$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa File: 6A8F3AE2E59711EC9B14CC09C4F9AE02.roa (raw, json) Hash identifier: JZaj3LrP41QX7OuodrIfZju14jByzwy2J2PAqdL/hTs= Subject key identifier: F9:FF:61:A5:A6:03:B7:C7:87:30:C3:A0:9B:BE:8A:0D:BA:35:71:4F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 71E7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa Signing time: Wed 10 May 2023 16:50:34 +0000 ROA not before: Wed 10 May 2023 16:50:33 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 9885 IP address blocks: 27.0.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29159 (0x71e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:50:33 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcb59-9e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:31:02:48:90:51:e0:ca:c7:86:30:d2:25: a4:b3:bd:ef:be:31:c7:a8:f8:66:50:ba:4e:2f:cc: e2:cf:64:5e:1d:19:1a:de:8d:fc:5f:1c:49:5a:0b: dd:c4:28:e9:19:6d:d7:f3:6b:ff:01:1f:be:0d:1c: d0:1a:b5:65:48:fa:dd:5e:f9:9e:f0:e8:b0:57:0f: e0:79:b7:2b:1a:4c:1c:8e:05:b5:50:9d:2d:7d:ca: ad:a8:26:a8:61:a7:c0:01:07:ac:ed:83:fb:a8:c4: ba:4e:68:f2:89:79:05:a9:e5:17:48:c8:54:8c:b0: 6f:77:64:70:30:c0:66:3f:73:26:9e:18:97:47:43: 36:ea:7f:ad:82:29:a3:c0:4b:ca:41:8c:9c:56:44: 1a:9d:7e:65:cb:1f:0c:ed:0a:54:46:65:b0:0c:9a: fc:f5:2a:64:2e:f0:52:c0:60:22:83:c6:f2:e3:17: 7f:67:c6:d6:31:40:c2:d2:c0:4d:d9:f8:38:85:46: 50:6a:d8:e1:72:64:81:f1:9f:05:57:ca:2d:84:31: ee:81:b2:a7:4f:d1:f2:df:77:51:27:45:64:5c:93: b7:94:f8:b6:4b:a3:81:67:73:56:e6:b1:53:21:6d: b0:2a:20:81:0f:28:97:78:06:f5:9e:5a:30:c2:ff: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:61:A5:A6:03:B7:C7:87:30:C3:A0:9B:BE:8A:0D:BA:35:71:4F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6A8F3AE2E59711EC9B14CC09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.252.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:db:f0:37:58:3f:4b:0f:46:a1:12:04:b7:dd:d8:65:3c:bf: 73:46:04:29:46:fe:29:97:ba:e6:87:ed:ac:11:c1:96:21:1f: 87:f2:3f:c2:12:12:86:8d:50:5e:cb:ac:00:9c:68:ed:59:a3: a3:8f:a1:2b:f6:dd:7d:e0:46:e1:15:b9:1e:34:48:c9:40:85: 01:57:9e:7c:cc:a0:d6:76:a6:3e:d5:3c:d4:8f:fa:69:e0:fe: 87:14:75:62:7c:8f:a2:b5:7d:00:4e:fc:22:1d:24:a8:4a:e4: 73:2c:53:a4:57:97:90:98:81:7e:53:3a:7d:48:06:e7:7e:99: c9:0d:c0:84:cd:81:db:b2:58:35:c8:ec:0c:c6:0c:8c:eb:1a: d6:ad:43:8d:d6:77:c0:12:58:0b:a8:b2:a8:53:7f:67:cc:72: 7a:75:80:de:c7:1c:be:f4:79:98:ad:db:76:ec:1f:e5:11:83: 05:36:80:d7:47:3d:80:31:c7:61:d6:6a:38:48:16:03:4d:75: fb:a0:e2:9b:58:56:80:6e:a0:31:1c:22:e1:f3:2b:e8:0f:9c: 76:b1:81:4f:72:0c:a0:3c:df:92:57:f3:4b:89:5c:e0:b7:22: 91:7d:55:e4:dc:4a:d2:4a:59:5c:02:c0:92:0d:cf:8e:1e:ca: 8f:62:de:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICcecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDMzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2I1OS05ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6s8xAkiQUeDKx4Yw0iWks73vvjHHqPhmULpOL8ziz2ReHRka3o38XxxJWgvd xCjpGW3X82v/AR++DRzQGrVlSPrdXvme8OiwVw/gebcrGkwcjgW1UJ0tfcqtqCao YafAAQes7YP7qMS6TmjyiXkFqeUXSMhUjLBvd2RwMMBmP3MmnhiXR0M26n+tgimj wEvKQYycVkQanX5lyx8M7QpURmWwDJr89SpkLvBSwGAig8by4xd/Z8bWMUDC0sBN 2fg4hUZQatjhcmSB8Z8FV8othDHugbKnT9Hy33dRJ0VkXJO3lPi2S6OBZ3NW5rFT IW2wKiCBDyiXeAb1nlowwv+iiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPn/YaWm A7fHhzDDoJu+ig26NXFPMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkE4RjNBRTJF NTk3MTFFQzlCMTRDQzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAbAPwwDQYJKoZIhvcNAQELBQADggEBAG7b8DdYP0sPRqES BLfd2GU8v3NGBClG/imXuuaH7awRwZYhH4fyP8ISEoaNUF7LrACcaO1Zo6OPoSv2 3X3gRuEVuR40SMlAhQFXnnzMoNZ2pj7VPNSP+mng/ocUdWJ8j6K1fQBO/CIdJKhK 5HMsU6RXl5CYgX5TOn1IBud+mckNwITNgduyWDXI7AzGDIzrGtatQ43Wd8ASWAuo sqhTf2fMcnp1gN7HHL70eZit23bsH+URgwU2gNdHPYAxx2HWajhIFgNNdfug4ptY VoBuoDEcIuHzK+gPnHaxgU9yDKA835JX80uJXOC3IpF9VeTcStJKWVwCwJINz44e yo9i3kA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org