$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa File: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (raw, json) Hash identifier: 1e03UWRVZ/5+y32SmpXe+TP1XJKPxBIsU/jxs0BWjSw= Subject key identifier: 6E:EB:B4:E0:CA:4F:85:0F:22:DA:9B:13:72:65:DE:02:A3:3E:22:11 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2643 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa Signing time: Sun 06 Aug 2023 16:13:15 +0000 ROA not before: Sun 06 Aug 2023 16:13:15 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 23764 IP address blocks: 2402:e380:19::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9795 (0x2643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Aug 6 16:13:15 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cfc69b-1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:f2:7a:86:27:b9:74:70:2e:22:a1:33:17: ee:31:89:ae:6e:e4:ca:55:c2:fc:0b:09:f7:d6:50: 56:15:fa:de:20:dc:34:e1:20:fc:7c:4b:92:4e:b6: 5d:04:14:e6:b3:38:3e:48:02:a4:e2:00:47:9b:46: 26:97:cc:e9:e4:71:be:c3:18:c2:b0:84:cb:03:b9: e0:cf:84:c7:08:2f:85:ee:f4:53:44:98:a2:48:96: 38:16:cc:c2:de:87:b0:73:dd:aa:81:d3:5c:0f:b3: fd:fe:24:d9:93:fb:f9:d2:7c:07:95:c5:ae:52:0a: dd:01:24:9e:7f:5d:3c:47:5b:3a:29:ec:13:03:8a: ae:55:0c:d6:ca:8d:7e:9c:f4:93:3e:b5:fe:db:2d: ae:e3:cf:9e:a8:33:4d:a1:a9:cd:a8:ad:fc:b7:1b: a7:30:0a:c2:c0:a6:51:8c:51:ab:58:0c:be:d7:88: b4:c2:9b:2a:b4:c9:0a:2c:e9:8a:df:ac:44:9f:fd: 28:a9:dc:da:a6:e7:de:80:6f:ac:84:b8:48:cb:fd: b3:18:6b:65:b1:2d:b1:f1:7c:f5:12:50:21:04:97: 07:c2:0e:6d:b0:41:38:64:5e:34:ad:30:c1:51:c5: ae:1b:1f:8a:8a:d4:b6:41:da:92:12:57:7c:b0:4d: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:B4:E0:CA:4F:85:0F:22:DA:9B:13:72:65:DE:02:A3:3E:22:11 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:e380:19::/48 Signature Algorithm: sha256WithRSAEncryption 2b:c7:c9:ed:98:cf:1a:2b:14:50:c8:f9:18:a0:96:c4:45:fb: a6:cf:c8:41:f9:a0:db:ed:48:cd:1c:05:e4:9b:94:ad:d7:55: 55:c6:e6:f2:2e:ed:3f:7e:45:17:a6:c6:f4:8e:6e:a6:36:30: c1:c0:65:b0:cd:bb:70:e2:ef:4d:94:05:37:37:01:f5:d6:05: 45:55:61:09:9f:e6:9a:da:c2:6a:9f:f2:6b:87:74:92:72:28: c6:4d:f2:7e:87:f9:6a:4b:04:c3:08:9f:f6:c5:7a:79:61:1f: cf:09:f7:00:59:53:ab:42:6b:a6:00:6f:fe:17:a2:16:ee:ca: 19:de:a1:95:32:17:ad:8c:2a:98:3f:8c:7f:a4:3e:16:26:7a: 3b:ce:d0:73:7d:69:53:c4:da:57:95:e0:42:0a:96:65:9f:ea: 90:6d:1a:a4:48:0f:63:15:46:38:cf:c9:1c:98:ea:9f:63:c4: df:20:83:1f:de:e3:8d:79:53:9f:53:a7:d0:6e:ad:35:f7:0e: 2f:e3:bc:fb:2e:4a:d3:5e:02:49:e3:55:c0:b6:41:79:83:81: 0b:be:93:24:d0:7a:a1:d8:4f:e4:39:72:a7:b5:04:67:14:e7: 60:21:74:bf:b5:e2:bb:c9:35:a3:4c:1a:d3:e2:97:b4:64:b4: 66:13:96:99 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjMwODA2MTYxMzE1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNmYzY5Yi0xNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqryeoYnuXRwLiKhMxfuMYmubuTKVcL8Cwn31lBWFfreINw04SD8fEuSTrZd BBTmszg+SAKk4gBHm0Yml8zp5HG+wxjCsITLA7ngz4THCC+F7vRTRJiiSJY4FszC 3oewc92qgdNcD7P9/iTZk/v50nwHlcWuUgrdASSef108R1s6KewTA4quVQzWyo1+ nPSTPrX+2y2u48+eqDNNoanNqK38txunMArCwKZRjFGrWAy+14i0wpsqtMkKLOmK 36xEn/0oqdzapufegG+shLhIy/2zGGtlsS2x8Xz1ElAhBJcHwg5tsEE4ZF40rTDB UcWuGx+KitS2QdqSEld8sE1QkQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFG7rtODK T4UPItqbE3Jl3gKjPiIRMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzE1QkJDNEFB MjFDMTFFOEI2NjlBMDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAuOAABkwDQYJKoZIhvcNAQELBQADggEBACvHye2Yzxor FFDI+RiglsRF+6bPyEH5oNvtSM0cBeSblK3XVVXG5vIu7T9+RRemxvSObqY2MMHA ZbDNu3Di702UBTc3AfXWBUVVYQmf5prawmqf8muHdJJyKMZN8n6H+WpLBMMIn/bF enlhH88J9wBZU6tCa6YAb/4XohbuyhneoZUyF62MKpg/jH+kPhYmejvO0HN9aVPE 2leV4EIKlmWf6pBtGqRID2MVRjjPyRyY6p9jxN8ggx/e4415U59Tp9BurTX3Di/j vPsuStNeAknjVcC2QXmDgQu+kyTQeqHYT+Q5cqe1BGcU52AhdL+14rvJNaNMGtPi l7RktGYTlpk= -----END CERTIFICATE-----Generated at Tue Apr 30 18:56:55 2024 by rpki-client on console-fra.rpki-client.org