$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa File: 6009614852AF11EEBB6AA031C4F9AE02.roa (raw, json) Hash identifier: RD98gTIoN2lKephseYsIZxJg0Jn1q80h8l4JjwV/wcA= Subject key identifier: 44:37:D4:14:D7:19:A0:85:16:F7:9D:44:5C:8B:E3:6F:F6:9D:C7:4C Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 156A Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa Signing time: Mon 29 Apr 2024 03:57:53 +0000 ROA not before: Mon 29 Apr 2024 03:57:53 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.160.0/19 maxlen: 19 27.111.169.0/24 maxlen: 24 27.111.170.0/24 maxlen: 24 27.111.171.0/24 maxlen: 24 27.111.192.0/20 maxlen: 20 27.111.195.0/24 maxlen: 24 45.126.14.0/23 maxlen: 23 103.14.116.0/22 maxlen: 22 113.59.240.0/20 maxlen: 20 113.59.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5482 (0x156a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Apr 29 03:57:53 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=662f1ac1-1dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:b0:59:aa:d0:48:72:1d:bd:44:fe:37:c0: d9:ff:47:74:0c:80:05:ea:6b:7e:b3:9d:82:66:13: 5c:57:f8:d4:dd:0c:ff:43:05:6d:65:8c:53:b2:0c: c9:a7:7a:16:62:ee:44:40:63:3c:29:e0:5a:cb:ac: 44:df:6c:f4:4a:1f:bb:da:cc:19:d3:8a:fc:cc:e9: de:ef:b7:9f:ce:ac:bc:cf:7d:ac:ed:fe:a9:9e:92: 6f:9f:b3:c3:7e:fb:51:8e:bf:3f:c3:54:f9:40:02: 65:f9:55:19:4f:52:bc:ed:72:7f:59:4a:87:2d:bc: 46:c6:b6:fe:6e:f9:93:9d:8e:a8:69:5a:4e:51:c3: 97:73:47:7d:5c:c9:70:82:b2:ba:03:4a:bd:cb:96: f4:cd:64:84:38:2b:77:8a:15:02:ed:6c:27:60:40: 8f:eb:a3:12:f3:8b:42:30:c6:d4:1c:81:1d:f3:7f: 34:5d:03:db:74:ce:90:d0:51:8d:96:3d:e6:c4:9f: 00:c9:8a:83:c0:47:fe:f6:80:86:87:40:4e:19:38: 44:8d:8d:af:fa:95:5e:97:5a:51:bf:9e:71:e0:4a: c2:93:0b:74:52:f4:63:ec:25:a2:d6:5b:7b:c6:9a: 53:9a:d4:75:59:3d:cc:e9:73:61:33:e7:e4:9a:21: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:D4:14:D7:19:A0:85:16:F7:9D:44:5C:8B:E3:6F:F6:9D:C7:4C X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.160.0-27.111.207.255 45.126.14.0/23 103.14.116.0/22 113.59.240.0/20 Signature Algorithm: sha256WithRSAEncryption 27:ff:37:63:ad:e2:5d:9f:74:e6:ed:54:8c:e6:17:d2:a4:14: e5:67:62:4f:f4:4b:49:37:4b:02:a2:ba:81:b9:92:4b:42:2d: f7:94:d0:18:ba:82:83:05:9c:c3:4d:51:1a:60:bb:a5:1a:0e: b6:7f:c0:7d:a6:ac:22:46:ba:02:d0:d9:95:35:87:63:0e:d7: 4d:29:82:17:5e:4c:24:40:de:43:ee:51:69:b8:b1:9d:13:c7: 32:2f:4c:db:cd:a8:7a:17:bf:fa:7e:14:69:51:ae:64:f2:09: 96:fe:aa:18:68:4d:0b:7a:08:62:7f:e5:18:ba:54:cf:95:43: fb:fc:10:ed:e3:6e:28:c8:70:98:c7:1a:2e:24:52:3f:59:1f: a0:c8:48:41:85:84:14:4b:65:a0:3b:01:26:58:0a:a3:c6:96: ec:e3:b2:86:e0:36:e4:95:f7:25:0c:0e:19:a8:87:b5:a7:96: aa:ed:f6:64:b5:e9:42:05:28:a3:a2:61:3b:a2:38:81:dd:fd: c6:6d:90:cf:a9:7c:60:e4:c2:3c:24:f4:65:5b:03:32:e4:8b: 4f:65:2a:fe:79:f1:61:59:68:ac:64:8c:c2:f0:4e:cf:1d:8b: 14:e8:65:4c:f0:8b:ec:f7:35:75:c1:a4:2a:e6:f0:93:79:d5: 98:4e:1b:13 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICFWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjQwNDI5MDM1NzUzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJmMWFjMS0xZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcOwWarQSHIdvUT+N8DZ/0d0DIAF6mt+s52CZhNcV/jU3Qz/QwVtZYxTsgzJ p3oWYu5EQGM8KeBay6xE32z0Sh+72swZ04r8zOne77efzqy8z32s7f6pnpJvn7PD fvtRjr8/w1T5QAJl+VUZT1K87XJ/WUqHLbxGxrb+bvmTnY6oaVpOUcOXc0d9XMlw grK6A0q9y5b0zWSEOCt3ihUC7WwnYECP66MS84tCMMbUHIEd8380XQPbdM6Q0FGN lj3mxJ8AyYqDwEf+9oCGh0BOGThEjY2v+pVel1pRv55x4ErCkwt0UvRj7CWi1lt7 xppTmtR1WT3M6XNhM+fkmiHSWQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFEQ31BTX GaCFFvedRFyL42/2ncdMMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvNjAwOTYxNDg1 MkFGMTFFRUJCNkFBMDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCAwDAMEBRtvoAMEBBtvwAMEAS1+DgMEAmcOdAMEBHE78DANBgkq hkiG9w0BAQsFAAOCAQEAJ/83Y63iXZ905u1UjOYX0qQU5WdiT/RLSTdLAqK6gbmS S0It95TQGLqCgwWcw01RGmC7pRoOtn/AfaasIka6AtDZlTWHYw7XTSmCF15MJEDe Q+5RabixnRPHMi9M282oehe/+n4UaVGuZPIJlv6qGGhNC3oIYn/lGLpUz5VD+/wQ 7eNuKMhwmMcaLiRSP1kfoMhIQYWEFEtloDsBJlgKo8aW7OOyhuA25JX3JQwOGaiH taeWqu32ZLXpQgUoo6JhO6I4gd39xm2Qz6l8YOTCPCT0ZVsDMuSLT2Uq/nnxYVlo rGSMwvBOzx2LFOhlTPCL7Pc1dcGkKubwk3nVmE4bEw== -----END CERTIFICATE-----Generated at Sat May 4 19:58:40 2024 by rpki-client on console-ams.rpki-client.org