$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa File: A9A8FE1A83BC11EEB6C07756C4F9AE02.roa (raw, json) Hash identifier: ZmlvuqiuQGpwnuAUeqJbTPK/3SghVoMsywCuvsX+JN8= Subject key identifier: 12:74:BC:2C:4A:27:AD:33:80:AE:F7:7A:84:D6:24:09:63:A3:3E:C7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 02 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa Signing time: Wed 15 Nov 2023 13:41:22 +0000 ROA not before: Wed 15 Nov 2023 13:41:22 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9743 IP address blocks: 202.47.187.0/24 maxlen: 24 2001:df3:25c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Nov 15 13:41:22 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6554ca82-d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:9f:4a:e0:b3:90:64:0d:97:e6:99:a7:96: e7:47:d4:fc:82:7a:d2:cf:d7:ab:ab:ca:02:fd:1c: 01:98:c7:e6:be:86:c2:13:46:9f:8f:85:0e:16:d5: 7e:7f:53:b2:2b:a3:d1:3d:4e:3a:14:19:ff:84:c1: 1e:cb:0a:97:db:3c:7b:0b:b3:7c:71:6e:0e:82:8f: 45:ca:70:38:91:4d:90:6d:6e:62:6e:53:09:82:7f: 1e:66:32:c3:17:5b:b2:75:eb:4d:75:54:a4:8f:cd: 35:a1:12:66:10:ef:6f:e8:82:68:df:f8:72:0c:3c: 47:ac:3f:be:0d:f0:70:1d:7f:b8:54:47:df:ad:b7: 1a:be:3e:fa:24:1f:64:37:ed:15:a3:47:54:60:29: b1:bf:ba:9e:02:b5:b4:42:74:75:2f:31:4e:d5:7d: 31:4e:0b:c2:09:6d:07:02:19:84:b3:b3:85:25:e3: 92:0e:bb:c2:d1:a5:72:84:31:fb:40:59:c1:3c:74: 44:54:8c:57:b1:2b:b9:68:0b:ec:d7:1a:f8:62:3d: 3f:13:84:60:03:73:56:13:26:09:5f:c6:27:82:82: ce:8e:31:f5:20:9e:d6:29:2f:b4:07:43:f1:09:77: 07:19:8c:96:70:85:87:1a:4d:7d:f4:c7:67:63:ae: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:74:BC:2C:4A:27:AD:33:80:AE:F7:7A:84:D6:24:09:63:A3:3E:C7 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/A9A8FE1A83BC11EEB6C07756C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.187.0/24 IPv6: 2001:df3:25c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:04:d4:13:36:48:20:0e:50:5d:f7:81:6f:c2:58:05:3a:64: 43:40:5b:5a:0e:73:b7:e1:90:01:69:d7:fb:19:37:1c:3c:e3: 01:32:70:f1:ca:07:d3:ad:94:80:3e:93:f7:17:b3:bb:39:7e: 69:29:52:30:c9:70:31:3d:9d:c4:69:36:e1:11:0b:2d:23:56: 2c:6d:0b:2f:19:53:e5:50:b1:f9:c3:ce:a9:ab:d1:ab:de:6e: 55:ca:ae:b4:72:03:f7:9b:ce:94:08:38:13:b6:47:80:6b:79: d0:a1:f9:78:06:87:6f:1c:d9:33:0b:1d:73:c4:51:96:fe:36: bd:b2:9e:f8:5c:86:5e:da:26:70:c5:88:a1:a8:44:5d:94:fb: 41:93:83:03:a4:1c:d9:22:48:2e:57:2d:09:c9:f6:d7:66:74: d1:e3:32:e2:d3:40:f6:38:78:2e:15:a2:04:e0:bc:1e:ca:23: d5:19:bd:3e:e4:81:96:39:e7:72:0b:47:75:28:6a:26:8d:ec: e9:46:bc:00:61:5c:15:37:53:d9:43:0c:7a:60:d6:b0:79:60: 56:28:17:08:59:7b:59:74:07:83:f8:9e:10:fc:af:ed:ac:05: e2:31:ff:30:c7:bd:56:48:c5:90:46:09:58:d2:02:8d:49:88: e5:4e:8e:79 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjM4NzExMC8GA1UEBRMoMUQwMEMyODNDQUExQUIzQ0M0MzcxQTJBMzg0RDYyQjFD RDQ0RkJBNzAeFw0yMzExMTUxMzQxMjJaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NTRjYTgyLWQwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhQZ9K4LOQZA2X5pmnludH1PyCetLP16urygL9HAGYx+a+hsITRp+PhQ4W1X5/ U7Iro9E9TjoUGf+EwR7LCpfbPHsLs3xxbg6Cj0XKcDiRTZBtbmJuUwmCfx5mMsMX W7J16011VKSPzTWhEmYQ72/ogmjf+HIMPEesP74N8HAdf7hUR9+ttxq+PvokH2Q3 7RWjR1RgKbG/up4CtbRCdHUvMU7VfTFOC8IJbQcCGYSzs4Ul45IOu8LRpXKEMftA WcE8dERUjFexK7loC+zXGvhiPT8ThGADc1YTJglfxieCgs6OMfUgntYpL7QHQ/EJ dwcZjJZwhYcaTX30x2djrgBzAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUEnS8LEon rTOArvd6hNYkCWOjPscwHwYDVR0jBBgwFoAUHQDCg8qhqzzENxoqOE1isc1E+6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMzg3LzVGM0M4NDk2ODNB MzExRUVBMEI0MjgxQ0M0RjlBRTAyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFFEQ2c4cWhxenpFTnhvcU9FMWlzYzFFLTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9BOUE4RkUxQTgz QkMxMUVFQjZDMDc3NTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMovuzAPBAIAAjAJAwcAIAEN8yXAMA0GCSqGSIb3DQEBCwUA A4IBAQAvBNQTNkggDlBd94FvwlgFOmRDQFtaDnO34ZABadf7GTccPOMBMnDxygfT rZSAPpP3F7O7OX5pKVIwyXAxPZ3EaTbhEQstI1YsbQsvGVPlULH5w86pq9Gr3m5V yq60cgP3m86UCDgTtkeAa3nQofl4BodvHNkzCx1zxFGW/ja9sp74XIZe2iZwxYih qERdlPtBk4MDpBzZIkguVy0JyfbXZnTR4zLi00D2OHguFaIE4LweyiPVGb0+5IGW OedyC0d1KGomjezpRrwAYVwVN1PZQwx6YNaweWBWKBcIWXtZdAeD+J4Q/K/trAXi Mf8wx71WSMWQRglY0gKNSYjlTo55 -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:26 2024 by rpki-client on console-fra.rpki-client.org