$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa File: 6BC6F8426D8F11EE9980E23FC4F9AE02.roa (raw, json) Hash identifier: 3LHbih6jiCy+yFOZGlCJzqmcW+w6GM0QByW0VjjI4Qk= Subject key identifier: 48:F7:5A:A0:6F:A0:6E:BA:2C:03:C3:2C:E5:02:A4:10:00:CE:54:39 Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Certificate serial: 7C Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa Signing time: Thu 04 Apr 2024 06:59:01 +0000 ROA not before: Thu 04 Apr 2024 06:59:01 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 151779 IP address blocks: 202.27.114.0/24 maxlen: 24 2001:df2:da40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C Validity Not Before: Apr 4 06:59:01 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=660e4fb5-10a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:dc:d8:c3:11:6d:5f:11:2a:95:5f:36:a9: cf:78:ec:42:93:f6:96:ca:c7:6d:ea:83:0d:b0:7f: b7:f9:82:db:65:96:30:28:f1:99:4e:4a:71:28:a9: d2:0d:27:c5:3c:ab:62:42:ff:49:7e:8e:52:da:55: c5:ca:3e:cb:f3:32:23:00:f2:4e:85:e5:44:d8:f0: 70:50:ff:6f:78:60:c0:d6:94:11:dd:76:e0:28:0d: 23:d7:5e:97:0b:cb:db:e2:0c:f7:46:64:45:27:e6: 53:a1:92:b7:5d:f4:34:bd:75:30:3b:2d:9f:4d:e0: 68:2f:ce:57:04:25:23:9d:1a:4f:15:cb:d4:ca:5e: 09:02:63:e2:92:d6:be:d3:37:6d:e0:1c:36:a9:90: 04:6c:94:25:ba:13:a7:27:07:a4:aa:12:d2:76:5a: 68:ab:6f:bb:92:d9:e4:90:fa:dd:9f:71:b3:f5:32: cb:d9:3d:20:5e:1f:23:af:12:56:45:73:92:be:c4: 24:82:cb:4d:a5:27:47:21:02:a1:f2:d1:1d:aa:f9: d1:04:25:9a:b7:01:be:81:3f:c5:f8:37:16:d3:97: e6:08:9e:8f:d1:13:f6:6a:fa:f9:cc:1e:7d:a7:68: 94:f1:01:cf:a2:41:26:15:80:28:c9:38:18:aa:2e: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F7:5A:A0:6F:A0:6E:BA:2C:03:C3:2C:E5:02:A4:10:00:CE:54:39 X509v3 Authority Key Identifier: keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/6BC6F8426D8F11EE9980E23FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.27.114.0/24 IPv6: 2001:df2:da40::/48 Signature Algorithm: sha256WithRSAEncryption 85:fa:e3:e5:f5:71:d7:8f:38:89:f7:0c:8e:c4:cc:1d:31:88: 57:ab:20:5d:e7:35:fb:65:03:23:78:dd:9a:d1:b0:06:28:27: d3:3a:ad:9a:3e:b5:75:b5:fe:83:cb:fc:ed:d0:3e:ac:13:8e: 6a:12:96:7c:50:cb:31:cc:56:68:27:87:b0:be:db:73:12:3a: 73:2c:b6:1b:0b:14:f9:d2:38:18:5e:a0:61:c5:98:cb:3b:61: 17:af:ec:01:d6:5c:c5:3a:ed:55:fe:0d:73:a3:f0:e0:8f:85: 21:e5:14:b4:82:cb:7e:16:d4:60:d9:a9:a0:ae:52:f4:60:34: 1e:6b:ec:04:fb:93:c0:79:b0:7d:62:57:84:84:04:b1:9e:cc: 7e:9d:04:e5:7d:da:79:71:99:84:f7:88:d8:68:92:8f:32:f4: 7d:d2:fb:b1:bd:7b:b0:be:9b:4f:e7:82:35:1c:ce:ee:30:ca: 85:45:a2:98:b0:e6:4a:e0:f6:68:b5:35:1d:a3:d4:46:a1:d8: bc:14:2d:71:7d:a5:02:99:b6:12:c6:30:18:b1:1b:7f:f4:4e: 85:86:b5:21:5c:a3:ef:d7:be:86:49:63:ff:38:b2:2b:a8:a0: c7:a3:e5:9b:c0:ea:39:d1:d0:6b:4b:da:fb:d4:6a:0b:aa:69: a6:38:50:9f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzgzNjExMC8GA1UEBRMoNkY2NzU4MTAzODUzNEQ0REJDRTNDODFCNUYyRDg4NjFD NTM2QjY3QzAeFw0yNDA0MDQwNjU5MDFaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGU0ZmI1LTEwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEftzYwxFtXxEqlV82qc947EKT9pbKx23qgw2wf7f5gttlljAo8ZlOSnEoqdIN J8U8q2JC/0l+jlLaVcXKPsvzMiMA8k6F5UTY8HBQ/294YMDWlBHdduAoDSPXXpcL y9viDPdGZEUn5lOhkrdd9DS9dTA7LZ9N4GgvzlcEJSOdGk8Vy9TKXgkCY+KS1r7T N23gHDapkARslCW6E6cnB6SqEtJ2Wmirb7uS2eSQ+t2fcbP1MsvZPSBeHyOvElZF c5K+xCSCy02lJ0chAqHy0R2q+dEEJZq3Ab6BP8X4NxbTl+YIno/RE/Zq+vnMHn2n aJTxAc+iQSYVgCjJOBiqLvBBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUSPdaoG+g brosA8Ms5QKkEADOVDkwHwYDVR0jBBgwFoAUb2dYEDhTTU2848gbXy2IYcU2tnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3ODM2L0ZBMjVFREUyNDMx RDExRUU4NjhDQTQwRkM0RjlBRTAyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjJkWUVEaFRUVTI4NDhnYlh5MklZY1UydG53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgzNi9GQTI1RURFMjQzMUQxMUVFODY4Q0E0MEZDNEY5QUUwMi82QkM2Rjg0MjZE OEYxMUVFOTk4MEUyM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMobcjAPBAIAAjAJAwcAIAEN8tpAMA0GCSqGSIb3DQEBCwUA A4IBAQCF+uPl9XHXjziJ9wyOxMwdMYhXqyBd5zX7ZQMjeN2a0bAGKCfTOq2aPrV1 tf6Dy/zt0D6sE45qEpZ8UMsxzFZoJ4ewvttzEjpzLLYbCxT50jgYXqBhxZjLO2EX r+wB1lzFOu1V/g1zo/Dgj4Uh5RS0gst+FtRg2amgrlL0YDQea+wE+5PAebB9YleE hASxnsx+nQTlfdp5cZmE94jYaJKPMvR90vuxvXuwvptP54I1HM7uMMqFRaKYsOZK 4PZotTUdo9RGodi8FC1xfaUCmbYSxjAYsRt/9E6FhrUhXKPv176GSWP/OLIrqKDH o+WbwOo50dBrS9r71GoLqmmmOFCf -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org