$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa File: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (raw, json) Hash identifier: yDufJXufAMETisXbFvpnQ3a1k2Wn60TOyOnkemkwgEg= Subject key identifier: C8:4E:F0:BE:59:00:43:26:B7:1D:DE:A4:28:44:C9:75:5B:B9:B1:A4 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0A0C Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa Signing time: Tue 04 Jul 2023 19:46:29 +0000 ROA not before: Tue 04 Jul 2023 19:46:29 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 55552 IP address blocks: 202.52.42.0/23 maxlen: 23 2001:df0:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jul 4 19:46:29 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64a47715-a95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:4a:ff:45:aa:ff:cb:33:51:a3:f8:72:7e: bb:13:0e:52:88:ae:3e:73:ab:f6:83:f1:ef:6a:50: be:c1:10:b3:8b:bb:66:d5:99:11:79:0a:f2:c8:28: e9:77:53:b5:e2:33:bb:d4:3a:99:e6:6a:8a:c6:60: 9c:5c:39:1b:46:d8:4c:90:bb:84:4a:89:ae:bb:25: 29:72:40:25:70:13:3e:09:78:60:44:4b:61:ff:03: 7b:c2:22:1d:5b:a9:63:c0:17:9b:4f:f0:c3:ce:7f: f7:05:2e:f8:dc:42:db:83:f0:1e:0a:32:51:44:69: 1a:82:cf:c5:b3:7e:b3:7f:11:49:ce:a6:31:e4:14: 5c:6b:80:c3:d7:a0:4d:6a:c9:e2:a3:90:d3:96:51: 7f:d7:27:ff:b2:b4:45:60:e5:59:48:d4:57:84:b2: 53:9a:26:01:33:e3:fd:fc:c6:e2:ba:45:be:aa:df: 5f:7e:04:82:1e:9f:59:dd:b4:f4:8e:bf:2c:2b:8c: 55:c7:d1:b3:f5:01:cf:09:c3:7c:75:2c:63:6b:5b: 5c:96:c9:d3:fd:bd:72:2a:43:93:e2:0a:63:ee:81: 2d:6a:87:7b:9e:c9:bd:9c:45:c8:34:86:3d:85:5b: fb:56:01:5a:12:72:73:d8:57:e6:75:c4:37:1e:e0: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4E:F0:BE:59:00:43:26:B7:1D:DE:A4:28:44:C9:75:5B:B9:B1:A4 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.52.42.0/23 IPv6: 2001:df0:a5::/48 Signature Algorithm: sha256WithRSAEncryption 80:b1:23:c8:1e:23:10:60:a7:e1:af:4e:b9:2c:b6:e3:ed:69: af:77:e6:8c:97:62:49:9b:4a:e6:71:b8:9b:f6:b3:71:a5:09: d7:55:39:a2:14:09:ce:e2:ed:72:0b:87:5f:1c:09:ec:4b:1f: 79:a7:c8:19:a6:4b:de:d4:5a:0f:9b:12:34:c6:61:2d:a9:21: bb:ed:cf:00:67:9a:e4:03:08:99:46:48:9b:10:46:78:84:bd: fa:4c:d6:08:24:e8:98:ec:9d:c8:a0:2d:91:b8:1c:f0:5a:c0: a5:43:37:0b:42:24:94:9c:8d:1b:0a:e9:d9:bc:50:09:aa:49: 1c:a6:e4:5d:69:36:e3:51:8d:65:04:df:84:15:e7:9f:2a:a9: 07:b3:b9:19:48:ae:48:7f:58:b7:bc:64:4b:41:16:2f:75:bc: 0e:5a:c9:64:5f:40:d7:5d:51:80:15:61:23:31:17:a9:0e:a1: f1:77:19:c1:1c:a5:4f:d0:f1:ed:5f:67:04:9b:0c:45:10:7d: 4d:e5:e5:81:e2:33:05:92:aa:8a:2f:1e:74:bf:9e:ee:59:d9: c6:a7:39:89:38:df:d8:9f:b3:b1:c8:6d:39:ff:f5:1d:52:30: c6:8d:1b:5e:75:33:90:06:22:84:cd:a9:a2:5f:07:87:7c:b0: 64:3c:77:19 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjMwNzA0MTk0NjI5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE0NzcxNS1hOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uNK/0Wq/8szUaP4cn67Ew5SiK4+c6v2g/HvalC+wRCzi7tm1ZkReQryyCjp d1O14jO71DqZ5mqKxmCcXDkbRthMkLuESomuuyUpckAlcBM+CXhgREth/wN7wiId W6ljwBebT/DDzn/3BS743ELbg/AeCjJRRGkags/Fs36zfxFJzqYx5BRca4DD16BN asnio5DTllF/1yf/srRFYOVZSNRXhLJTmiYBM+P9/MbiukW+qt9ffgSCHp9Z3bT0 jr8sK4xVx9Gz9QHPCcN8dSxja1tclsnT/b1yKkOT4gpj7oEtaod7nsm9nEXINIY9 hVv7VgFaEnJz2FfmdcQ3HuCCOQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMhO8L5Z AEMmtx3epChEyXVbubGkMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCMjcvODJCRjJCRjQzMDU0MTFFQUFGQzkxMTZFQzRGOUFFMDIvMkIxRDNCQjIz MDU4MTFFQThENUI2NDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKNCowDwQCAAIwCQMHACABDfAApTANBgkqhkiG9w0BAQsF AAOCAQEAgLEjyB4jEGCn4a9OuSy24+1pr3fmjJdiSZtK5nG4m/azcaUJ11U5ohQJ zuLtcguHXxwJ7EsfeafIGaZL3tRaD5sSNMZhLakhu+3PAGea5AMImUZImxBGeIS9 +kzWCCTomOydyKAtkbgc8FrApUM3C0IklJyNGwrp2bxQCapJHKbkXWk241GNZQTf hBXnnyqpB7O5GUiuSH9Yt7xkS0EWL3W8DlrJZF9A111RgBVhIzEXqQ6h8XcZwRyl T9Dx7V9nBJsMRRB9TeXlgeIzBZKqii8edL+e7lnZxqc5iTjf2J+zschtOf/1HVIw xo0bXnUzkAYihM2pol8Hh3ywZDx3GQ== -----END CERTIFICATE-----Generated at Fri May 10 21:16:14 2024 by rpki-client on console-fra.rpki-client.org