$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa File: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (raw, json) Hash identifier: u8gfXXtqm1gkzJMgdHqfg88L6v+Yz3/XKFWnq8AvFg8= Subject key identifier: 0A:85:A2:65:9E:63:7E:F2:44:C6:90:91:B4:40:0C:C4:34:2C:5A:09 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 274F Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa Signing time: Tue 30 Jul 2024 16:03:53 +0000 ROA not before: Tue 30 Jul 2024 16:03:53 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137219 IP address blocks: 2402:9e80:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10063 (0x274f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 30 16:03:53 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a90ee9-bd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:cd:1f:fc:47:32:4b:7d:1c:ea:ea:19:d0: d1:92:06:f0:52:f5:7a:8c:9e:1b:62:79:96:8b:9e: 20:23:f0:5d:86:dc:3f:ee:b7:d2:5f:94:07:5b:84: 60:fa:fd:db:e2:fa:d4:3a:6a:b8:89:de:d1:d1:cf: 8c:45:0f:67:df:a5:03:7b:59:63:4f:9c:42:5e:32: 5e:45:75:6d:be:ac:b9:2c:29:ec:72:5d:fa:d0:00: b9:17:01:d1:9d:d9:d3:b6:cc:79:91:61:19:00:57: 73:6b:5b:cb:97:a6:53:db:a3:6c:23:e9:f4:56:74: 7d:ae:92:d6:9e:7a:e4:12:60:31:fe:c1:a5:1f:dc: d0:da:ac:7c:fd:b5:dd:f5:a3:0d:d1:f8:e4:06:a1: de:c8:09:b8:1c:90:24:0f:20:19:17:0c:56:33:a2: 66:8e:fa:96:f3:91:b2:18:1c:5b:96:d1:0b:cd:3f: b4:7e:cf:1f:0b:c2:bc:f7:a4:f0:8c:26:70:89:08: 39:5b:42:d5:d0:c3:09:74:d4:71:bf:27:25:4f:f4: 99:4e:68:c8:39:9a:08:31:a9:1e:b0:99:62:ea:67: 6e:46:79:32:77:5e:d1:65:9e:2b:d4:86:b3:26:71: c2:54:34:b8:9d:66:23:60:19:00:6f:55:c2:b9:76: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:A2:65:9E:63:7E:F2:44:C6:90:91:B4:40:0C:C4:34:2C:5A:09 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:24::/48 Signature Algorithm: sha256WithRSAEncryption 9b:12:56:59:51:81:a6:53:fe:0a:97:2b:5a:9e:7a:95:7f:46: 49:4d:bf:cf:d1:91:f1:99:fd:f6:bf:b9:48:af:5b:2a:20:42: ee:52:37:1f:01:08:41:72:b4:f5:96:ea:0d:be:13:4b:79:65: 5a:df:ce:ab:e7:3b:5f:6f:60:1a:ee:55:ef:98:f4:56:9c:29: 97:a1:9d:b6:8e:c4:6b:41:36:f4:06:f6:e2:7d:d9:a2:51:37: ad:5f:1d:d5:b5:86:49:66:e1:fd:9a:bd:b5:a5:c8:e9:b8:35: 76:2d:58:70:97:d3:b4:dc:d3:ab:b9:52:20:79:78:3d:fa:50: 00:13:02:89:5e:03:96:b9:34:97:50:dc:3a:3e:fa:f4:73:65: bb:4a:7e:5f:41:d9:f5:09:a5:ca:68:fc:f2:77:27:6a:12:5f: b0:dc:f0:0d:9b:9d:7b:80:ab:43:f2:54:39:89:b6:b8:22:71: 73:3c:f7:06:bc:83:b9:4c:1c:0a:e7:2e:79:12:27:6e:7c:7c: 1a:bd:b9:01:e2:c2:af:d8:ee:ce:56:4d:26:4b:d6:a4:0c:49: db:ae:44:56:cc:55:2d:be:d6:8c:d7:fd:72:9e:70:7b:ae:89: 46:4b:fb:73:59:f7:ca:38:3a:4d:eb:99:97:54:d3:b6:81:30: b9:ce:64:67 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJ08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjQwNzMwMTYwMzUzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVlOS1iZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQDNH/xHMkt9HOrqGdDRkgbwUvV6jJ4bYnmWi54gI/Bdhtw/7rfSX5QHW4Rg +v3b4vrUOmq4id7R0c+MRQ9n36UDe1ljT5xCXjJeRXVtvqy5LCnscl360AC5FwHR ndnTtsx5kWEZAFdza1vLl6ZT26NsI+n0VnR9rpLWnnrkEmAx/sGlH9zQ2qx8/bXd 9aMN0fjkBqHeyAm4HJAkDyAZFwxWM6JmjvqW85GyGBxbltELzT+0fs8fC8K896Tw jCZwiQg5W0LV0MMJdNRxvyclT/SZTmjIOZoIMakesJli6mduRnkyd17RZZ4r1Iaz JnHCVDS4nWYjYBkAb1XCuXbe9wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFAqFomWe Y37yRMaQkbRADMQ0LFoJMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkZENDhGNUFB MjFDMTFFOEI2NjlBMDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AACQwDQYJKoZIhvcNAQELBQADggEBAJsSVllRgaZT /gqXK1qeepV/RklNv8/RkfGZ/fa/uUivWyogQu5SNx8BCEFytPWW6g2+E0t5ZVrf zqvnO19vYBruVe+Y9FacKZehnbaOxGtBNvQG9uJ92aJRN61fHdW1hklm4f2avbWl yOm4NXYtWHCX07Tc06u5UiB5eD36UAATAoleA5a5NJdQ3Do++vRzZbtKfl9B2fUJ pcpo/PJ3J2oSX7Dc8A2bnXuAq0PyVDmJtrgicXM89wa8g7lMHArnLnkSJ258fBq9 uQHiwq/Y7s5WTSZL1qQMSduuRFbMVS2+1ozX/XKecHuuiUZL+3NZ98o4Ok3rmZdU 07aBMLnOZGc= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:00 2024 by rpki-client on console-ams.rpki-client.org