$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/18C73826CF7311EB8AAA0C10C4F9AE02.roa File: 18C73826CF7311EB8AAA0C10C4F9AE02.roa (raw, json) Hash identifier: hCxzLAOSpGYfMv+mD1itDxZU7Dx/h9pFsymEXvn0nNw= Subject key identifier: F8:90:2A:D2:C2:25:9B:EE:A7:A4:75:8F:09:06:3B:D4:94:FA:41:52 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0743 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/18C73826CF7311EB8AAA0C10C4F9AE02.roa Signing time: Wed 31 May 2023 23:45:33 +0000 ROA not before: Wed 31 May 2023 23:45:33 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 60614 IP address blocks: 2404:c140:ecc6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 21:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: May 31 23:45:33 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6477dc1d-1e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:f9:f4:2d:88:ec:a0:f0:fa:99:c7:6b:1b: 13:3e:af:4b:a2:c6:30:16:93:a3:52:83:a2:d6:d0: 0f:67:c5:1b:1a:36:9c:a2:98:30:ff:19:34:98:5d: 84:2d:13:7a:f5:dd:ab:d6:e8:a3:2d:57:12:02:bb: 6a:31:f6:8a:8f:41:52:46:f7:c0:64:b0:17:d9:3b: 2b:ca:43:ed:60:da:70:65:b3:96:4b:7d:3d:fe:62: 9d:3e:f1:82:07:b3:c9:e4:3f:5c:57:62:c0:ac:fe: 23:b1:a0:71:d8:f5:73:84:ce:c7:b3:f2:bf:77:81: fe:bd:d5:1d:41:fc:87:c6:99:db:57:9d:d0:f7:e6: c3:5a:46:e0:93:8b:85:d8:29:18:25:11:ae:24:8a: e7:37:01:a2:63:b6:8c:69:8a:93:71:ac:81:c1:ca: 59:ea:6c:c0:7e:ec:08:28:6e:7e:50:3d:f6:a5:3a: e8:42:4c:68:82:0a:fe:c0:d8:78:25:fe:b6:03:73: db:56:08:08:b5:a6:67:17:eb:be:18:31:d7:61:0f: 19:41:25:0a:da:30:b1:b4:dd:3a:96:7e:94:97:14: ac:44:b6:5e:a5:4d:98:0e:6a:9c:5c:6f:d8:4f:ae: 25:13:6e:11:35:0c:42:e9:52:bf:81:ff:85:43:1d: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:90:2A:D2:C2:25:9B:EE:A7:A4:75:8F:09:06:3B:D4:94:FA:41:52 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/18C73826CF7311EB8AAA0C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:c140:ecc6::/48 Signature Algorithm: sha256WithRSAEncryption 72:33:e0:00:eb:91:6c:02:c6:ca:6f:1e:8a:01:8b:97:c7:91: 53:68:19:a9:19:0e:1b:07:88:90:7c:ec:93:2a:e0:87:23:6c: 97:85:cc:f6:34:6a:d9:23:5d:07:dd:f5:ab:87:1b:e2:1b:6a: 45:40:b1:14:dd:aa:98:dd:3d:f0:5c:06:f2:ba:b8:e0:f3:04: 46:72:72:c3:2a:f4:b5:88:81:e0:c9:70:ee:e0:62:99:a3:6d: c5:15:b5:0b:ed:fa:b9:a7:fa:9e:dd:4b:79:d3:bc:20:05:5f: 54:8d:c2:13:a8:60:6f:25:61:21:e8:73:80:73:61:2c:35:3c: fb:c1:3e:b5:1e:93:10:a8:eb:26:ef:a7:3b:f3:ac:db:df:f0: 1f:02:0a:4d:18:26:f8:ee:08:0e:fe:41:ee:6b:0d:74:76:31: 01:7d:a1:ee:91:65:90:5c:13:12:aa:27:af:f2:e1:7c:14:00: 75:01:99:bb:d5:07:92:de:4f:74:71:09:5a:be:10:c1:f0:ac: 24:26:38:10:7d:fd:29:db:62:ca:ef:fb:e1:e1:2b:6a:20:2d: d5:e1:5c:d6:1d:2c:bc:51:99:c3:d7:ae:4b:a4:e9:bb:90:a5: 0d:21:3c:d7:36:d7:6a:4b:0b:97:14:1e:d0:1b:be:49:94:42: 09:94:d8:ed -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjMwNTMxMjM0NTMzWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDc3ZGMxZC0xZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hH59C2I7KDw+pnHaxsTPq9LosYwFpOjUoOi1tAPZ8UbGjacopgw/xk0mF2E LRN69d2r1uijLVcSArtqMfaKj0FSRvfAZLAX2TsrykPtYNpwZbOWS309/mKdPvGC B7PJ5D9cV2LArP4jsaBx2PVzhM7Hs/K/d4H+vdUdQfyHxpnbV53Q9+bDWkbgk4uF 2CkYJRGuJIrnNwGiY7aMaYqTcayBwcpZ6mzAfuwIKG5+UD32pTroQkxoggr+wNh4 Jf62A3PbVggItaZnF+u+GDHXYQ8ZQSUK2jCxtN06ln6UlxSsRLZepU2YDmqcXG/Y T64lE24RNQxC6VK/gf+FQx3RxQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPiQKtLC JZvup6R1jwkGO9SU+kFSMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvMThDNzM4MjZD RjczMTFFQjhBQUEwQzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBMFA7MYwDQYJKoZIhvcNAQELBQADggEBAHIz4ADrkWwC xspvHooBi5fHkVNoGakZDhsHiJB87JMq4IcjbJeFzPY0atkjXQfd9auHG+IbakVA sRTdqpjdPfBcBvK6uODzBEZycsMq9LWIgeDJcO7gYpmjbcUVtQvt+rmn+p7dS3nT vCAFX1SNwhOoYG8lYSHoc4BzYSw1PPvBPrUekxCo6ybvpzvzrNvf8B8CCk0YJvju CA7+Qe5rDXR2MQF9oe6RZZBcExKqJ6/y4XwUAHUBmbvVB5LeT3RxCVq+EMHwrCQm OBB9/SnbYsrv++HhK2ogLdXhXNYdLLxRmcPXrkuk6buQpQ0hPNc212pLC5cUHtAb vkmUQgmU2O0= -----END CERTIFICATE-----Generated at Wed Apr 24 22:30:05 2024 by rpki-client on console-fra.rpki-client.org