$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa File: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (raw, json) Hash identifier: IjxHoMvQokP79pXGuaoRygmBq1zsF0YktpQuqQZ+7HI= Subject key identifier: 91:08:00:E6:47:4F:60:4A:F5:8F:8E:6B:A2:0E:1D:D3:E6:67:59:2C Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2621 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:12:45 +0000 ROA not before: Sun 06 Aug 2023 16:12:45 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 137219 IP address blocks: 2402:9e80:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9761 (0x2621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:12:45 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc67d-3e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:6b:ce:80:d4:2e:8d:89:a5:62:eb:d7:10: a1:93:91:e7:72:f5:66:f5:b3:e5:7d:37:8e:ba:d7: c2:55:23:64:83:3a:b7:c8:9f:45:f8:3b:65:cf:d5: 01:6f:ba:8b:29:59:5d:fa:8a:fa:9d:8c:75:cf:02: 3e:f7:8d:eb:a8:1d:ac:72:46:4d:4b:19:bf:4e:f7: 71:6e:a2:b0:cb:ae:ee:30:97:d8:5e:52:49:de:ba: 70:b0:95:42:da:7c:28:d5:d5:2a:dd:f2:d3:a0:e7: 30:f0:23:5a:37:f2:bd:e0:99:cd:a8:ea:32:e4:5d: 40:64:e8:5c:24:dd:66:61:d4:9b:58:80:fc:12:4c: 1f:d8:68:54:dd:d1:ad:1a:55:89:8c:aa:11:63:fe: a4:6f:63:d2:b8:02:d5:32:7d:ac:21:04:c6:87:bc: 42:5d:ec:77:98:3e:e3:ee:2b:57:ab:1e:b1:30:2a: df:95:eb:7d:55:aa:ce:2a:15:b0:5c:98:cb:54:c8: 0c:80:e3:7e:5f:62:2a:98:ea:cd:b9:fd:a4:82:04: e2:eb:2f:dd:2d:94:67:2d:e8:ec:82:8b:ee:13:5f: e9:34:47:92:71:19:df:c3:c6:8c:09:78:2f:82:a3: e1:6b:56:ef:33:a3:1d:22:5a:68:1c:b7:31:92:9d: ae:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:08:00:E6:47:4F:60:4A:F5:8F:8E:6B:A2:0E:1D:D3:E6:67:59:2C X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:24::/48 Signature Algorithm: sha256WithRSAEncryption d1:59:30:41:da:14:4f:0e:fb:8e:b2:58:9a:17:63:3d:6a:c7: b2:fb:6d:ff:01:e4:1b:55:d1:ef:cc:18:8d:a2:06:f8:ce:1e: bd:36:06:6b:14:7e:f9:e2:c8:71:53:76:c7:81:22:e5:5a:b9: 8b:9a:32:dd:26:0f:e8:30:10:6e:ef:a0:5b:17:ae:0f:21:5f: bd:da:50:85:43:bf:2b:d3:33:27:a4:c8:9e:eb:40:a8:2a:22: 37:a6:5f:5a:c9:c6:a6:a7:3c:c7:bc:59:f6:ec:5f:9d:64:4d: 67:e9:b8:88:23:3c:91:d6:fa:0a:a1:e1:ca:6e:0b:19:01:f4: 53:37:9f:33:b9:54:c2:13:3e:ec:cf:86:4d:da:d9:e5:5b:f7: 55:97:b9:7f:32:a2:6e:94:64:b6:a9:de:f3:44:e6:dd:99:0c: 5b:05:13:65:3a:02:1a:05:97:4f:72:d9:a4:bf:20:b8:d1:76: fb:61:49:e5:db:25:97:07:61:22:91:9b:1c:73:f7:a9:6a:14: 3c:1f:c6:19:4c:55:62:1f:ec:60:2b:93:ce:f0:5b:c2:05:2e: 91:5e:91:c4:96:55:18:a3:ac:dd:ae:0d:4d:a4:3b:5f:1c:a1: ca:f8:7a:1f:6a:48:02:06:bc:dd:f0:5a:11:98:89:01:7a:9d: 91:d8:72:3e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMjQ1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY3ZC0zZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY1rzoDULo2JpWLr1xChk5HncvVm9bPlfTeOutfCVSNkgzq3yJ9F+Dtlz9UB b7qLKVld+or6nYx1zwI+943rqB2sckZNSxm/TvdxbqKwy67uMJfYXlJJ3rpwsJVC 2nwo1dUq3fLToOcw8CNaN/K94JnNqOoy5F1AZOhcJN1mYdSbWID8Ekwf2GhU3dGt GlWJjKoRY/6kb2PSuALVMn2sIQTGh7xCXex3mD7j7itXqx6xMCrflet9VarOKhWw XJjLVMgMgON+X2IqmOrNuf2kggTi6y/dLZRnLejsgovuE1/pNEeScRnfw8aMCXgv gqPha1bvM6MdIlpoHLcxkp2udwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJEIAOZH T2BK9Y+Oa6IOHdPmZ1ksMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkZENDhGNUFB MjFDMTFFOEI2NjlBMDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AACQwDQYJKoZIhvcNAQELBQADggEBANFZMEHaFE8O +46yWJoXYz1qx7L7bf8B5BtV0e/MGI2iBvjOHr02BmsUfvniyHFTdseBIuVauYua Mt0mD+gwEG7voFsXrg8hX73aUIVDvyvTMyekyJ7rQKgqIjemX1rJxqanPMe8Wfbs X51kTWfpuIgjPJHW+gqh4cpuCxkB9FM3nzO5VMITPuzPhk3a2eVb91WXuX8yom6U ZLap3vNE5t2ZDFsFE2U6AhoFl09y2aS/ILjRdvthSeXbJZcHYSKRmxxz96lqFDwf xhlMVWIf7GArk87wW8IFLpFekcSWVRijrN2uDU2kO18cocr4eh9qSAIGvN3wWhGY iQF6nZHYcj4= -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org