$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa File: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (raw, json) Hash identifier: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g= Subject key identifier: 69:F7:23:E7:05:C7:7C:7A:99:2A:1E:4C:34:2F:0F:4A:00:0C:ED:EF Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 02BC Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa Signing time: Sun 21 Apr 2024 03:45:28 +0000 ROA not before: Sun 21 Apr 2024 03:45:28 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 216173 IP address blocks: 2401:1740:c02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 21 03:45:28 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66248bd8-e97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:8f:c3:88:2e:3e:21:3b:ac:cb:6d:ec:41: c8:b6:ba:c0:6f:0d:6e:0a:93:58:18:e3:23:4a:e9: 52:db:15:05:7e:2b:70:4d:ba:79:8d:95:f5:ad:4a: d0:24:f0:05:49:d9:29:ad:1f:2d:4a:d4:5b:91:c3: 49:74:75:2a:39:f9:9d:e4:1b:31:bd:74:9c:ee:dd: 53:b4:85:1e:e1:d4:83:49:26:d9:9b:78:3a:e3:5f: 8e:82:dc:3f:98:9d:5e:d8:b3:1b:02:4e:9d:c8:cb: c2:27:0f:44:78:b2:57:82:e8:23:ec:dc:b1:b1:63: 03:fe:f7:4b:ab:8d:53:ba:89:bd:ea:70:52:36:2d: 4d:d0:90:d6:43:a0:68:01:c9:10:cf:c8:ea:06:cb: 3e:8c:14:6d:c8:e5:43:13:d3:57:89:99:bf:e2:7a: be:76:3f:2e:3d:42:ae:b6:62:82:96:fb:43:97:b3: 8b:45:e8:1b:d6:05:0e:a3:35:05:06:37:8d:f7:2e: 98:03:bb:c4:76:d6:2d:c7:62:84:aa:95:4f:e4:e9: c6:ba:44:cd:6b:a6:3f:5d:f2:8d:23:93:22:40:1f: 5c:5c:b3:85:e9:df:a0:5e:26:8e:e6:f0:29:91:bc: 8f:31:ad:9d:29:90:24:2d:42:1a:1d:0a:f4:59:11: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F7:23:E7:05:C7:7C:7A:99:2A:1E:4C:34:2F:0F:4A:00:0C:ED:EF X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:1740:c02::/48 Signature Algorithm: sha256WithRSAEncryption 02:ea:fa:fc:5d:1f:50:e5:13:cd:5c:e4:3e:51:38:5e:b9:34: 6d:f1:b5:b3:44:cc:99:c5:16:f9:82:c3:37:20:f7:95:0f:98: 07:68:70:f1:db:7e:ff:4c:1b:bd:61:89:48:c1:76:e9:66:31: 9e:aa:94:95:43:c0:8d:1f:25:e2:15:43:cd:e2:cb:a5:1a:12: a6:c5:8a:00:84:18:43:73:58:1d:fe:95:b8:c2:40:f9:53:3b: fc:dd:e2:c7:9f:73:b9:c3:16:4e:82:92:84:f4:7c:23:4f:fd: 9f:f3:56:48:45:86:9a:a6:b7:1f:b9:e6:f7:75:c7:29:21:8a: 4e:25:2f:8d:ad:0c:d6:c5:26:a4:43:16:2b:c5:e1:4a:86:d3: 26:9f:54:d8:a7:63:d8:12:a0:07:87:6f:fe:eb:64:cf:fa:d7: 9f:c7:d4:ba:fe:61:36:9e:9a:a9:4b:68:5f:40:ea:e2:41:86: 7e:af:ac:10:ae:0a:4f:90:20:e1:e4:5a:36:1f:05:de:1d:3c: 0e:26:7e:a7:52:e1:34:3c:f3:e0:92:6d:8f:15:3b:6a:37:1a: d2:77:76:b2:76:5f:16:d0:30:99:c8:44:ef:d1:c9:df:e1:02: a2:f4:d0:12:43:5d:0d:d3:b7:73:32:71:94:5a:6c:03:3e:b0: fa:57:7b:d4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjQwNDIxMDM0NTI4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI0OGJkOC1lOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LaPw4guPiE7rMtt7EHItrrAbw1uCpNYGOMjSulS2xUFfitwTbp5jZX1rUrQ JPAFSdkprR8tStRbkcNJdHUqOfmd5BsxvXSc7t1TtIUe4dSDSSbZm3g641+Ogtw/ mJ1e2LMbAk6dyMvCJw9EeLJXgugj7NyxsWMD/vdLq41Tuom96nBSNi1N0JDWQ6Bo AckQz8jqBss+jBRtyOVDE9NXiZm/4nq+dj8uPUKutmKClvtDl7OLRegb1gUOozUF BjeN9y6YA7vEdtYtx2KEqpVP5OnGukTNa6Y/XfKNI5MiQB9cXLOF6d+gXiaO5vAp kbyPMa2dKZAkLUIaHQr0WRHtBQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGn3I+cF x3x6mSoeTDQvD0oADO3vMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvMzE0M0RFQzI2 Qzg4MTFFRUJBQjdGMjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkARdADAIwDQYJKoZIhvcNAQELBQADggEBAALq+vxdH1Dl E81c5D5ROF65NG3xtbNEzJnFFvmCwzcg95UPmAdocPHbfv9MG71hiUjBdulmMZ6q lJVDwI0fJeIVQ83iy6UaEqbFigCEGENzWB3+lbjCQPlTO/zd4sefc7nDFk6CkoT0 fCNP/Z/zVkhFhpqmtx+55vd1xykhik4lL42tDNbFJqRDFivF4UqG0yafVNinY9gS oAeHb/7rZM/615/H1Lr+YTaemqlLaF9A6uJBhn6vrBCuCk+QIOHkWjYfBd4dPA4m fqdS4TQ88+CSbY8VO2o3GtJ3drJ2XxbQMJnIRO/Ryd/hAqL00BJDXQ3Tt3MycZRa bAM+sPpXe9Q= -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org