$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa File: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (raw, json) Hash identifier: aHDAGIdqb3+uef3dy3v5/B5Dp7bJ8icDirVS1hpRF+o= Subject key identifier: A1:FC:E6:F3:E6:8A:16:E2:17:05:2E:92:33:E0:33:16:CA:E8:3B:0C Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: 02 Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa Signing time: Tue 14 Nov 2023 04:19:33 +0000 ROA not before: Tue 14 Nov 2023 04:19:33 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152110 IP address blocks: 27.124.70.0/23 maxlen: 24 2001:df3:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: Nov 14 04:19:33 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6552f554-dc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:7b:a7:49:7f:f8:8a:f9:38:de:9e:36:b1: 48:df:a7:cb:11:6b:b7:9f:1a:33:5d:a0:d6:fc:57: 1c:46:cf:fd:d6:ab:98:6b:50:3e:44:5d:05:a3:b6: 49:07:64:81:63:04:b5:fa:17:2f:eb:cb:5a:85:c8: 4a:89:80:3a:be:ed:c9:07:72:fa:db:0b:bb:8b:75: 0c:8b:0e:2c:74:e6:c5:f9:e3:8b:ef:02:71:6b:7e: 44:b9:53:bb:70:1b:78:0b:76:f2:f9:7b:7b:72:2c: 68:a3:38:64:1a:55:a9:c4:42:ca:aa:d7:7f:a0:61: eb:76:f8:46:4c:04:0c:86:0a:71:69:3d:3c:b7:0a: d6:e8:20:87:3b:48:7e:b9:a9:9f:4e:8c:83:f9:95: e3:64:25:76:37:ab:78:e3:a8:b6:06:db:6a:76:2c: 9b:4a:16:c5:81:d4:71:12:07:41:7d:59:3d:95:9b: 6b:1a:75:1d:ae:df:99:1c:60:78:fb:06:a5:3c:30: 74:9c:69:04:0a:1b:35:97:17:f9:98:09:98:dc:7e: 2a:8b:0c:50:7d:d6:9a:5a:90:b4:c6:ab:9d:64:7f: bd:36:b2:09:84:de:20:2b:99:cd:c2:44:99:81:6f: 42:8a:e3:f5:0d:26:18:63:1a:63:0c:be:54:d7:d6: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FC:E6:F3:E6:8A:16:E2:17:05:2E:92:33:E0:33:16:CA:E8:3B:0C X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.124.70.0/23 IPv6: 2001:df3:23c0::/48 Signature Algorithm: sha256WithRSAEncryption 51:7e:9e:db:36:c4:5a:80:1a:05:41:e3:2b:d3:eb:d5:15:48: b4:2d:0e:78:31:03:1a:fa:ff:30:57:0b:70:c3:6e:44:07:1a: 15:1b:a8:aa:32:8a:5d:a7:fa:94:d8:8c:e8:cc:00:cc:2a:20: 23:be:69:89:c8:3c:d0:63:10:79:fa:28:62:eb:5f:0a:ac:f1: bf:7c:2e:cd:21:75:21:35:97:a0:36:c4:b9:9e:8f:f2:e1:bf: 6b:3a:4d:44:f3:fa:16:f2:64:46:1b:22:0c:19:86:0a:db:a9: b2:3d:6b:45:1c:bb:0b:7f:ac:13:fe:0b:ad:7e:6f:8d:6e:cb: 85:6b:58:b6:cb:55:7f:93:8b:50:8a:88:5a:29:81:eb:d9:8c: 01:fe:48:08:a8:b5:17:18:0d:d9:c9:28:1c:69:8b:e0:e7:63: 5b:fc:3f:d1:ea:62:81:08:82:f2:24:28:67:7f:55:5c:d1:c0: 95:bc:e7:1e:51:a2:5e:f6:6a:be:cf:4e:b7:ce:1d:75:5e:c9: b2:9b:5d:79:a5:8a:a6:09:d6:14:ad:b4:eb:cf:7e:f5:dd:c8: ef:a6:a4:00:48:a0:1f:da:fb:75:f9:63:5c:e8:dd:c5:5c:ee: 22:79:33:29:56:a9:dc:59:9c:b6:c4:f0:ee:0a:e1:bd:1d:93: e9:46:18:7c -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUVDNzExMC8GA1UEBRMoMzA2RTM0RkE4NERBMDkwQzYwMDFCMzU0NjRCQjhDNDI2 MzU3RDkyODAeFw0yMzExMTQwNDE5MzNaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NTJmNTU0LWRjNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU/nunSX/4ivk43p42sUjfp8sRa7efGjNdoNb8VxxGz/3Wq5hrUD5EXQWjtkkH ZIFjBLX6Fy/ry1qFyEqJgDq+7ckHcvrbC7uLdQyLDix05sX544vvAnFrfkS5U7tw G3gLdvL5e3tyLGijOGQaVanEQsqq13+gYet2+EZMBAyGCnFpPTy3CtboIIc7SH65 qZ9OjIP5leNkJXY3q3jjqLYG22p2LJtKFsWB1HESB0F9WT2Vm2sadR2u35kcYHj7 BqU8MHScaQQKGzWXF/mYCZjcfiqLDFB91ppakLTGq51kf702sgmE3iArmc3CRJmB b0KK4/UNJhhjGmMMvlTX1phpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUofzm8+aK FuIXBS6SM+AzFsroOwwwHwYDVR0jBBgwFoAUMG40+oTaCQxgAbNUZLuMQmNX2Sgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5RUM3L0U2M0YyRjhBODJB MzExRUU5QjExNzM1N0M0RjlBRTAyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUc0MC1vVGFDUXhnQWJOVVpMdU1RbU5YMlNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVDNy9FNjNGMkY4QTgyQTMxMUVFOUIxMTczNTdDNEY5QUUwMi8wMkZDM0UzQzgy QTUxMUVFQTFGMjcxMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEARt8RjAPBAIAAjAJAwcAIAEN8yPAMA0GCSqGSIb3DQEBCwUA A4IBAQBRfp7bNsRagBoFQeMr0+vVFUi0LQ54MQMa+v8wVwtww25EBxoVG6iqMopd p/qU2IzozADMKiAjvmmJyDzQYxB5+ihi618KrPG/fC7NIXUhNZegNsS5no/y4b9r Ok1E8/oW8mRGGyIMGYYK26myPWtFHLsLf6wT/gutfm+NbsuFa1i2y1V/k4tQioha KYHr2YwB/kgIqLUXGA3ZySgcaYvg52Nb/D/R6mKBCILyJChnf1Vc0cCVvOceUaJe 9mq+z063zh11Xsmym115pYqmCdYUrbTrz3713cjvpqQASKAf2vt1+WNc6N3FXO4i eTMpVqncWZy2xPDuCuG9HZPpRhh8 -----END CERTIFICATE-----Generated at Fri Jun 7 09:41:06 2024 by rpki-client on console-ams.rpki-client.org