWr8f73PO1/4x1DnuR9BWTHPis ZE2UrJiD+vrhWdKuc+qxcFqV8+B5y8ZBSxc3XTI/w6Jk83aDRAod1H0gbB0Rxdr4 a3rZAOUgwk1v6nozrpXm18TrWiFicl1UmN0NJ6dJbSddF5u3w1W9+3eUakhfttTO 3zu4CScM3Ek= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org