$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa File: BFDF6EB87F8811EEAB83327CC4F9AE02.roa (raw, json) Hash identifier: o89LtoozxEaEd+BvB+BCcf7MOQqwOhO4/EmCEWaB8Jc= Subject key identifier: C1:C4:65:EC:37:52:E3:3F:96:CE:77:ED:4F:D9:F4:74:31:A4:8B:1A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7D67 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa Signing time: Fri 10 Nov 2023 05:19:41 +0000 ROA not before: Fri 10 Nov 2023 05:19:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 151687 IP address blocks: 2001:df3:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32103 (0x7d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 10 05:19:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=654dbd6c-70be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:8d:94:e6:a9:4d:c9:e3:e4:92:f6:62:05: ff:07:22:08:e1:54:71:68:0c:77:85:ce:08:ca:a0: 73:fe:01:1f:6c:d2:43:94:24:fe:d8:fa:6d:b2:ca: c9:94:62:9f:3c:9a:7f:41:b4:75:92:35:f9:7a:75: 60:70:87:3f:b3:dc:35:ba:2e:f3:b1:75:52:1e:dc: 7d:b5:44:9a:4b:8b:91:4f:83:b8:cd:f9:90:c0:a7: d1:a7:2f:15:e1:d6:cb:5a:ff:4c:5e:b4:da:c9:7e: 76:e7:34:be:fe:b8:71:dd:28:88:36:eb:6b:dc:67: ab:f3:0d:3d:ff:42:d6:4c:65:b8:86:6e:ec:54:23: ee:77:d0:14:bf:03:25:0d:fd:6e:6f:61:0e:14:a0: 50:74:56:a0:27:bc:60:61:75:d1:67:5c:77:90:86: 98:de:87:8a:57:93:30:cc:de:69:d4:57:8c:7e:21: b0:bf:71:dc:49:ed:04:d1:c5:95:66:a9:6b:56:af: ed:87:95:91:12:80:c2:c0:0c:96:15:52:1a:e1:b1: 95:2c:f2:cc:a2:77:a5:6d:ca:37:3d:c1:d0:f8:ba: 4a:5b:21:4a:e9:37:83:5d:44:5c:ed:46:3e:61:6f: e0:4e:d9:d3:91:94:8b:bd:cf:f5:bf:31:f9:94:c2: a5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:65:EC:37:52:E3:3F:96:CE:77:ED:4F:D9:F4:74:31:A4:8B:1A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BFDF6EB87F8811EEAB83327CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:e6:4a:6b:0e:aa:78:db:8a:12:bd:18:6b:e3:2d:bd:f3:36: 89:ee:7d:0b:31:ef:fc:72:20:93:0a:6c:c3:6e:ae:05:69:33: ec:04:49:6d:68:88:bf:91:a1:6c:3f:6f:f6:90:ba:ad:72:be: 46:74:85:8d:ac:96:b4:38:f4:25:6b:40:87:49:93:2f:83:fa: 3c:0d:40:74:a7:b0:37:72:d0:65:84:be:00:12:65:d7:b2:8f: 7b:dc:28:a3:11:ff:3e:55:3d:34:85:09:06:2f:ea:7c:4b:dd: c0:be:51:d0:e9:b4:1f:74:06:98:41:14:44:f5:2d:42:dd:d3: c5:64:80:02:25:85:e6:88:b1:1a:c1:1f:54:04:4c:81:eb:f7: 5a:b7:56:e1:7a:93:18:72:34:49:6e:bf:be:c3:a3:e3:a8:61: e3:0a:18:87:93:99:f4:51:d5:e4:3b:42:ff:85:69:7f:af:58: 13:c8:d7:2c:4c:4d:da:e7:c1:69:2f:4f:b0:36:4d:04:e9:be: a2:bf:a5:6d:36:c5:42:ca:30:f5:46:70:e2:29:3b:4e:05:8e: c2:f5:69:05:6e:cf:91:ae:f5:d6:b1:8c:bf:79:91:5b:5c:cf: b4:b7:bb:53:88:43:63:02:04:0e:8e:5d:1e:60:34:bd:19:59: 5c:82:af:d6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICfWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMxMTEwMDUxOTQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRkYmQ2Yy03MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn6NlOapTcnj5JL2YgX/ByII4VRxaAx3hc4IyqBz/gEfbNJDlCT+2PptssrJ lGKfPJp/QbR1kjX5enVgcIc/s9w1ui7zsXVSHtx9tUSaS4uRT4O4zfmQwKfRpy8V 4dbLWv9MXrTayX525zS+/rhx3SiINutr3Ger8w09/0LWTGW4hm7sVCPud9AUvwMl Df1ub2EOFKBQdFagJ7xgYXXRZ1x3kIaY3oeKV5MwzN5p1FeMfiGwv3HcSe0E0cWV ZqlrVq/th5WREoDCwAyWFVIa4bGVLPLMonelbco3PcHQ+LpKWyFK6TeDXURc7UY+ YW/gTtnTkZSLvc/1vzH5lMKljwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMHEZew3 UuM/ls537U/Z9HQxpIsaMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkZERjZFQjg3 Rjg4MTFFRUFCODMzMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zE8AwDQYJKoZIhvcNAQELBQADggEBAAvmSmsOqnjb ihK9GGvjLb3zNonufQsx7/xyIJMKbMNurgVpM+wESW1oiL+RoWw/b/aQuq1yvkZ0 hY2slrQ49CVrQIdJky+D+jwNQHSnsDdy0GWEvgASZdeyj3vcKKMR/z5VPTSFCQYv 6nxL3cC+UdDptB90BphBFET1LULd08VkgAIlheaIsRrBH1QETIHr91q3VuF6kxhy NEluv77Do+OoYeMKGIeTmfRR1eQ7Qv+FaX+vWBPI1yxMTdrnwWkvT7A2TQTpvqK/ pW02xULKMPVGcOIpO04FjsL1aQVuz5Gu9daxjL95kVtcz7S3u1OIQ2MCBA6OXR5g NL0ZWVyCr9Y= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org