$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/734AD98CCFB311EDAC3AE50AC4F9AE02.roa File: 734AD98CCFB311EDAC3AE50AC4F9AE02.roa (raw, json) Hash identifier: C/wzHqqdEF2WUWzAZe7Ye+ooX3iGHQ7CePbyfPzxXM8= Subject key identifier: D6:0A:B4:96:FB:7E:E3:C8:02:8C:A8:F3:96:41:65:00:6A:E5:38:5D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7196 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/734AD98CCFB311EDAC3AE50AC4F9AE02.roa Signing time: Wed 10 May 2023 16:48:58 +0000 ROA not before: Wed 10 May 2023 16:48:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45820 IP address blocks: 2001:df1:64c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29078 (0x7196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:48:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bcafa-610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:e8:9b:9d:ae:09:0c:3d:c9:73:4e:e9:35: c1:ab:a6:c9:2e:40:88:0c:6c:a8:7e:d4:13:02:fe: 7f:9c:b0:c2:fa:41:21:99:cd:f6:98:0a:c6:47:b7: d3:3b:d9:50:9c:5c:fb:70:8e:38:c5:06:7e:bf:e4: a9:89:91:8c:a6:79:31:23:5d:7c:5f:c2:f2:2e:fc: 11:55:7d:b4:40:e5:6a:c2:dc:e9:c9:6c:a3:9a:01: e4:c6:63:64:e9:a9:f3:70:25:f3:2e:14:71:cc:6e: 7d:eb:1e:12:82:39:82:17:72:f8:bc:85:4a:ab:6a: 82:eb:95:e4:9b:3f:d5:7b:18:65:32:7c:1c:af:f1: 86:6e:ad:39:1a:83:93:cc:95:73:0b:fb:be:8c:d4: 2b:77:06:71:4b:06:bb:90:f9:5d:ed:f3:48:30:be: 0f:88:76:24:8c:75:5f:37:83:15:b8:e3:cf:78:2c: f0:80:97:23:3c:43:d0:fa:e9:6a:fd:49:48:55:3b: fd:57:b5:c1:d5:23:c0:e9:21:5d:48:8f:21:4d:45: 12:4a:fa:9d:9c:83:68:d5:de:28:5a:1e:bb:4d:5f: 87:a1:89:6b:8c:7b:1f:76:e9:f0:9f:63:ef:e5:39: 12:7a:54:f9:d8:27:53:c8:c9:b2:88:0d:d4:f5:ef: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0A:B4:96:FB:7E:E3:C8:02:8C:A8:F3:96:41:65:00:6A:E5:38:5D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/734AD98CCFB311EDAC3AE50AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 16:db:4e:4f:d0:f3:fa:b2:67:88:c2:ff:f3:ef:41:83:0d:cd: a7:0d:1a:34:7c:b0:a0:bf:6a:77:75:f5:c0:9e:8c:26:32:85: 53:97:b0:bb:46:2e:65:30:ae:ce:ef:e6:0d:c3:ec:f5:17:b2: 13:ea:64:98:72:8d:d2:fc:d4:c0:6d:86:3d:fc:9e:25:4f:d7: be:58:b7:85:b8:68:65:5d:eb:60:e9:91:e2:1b:bf:59:39:51: 5d:0d:b7:77:28:7d:13:66:4e:d0:5b:7a:4f:ef:59:d0:60:b9: cc:4d:e1:11:3b:ea:6c:19:79:bf:07:9e:d9:c4:e9:61:72:2f: 28:a3:9e:c7:6e:5f:2e:e7:1e:02:ca:71:f3:dc:5b:67:2f:0c: 0e:35:42:f6:8a:1b:d1:32:5f:de:89:ff:b2:5d:6c:a9:ae:62: ef:10:33:42:ff:4d:6e:44:2d:33:71:08:eb:12:f4:a0:82:d3: 9c:76:a0:30:b9:78:dd:ab:7f:bc:cc:b5:8e:85:59:3d:06:0d: 7d:0d:56:ed:ed:c2:ee:39:0e:bd:0d:74:24:3d:69:cc:99:a7: f4:fd:fd:fa:20:74:6a:3c:af:76:c0:c2:33:db:10:3d:64:fa: 4c:1b:0a:38:94:93:e2:ee:a7:a8:13:1d:5e:a2:3b:73:8e:7a: c5:a2:f2:9f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICcZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTY0ODU4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViY2FmYS02MTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sLom52uCQw9yXNO6TXBq6bJLkCIDGyoftQTAv5/nLDC+kEhmc32mArGR7fT O9lQnFz7cI44xQZ+v+SpiZGMpnkxI118X8LyLvwRVX20QOVqwtzpyWyjmgHkxmNk 6anzcCXzLhRxzG596x4SgjmCF3L4vIVKq2qC65Xkmz/VexhlMnwcr/GGbq05GoOT zJVzC/u+jNQrdwZxSwa7kPld7fNIML4PiHYkjHVfN4MVuOPPeCzwgJcjPEPQ+ulq /UlIVTv9V7XB1SPA6SFdSI8hTUUSSvqdnINo1d4oWh67TV+HoYlrjHsfdunwn2Pv 5TkSelT52CdTyMmyiA3U9e/eYwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNYKtJb7 fuPIAoyo85ZBZQBq5ThdMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzM0QUQ5OEND RkIzMTFFREFDM0FFNTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3xZMAwDQYJKoZIhvcNAQELBQADggEBABbbTk/Q8/qy Z4jC//PvQYMNzacNGjR8sKC/and19cCejCYyhVOXsLtGLmUwrs7v5g3D7PUXshPq ZJhyjdL81MBthj38niVP175Yt4W4aGVd62DpkeIbv1k5UV0Nt3cofRNmTtBbek/v WdBgucxN4RE76mwZeb8HntnE6WFyLyijnsduXy7nHgLKcfPcW2cvDA41QvaKG9Ey X96J/7JdbKmuYu8QM0L/TW5ELTNxCOsS9KCC05x2oDC5eN2rf7zMtY6FWT0GDX0N Vu3twu45Dr0NdCQ9acyZp/T9/fogdGo8r3bAwjPbED1k+kwbCjiUk+Lup6gTHV6i O3OOesWi8p8= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org