$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa File: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (raw, json) Hash identifier: 2ne+z7g4C6hTWhNL7yfi5iWGj3rq/tLUH4y+aF2dJpI= Subject key identifier: 38:11:F3:B3:C2:AB:A1:1C:1E:00:B0:93:FE:40:1A:BB:2A:05:D1:A1 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2627 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:12:50 +0000 ROA not before: Sun 06 Aug 2023 16:12:50 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 138445 IP address blocks: 2402:9e80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9767 (0x2627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:12:50 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc682-1040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:2b:59:52:16:f5:7b:00:19:3f:c8:3b:f7: 47:66:3b:a5:35:8c:df:a8:3d:6d:68:b1:e7:37:c4: ee:94:4b:0b:f0:f0:c5:57:1f:51:ea:33:9a:b8:9f: c9:36:6c:a5:0b:47:84:89:12:21:29:8e:ef:a3:72: 79:be:a9:38:6d:06:79:b5:0f:7f:da:b5:65:40:ea: ea:65:3e:c2:fe:a2:76:4d:7c:e9:4d:5c:30:86:35: 8a:05:26:21:24:02:5d:40:01:1e:cd:c5:18:5e:5f: ce:8d:01:6d:8f:6c:f2:d8:7c:dd:fd:5b:4e:f0:67: 94:12:95:ed:05:4c:41:42:5d:18:45:c1:d9:a6:f3: 97:af:74:f8:81:b2:d5:e6:0b:71:46:73:14:85:68: 7b:1f:cd:38:56:a8:4c:0c:f4:04:f8:34:2e:7e:73: 16:84:1c:21:e2:95:03:df:25:a0:c5:1f:d5:20:96: 99:ec:e6:b7:d9:d7:e8:24:a3:e8:b3:c1:49:4a:54: f6:5d:70:ec:0f:e0:3f:fa:2f:4a:50:3d:d4:f0:15: 8e:16:23:f0:ab:2b:93:bd:bd:d1:e7:48:a6:b3:20: bb:32:49:47:cc:74:22:99:4e:d4:9b:d6:6f:71:09: 76:cb:0e:be:c8:96:1d:f0:1a:96:78:0c:d1:a5:93: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:11:F3:B3:C2:AB:A1:1C:1E:00:B0:93:FE:40:1A:BB:2A:05:D1:A1 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FF0D93AFEC911E88E78993AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:9e80:7::/48 Signature Algorithm: sha256WithRSAEncryption 1f:09:36:08:47:ca:bb:8e:d1:da:38:bb:d9:c6:a0:2a:02:b6: 5a:37:41:84:34:7c:b3:0b:be:77:eb:4a:9a:00:8e:7f:65:98: b2:81:94:ad:3c:68:4f:34:8c:86:4d:c3:e5:9b:35:59:c0:cd: 66:5c:f4:d0:ae:dd:7f:2f:e6:57:09:92:85:c2:b9:10:d6:d1: 83:07:cc:b8:96:22:c8:37:3f:bc:09:df:2b:ff:b7:61:f7:fb: 8d:05:d2:8e:8f:d2:16:41:42:c2:36:c7:a9:80:db:2c:ea:f5: a3:ef:5c:60:c0:0b:f4:59:06:33:04:bc:67:f3:cd:25:7c:89: 76:5d:88:4e:16:4b:f2:d7:e2:70:52:df:04:41:91:ce:0c:a1: 92:a0:df:b9:d1:88:9b:2d:90:f3:7f:fa:7b:e6:f3:b5:28:45: 76:38:9c:2a:d4:9e:3b:9a:55:16:d2:c4:c9:5d:1e:38:ec:99: 06:7d:0e:20:19:7f:de:54:cd:ea:16:f4:97:13:a2:58:04:6f: fe:d9:a8:c3:57:d0:63:b3:79:5a:4d:77:79:2f:11:7c:01:23: fd:dc:2c:38:56:97:bf:ad:13:77:80:81:03:57:3a:00:29:1d: 72:fd:fa:e2:f4:3b:6d:98:1b:4e:8b:52:20:69:9a:55:95:78: 18:e4:4d:bf -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMjUwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY4Mi0xMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vErWVIW9XsAGT/IO/dHZjulNYzfqD1taLHnN8TulEsL8PDFVx9R6jOauJ/J NmylC0eEiRIhKY7vo3J5vqk4bQZ5tQ9/2rVlQOrqZT7C/qJ2TXzpTVwwhjWKBSYh JAJdQAEezcUYXl/OjQFtj2zy2Hzd/VtO8GeUEpXtBUxBQl0YRcHZpvOXr3T4gbLV 5gtxRnMUhWh7H804VqhMDPQE+DQufnMWhBwh4pUD3yWgxR/VIJaZ7Oa32dfoJKPo s8FJSlT2XXDsD+A/+i9KUD3U8BWOFiPwqyuTvb3R50imsyC7MklHzHQimU7Um9Zv cQl2yw6+yJYd8BqWeAzRpZMEdQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFDgR87PC q6EcHgCwk/5AGrsqBdGhMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkZGMEQ5M0FG RUM5MTFFODhFNzg5OTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAp6AAAcwDQYJKoZIhvcNAQELBQADggEBAB8JNghHyruO 0do4u9nGoCoCtlo3QYQ0fLMLvnfrSpoAjn9lmLKBlK08aE80jIZNw+WbNVnAzWZc 9NCu3X8v5lcJkoXCuRDW0YMHzLiWIsg3P7wJ3yv/t2H3+40F0o6P0hZBQsI2x6mA 2yzq9aPvXGDAC/RZBjMEvGfzzSV8iXZdiE4WS/LX4nBS3wRBkc4MoZKg37nRiJst kPN/+nvm87UoRXY4nCrUnjuaVRbSxMldHjjsmQZ9DiAZf95UzeoW9JcTolgEb/7Z qMNX0GOzeVpNd3kvEXwBI/3cLDhWl7+tE3eAgQNXOgApHXL9+uL0O22YG06LUiBp mlWVeBjkTb8= -----END CERTIFICATE-----Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org