$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A266DA0851E611EE9538A979C4F9AE02.roa File: A266DA0851E611EE9538A979C4F9AE02.roa (raw, json) Hash identifier: Y0oIQAHklp5zkUcQhPTwwEL1YayrDyFvVsc4Kp2f7/M= Subject key identifier: 40:51:38:83:F8:C3:95:F0:C2:A6:16:28:C6:0B:C0:CD:5C:28:02:B4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7A2B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A266DA0851E611EE9538A979C4F9AE02.roa Signing time: Wed 13 Sep 2023 03:35:51 +0000 ROA not before: Wed 13 Sep 2023 03:35:51 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151130 IP address blocks: 2001:df2:d7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31275 (0x7a2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 13 03:35:51 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65012e16-10d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:a4:93:6b:bb:e7:f7:ed:eb:7c:a5:04:5a: 99:b5:53:a4:87:de:09:e5:14:a6:a5:45:fb:96:99: 9c:6b:6a:b6:c0:c3:a9:dd:24:e4:0b:ca:c9:df:98: 47:86:0f:01:13:73:ec:8f:84:2c:eb:8f:f0:d2:40: d6:1d:72:1d:e1:e3:a8:2c:e4:18:82:7c:9e:1c:85: 9b:4c:e4:66:e3:0c:41:3a:52:25:3d:e1:63:7e:f3: d7:44:0e:25:e6:f7:4f:4b:6c:0e:38:4e:a3:08:7a: 78:3c:33:44:38:be:da:a0:fa:08:f7:9d:26:67:02: 6a:4f:1c:d5:af:6b:38:9d:6d:2a:4d:da:bc:a8:01: c5:c0:d1:34:78:28:27:9c:b2:70:0a:21:3b:17:1e: ab:42:ee:1c:52:a5:a2:0e:e6:d2:3c:81:2d:55:c5: ca:09:a5:98:1f:df:e8:48:b2:68:aa:d6:ef:6c:59: ae:59:ae:1a:58:a9:52:7f:0a:5a:18:37:b8:8f:b6: 54:36:5a:48:56:0f:22:77:76:23:bc:f7:98:85:f7: d1:f1:76:7b:65:39:d4:fa:c5:bf:bd:71:37:33:05: d5:eb:1a:95:75:24:a1:69:d2:d1:4b:87:98:66:dc: 32:50:b2:3d:1c:c5:1f:e5:47:49:8d:00:b8:7a:de: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:38:83:F8:C3:95:F0:C2:A6:16:28:C6:0B:C0:CD:5C:28:02:B4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A266DA0851E611EE9538A979C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df2:d7c0::/48 Signature Algorithm: sha256WithRSAEncryption 39:f5:a4:61:4e:d0:3b:75:a6:95:e3:af:f3:29:94:92:dc:d2: 44:92:95:79:c5:68:6d:10:84:36:e1:0b:c3:85:79:1b:d4:0f: 8e:df:ed:7b:69:76:cb:08:96:f7:86:97:d0:67:56:53:13:d7: d1:b1:af:84:fd:c0:f4:50:e4:4c:3e:da:10:9f:91:bd:7c:39: b2:02:5b:99:62:ba:41:00:33:45:9e:08:63:5f:bf:50:2f:31: 2d:d8:c8:3d:e1:3a:0e:da:2f:ed:d2:ae:64:fa:6a:7d:22:66: c6:28:84:bf:db:7b:2b:7a:fe:a3:57:87:be:6d:3d:f8:dd:d6: 56:92:26:79:c7:b9:5b:dd:2c:96:1c:25:57:b3:e1:3b:92:c1: 6f:e6:e5:62:27:4f:0b:a5:f1:7d:18:09:5d:4d:31:82:01:c9: 26:f2:23:5a:48:fe:3e:b6:5e:de:00:f4:48:ad:fd:e5:5a:90: 16:b1:52:5e:f5:b5:ff:94:1d:1f:db:38:bb:bd:38:22:75:4f: c2:5e:63:11:80:cd:dc:41:ae:9c:02:18:84:ef:12:5c:7b:86: 2c:69:84:f9:34:64:a9:1f:0f:9f:12:ae:8f:1d:4f:c8:32:33: 96:da:02:93:31:4f:ca:e5:e0:41:db:55:00:70:e5:e4:70:d9: 1a:80:fd:b6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICeiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwOTEzMDMzNTUxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAxMmUxNi0xMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylqkk2u75/ft63ylBFqZtVOkh94J5RSmpUX7lpmca2q2wMOp3STkC8rJ35hH hg8BE3Psj4Qs64/w0kDWHXId4eOoLOQYgnyeHIWbTORm4wxBOlIlPeFjfvPXRA4l 5vdPS2wOOE6jCHp4PDNEOL7aoPoI950mZwJqTxzVr2s4nW0qTdq8qAHFwNE0eCgn nLJwCiE7Fx6rQu4cUqWiDubSPIEtVcXKCaWYH9/oSLJoqtbvbFmuWa4aWKlSfwpa GDe4j7ZUNlpIVg8id3YjvPeYhffR8XZ7ZTnU+sW/vXE3MwXV6xqVdSShadLRS4eY ZtwyULI9HMUf5UdJjQC4et5JRQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEBROIP4 w5XwwqYWKMYLwM1cKAK0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTI2NkRBMDg1 MUU2MTFFRTk1MzhBOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3y18AwDQYJKoZIhvcNAQELBQADggEBADn1pGFO0Dt1 ppXjr/MplJLc0kSSlXnFaG0QhDbhC8OFeRvUD47f7XtpdssIlveGl9BnVlMT19Gx r4T9wPRQ5Ew+2hCfkb18ObICW5liukEAM0WeCGNfv1AvMS3YyD3hOg7aL+3SrmT6 an0iZsYohL/beyt6/qNXh75tPfjd1laSJnnHuVvdLJYcJVez4TuSwW/m5WInTwul 8X0YCV1NMYIBySbyI1pI/j62Xt4A9Eit/eVakBaxUl71tf+UHR/bOLu9OCJ1T8Je YxGAzdxBrpwCGITvElx7hixphPk0ZKkfD58Sro8dT8gyM5baApMxT8rl4EHbVQBw 5eRw2RqA/bY= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:40 2024 by rpki-client on console-ams.rpki-client.org