$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa File: A11B2532B8E911ED818D696CC4F9AE02.roa (raw, json) Hash identifier: 34cI/+m1ioLVZPWiRcHuCB7eXOnoaUsbNhbYvkVZ92k= Subject key identifier: 21:F6:CE:53:70:2D:8A:86:60:5A:2D:1C:0F:88:89:C4:E1:2A:7C:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F70 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa Signing time: Wed 10 May 2023 16:38:49 +0000 ROA not before: Wed 10 May 2023 16:38:49 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142495 IP address blocks: 2001:df6:ef80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28528 (0x6f70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:49 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc899-6393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:7d:72:ac:9b:ed:b8:81:eb:69:ef:00:a9: 44:4f:9c:92:39:b7:14:d9:81:1b:78:af:75:ad:61: 3e:cf:79:67:33:d1:b7:fe:83:56:37:f3:30:a0:c0: 8a:ba:4f:82:c5:1a:ce:20:cd:d9:54:28:87:b7:63: a2:fa:28:de:af:09:3f:10:15:bf:ea:9e:fb:48:27: 5a:67:18:59:19:30:e8:85:62:22:b2:17:b0:5b:52: 48:70:a8:74:a8:51:a3:b1:3b:b5:dc:b8:fa:a6:9e: 88:70:b3:e3:a2:82:d8:66:84:f3:77:2f:86:73:66: 5c:e4:41:28:34:c7:a9:ab:16:15:cf:b7:c2:d0:f1: f9:df:a7:b5:ca:16:1a:ef:89:22:f2:d2:f3:71:c6: f4:2b:1b:7f:ee:ed:0b:85:31:90:81:f4:70:9c:d5: df:2d:c8:89:5c:93:a3:6b:4f:b9:89:18:66:8e:a7: 45:08:63:a6:3d:58:16:b0:18:79:24:bd:ce:94:55: 9d:e8:02:75:07:0b:cc:a7:ce:66:9b:0c:35:01:16: ce:81:9b:62:25:d9:27:72:fc:1e:08:5a:49:0c:1d: c7:e3:55:18:c4:4a:76:d0:34:50:d9:1f:90:e9:d6: c0:8d:b1:69:1f:e2:b0:44:97:ca:52:ce:2d:41:99: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F6:CE:53:70:2D:8A:86:60:5A:2D:1C:0F:88:89:C4:E1:2A:7C:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A11B2532B8E911ED818D696CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:ef80::/48 Signature Algorithm: sha256WithRSAEncryption ba:7c:1c:f4:f3:2c:97:27:11:9d:59:96:a4:55:f6:59:3f:aa: ff:fd:c6:57:00:29:50:77:b2:80:55:ce:e7:98:f0:c5:c0:73: 50:dc:c1:83:3f:c3:1b:07:a1:23:27:cc:26:36:92:84:b5:95: f5:1c:fa:61:f1:58:34:20:c0:39:b2:d7:f0:7c:53:8f:01:62: 7a:0b:c9:4d:e3:66:8e:dc:d2:71:2f:47:5e:29:0c:87:99:c3: 58:07:e8:9b:40:21:61:0c:c9:51:91:fb:79:29:3f:f4:9d:cf: a8:bf:e1:64:a6:6e:a5:c8:84:bb:b9:36:49:d9:7e:ba:1a:28: 15:15:4e:8b:2c:9a:ab:a1:ed:10:57:dd:19:d1:f3:a1:c0:eb: 76:93:8b:ea:41:b3:b3:09:1a:62:c1:46:5e:c0:dd:58:0a:bc: b8:00:39:64:ba:84:61:b6:8c:26:a7:63:28:49:24:35:66:da: b5:ec:af:29:a9:ee:14:3f:9c:6c:5f:ee:ca:74:18:70:5e:2d: f4:e4:23:3f:0c:36:05:c1:b9:e9:78:46:c8:c9:b8:d2:91:3e: 83:fd:09:a7:6c:b7:d8:d4:93:e3:ce:a9:e4:f7:2d:45:86:b5: 3d:ef:e6:7d:d1:0f:53:a7:39:5b:43:55:d2:77:8f:79:e2:04: 7a:31:5a:a1 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICb3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg5OS02MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsl9cqyb7biB62nvAKlET5ySObcU2YEbeK91rWE+z3lnM9G3/oNWN/MwoMCK uk+CxRrOIM3ZVCiHt2Oi+ijerwk/EBW/6p77SCdaZxhZGTDohWIishewW1JIcKh0 qFGjsTu13Lj6pp6IcLPjooLYZoTzdy+Gc2Zc5EEoNMepqxYVz7fC0PH536e1yhYa 74ki8tLzccb0Kxt/7u0LhTGQgfRwnNXfLciJXJOja0+5iRhmjqdFCGOmPVgWsBh5 JL3OlFWd6AJ1BwvMp85mmww1ARbOgZtiJdkncvweCFpJDB3H41UYxEp20DRQ2R+Q 6dbAjbFpH+KwRJfKUs4tQZkNYwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCH2zlNw LYqGYFotHA+IicThKnxMMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTExQjI1MzJC OEU5MTFFRDgxOEQ2OTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3274AwDQYJKoZIhvcNAQELBQADggEBALp8HPTzLJcn EZ1ZlqRV9lk/qv/9xlcAKVB3soBVzueY8MXAc1DcwYM/wxsHoSMnzCY2koS1lfUc +mHxWDQgwDmy1/B8U48BYnoLyU3jZo7c0nEvR14pDIeZw1gH6JtAIWEMyVGR+3kp P/Sdz6i/4WSmbqXIhLu5NknZfroaKBUVTossmquh7RBX3RnR86HA63aTi+pBs7MJ GmLBRl7A3VgKvLgAOWS6hGG2jCanYyhJJDVm2rXsrymp7hQ/nGxf7sp0GHBeLfTk Iz8MNgXBuel4RsjJuNKRPoP9Cadst9jUk+POqeT3LUWGtT3v5n3RD1OnOVtDVdJ3 j3niBHoxWqE= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org