$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7BCE2D4EB3D11EEA98A696DC4F9AE02.roa File: C7BCE2D4EB3D11EEA98A696DC4F9AE02.roa (raw, json) Hash identifier: 4U/TOWhv7eR31TeA8cPQdO9EMfVW4Y8GFtYAmHJCwAc= Subject key identifier: 64:AE:60:61:63:45:54:0B:9A:8E:8D:02:CB:21:97:97:AA:9C:41:4B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8541 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7BCE2D4EB3D11EEA98A696DC4F9AE02.roa Signing time: Tue 26 Mar 2024 06:55:07 +0000 ROA not before: Tue 26 Mar 2024 06:55:07 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 149551 IP address blocks: 2001:df1:3740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34113 (0x8541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 26 06:55:07 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6602714b-c1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:67:65:bf:6b:98:a8:18:89:c6:19:61:fe: ac:16:16:c3:69:b0:75:dc:ea:78:2b:76:b8:a6:4f: a0:aa:64:78:1e:b6:da:62:d7:b3:12:b2:cf:38:16: fb:1f:9a:2b:3a:37:51:4c:44:07:d8:dc:0e:0e:17: 05:f3:26:1b:b1:bb:2d:45:d0:60:84:1d:f3:6b:5a: 6f:6f:dc:f8:14:78:6a:1b:0f:d3:0c:3e:b3:93:ef: 2d:3b:ce:ee:a0:7e:85:44:81:c6:b0:5f:f8:05:4e: 83:0d:55:41:ed:4e:08:9c:13:be:5b:60:f4:98:ad: 30:13:e7:c6:85:e0:05:e7:fa:f4:be:78:57:b9:e6: 41:f6:aa:4d:6a:cf:52:77:c8:b2:3c:dc:a3:a9:0d: b7:1a:ba:dd:c2:69:52:4e:0b:f7:6a:54:bf:27:81: 89:1a:e1:90:0d:20:62:89:a5:4a:06:23:4d:52:2b: 3a:d8:18:d3:e9:19:98:60:99:54:fe:8d:ec:53:f5: b5:78:e6:15:84:05:3a:0d:49:9c:8a:2d:b9:28:8e: 83:89:37:b8:85:f5:73:8b:a8:e4:f5:4b:f5:6f:b6: 77:78:7f:42:ab:56:13:9a:5d:42:79:39:0a:3c:8f: 7a:92:f3:03:9c:c0:6e:6c:f3:f5:ef:97:4a:2e:db: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:60:61:63:45:54:0B:9A:8E:8D:02:CB:21:97:97:AA:9C:41:4B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7BCE2D4EB3D11EEA98A696DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:3740::/48 Signature Algorithm: sha256WithRSAEncryption 66:ae:79:77:36:25:f4:ca:31:2a:83:fe:97:b6:77:85:01:51: 8a:a5:19:8f:69:c0:e3:d7:a7:58:69:7d:38:58:d0:92:51:65: 0f:d9:7b:55:a7:bd:15:d8:48:39:17:6c:93:9a:34:ae:ab:a5: 1d:2c:0c:42:04:17:82:75:d3:37:49:77:3c:13:b2:9b:0d:a8: fd:cc:ef:ba:7f:8e:f9:2f:47:9a:d2:79:5f:72:55:ab:ab:41: ba:09:bd:55:73:10:74:22:e3:fd:0d:57:d4:6f:d0:4d:20:b7: f4:9a:eb:b0:e5:a7:02:68:49:6e:e7:72:78:dc:d7:da:3c:1d: 96:2b:3f:0c:d1:04:3b:51:5d:d2:6c:4d:45:61:f0:f3:4d:37: 72:1e:31:67:e5:45:3d:87:93:cf:57:16:b0:f5:cf:2e:84:c9: 97:ab:fe:60:2c:1a:95:62:5a:36:c3:8e:61:48:14:e0:37:64: f0:40:8d:76:9e:3b:98:7e:bc:c7:ab:a7:0f:94:87:3c:68:b3: 01:3c:43:ff:b8:df:e1:9c:cb:b7:02:ba:b0:d6:f8:e5:26:54: 14:94:86:68:b5:d5:15:14:c0:ea:f9:0e:29:4e:67:cd:0a:0b: 61:94:6c:2f:20:2b:eb:a5:ce:14:67:fb:3c:1a:4c:b2:1d:21: da:fb:07:85 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAIVBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMyNjA2NTUwN1oXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjYwMjcxNGItYzFlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRzZ2W/a5ioGInGGWH+rBYWw2mwddzqeCt2uKZPoKpkeB622mLXsxKyzzgW +x+aKzo3UUxEB9jcDg4XBfMmG7G7LUXQYIQd82tab2/c+BR4ahsP0ww+s5PvLTvO 7qB+hUSBxrBf+AVOgw1VQe1OCJwTvltg9JitMBPnxoXgBef69L54V7nmQfaqTWrP UnfIsjzco6kNtxq63cJpUk4L92pUvyeBiRrhkA0gYomlSgYjTVIrOtgY0+kZmGCZ VP6N7FP1tXjmFYQFOg1JnIotuSiOg4k3uIX1c4uo5PVL9W+2d3h/QqtWE5pdQnk5 CjyPepLzA5zAbmzz9e+XSi7b/9UCAwEAAaOCApgwggKUMB0GA1UdDgQWBBRkrmBh Y0VUC5qOjQLLIZeXqpxBSzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M3QkNFMkQ0 RUIzRDExRUVBOThBNjk2REM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN8TdAMA0GCSqGSIb3DQEBCwUAA4IBAQBmrnl3NiX0 yjEqg/6XtneFAVGKpRmPacDj16dYaX04WNCSUWUP2XtVp70V2Eg5F2yTmjSuq6Ud LAxCBBeCddM3SXc8E7KbDaj9zO+6f475L0ea0nlfclWrq0G6Cb1VcxB0IuP9DVfU b9BNILf0muuw5acCaElu53J43NfaPB2WKz8M0QQ7UV3SbE1FYfDzTTdyHjFn5UU9 h5PPVxaw9c8uhMmXq/5gLBqVYlo2w45hSBTgN2TwQI12njuYfrzHq6cPlIc8aLMB PEP/uN/hnMu3Arqw1vjlJlQUlIZotdUVFMDq+Q4pTmfNCgthlGwvICvrpc4UZ/s8 GkyyHSHa+weF -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org