$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa File: CA822F60509111EF9E40402FC4F9AE02.roa (raw, json) Hash identifier: GIHKrYmqM8MKDjowEs+tYW1CsqN91Pe+ZU5CGo2TAv8= Subject key identifier: 23:40:84:4C:5D:A8:A2:5E:34:48:54:8C:19:F8:C4:9D:3E:6C:1E:3D Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0B4F Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa Signing time: Fri 02 Aug 2024 05:40:57 +0000 ROA not before: Fri 02 Aug 2024 05:40:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136908 IP address blocks: 27.111.17.0/24 maxlen: 24 117.121.230.0/24 maxlen: 24 117.121.236.0/24 maxlen: 24 117.121.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Aug 2 05:40:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66ac7169-ca84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:f0:60:f3:01:84:93:bf:9e:a6:fd:e7:fc: 16:e0:94:22:8a:ff:1e:b7:45:f4:40:a4:c5:f6:4f: 1d:eb:21:5f:9e:fb:7d:0b:e3:d5:36:d0:9e:e0:5e: 6e:ad:44:ea:8b:b6:35:94:2e:e7:69:d0:31:a3:6e: 17:01:a1:4f:fb:19:b5:85:72:98:06:c8:49:26:40: 5c:25:a2:38:3f:62:01:c5:f0:08:39:fc:d5:8a:ce: 90:fa:e4:e3:b0:ce:8a:46:8a:22:08:db:f8:46:e7: 8d:fe:19:a0:f6:e3:5e:1c:05:12:7c:b7:b6:cf:d7: 6c:ed:96:82:c2:74:79:62:f0:28:72:7f:cd:e0:87: 0c:9a:1f:03:e3:c7:62:35:30:ca:14:8a:53:a1:28: 31:2d:d8:9a:64:49:8e:ee:a0:8e:bf:e5:cb:f0:27: a0:85:23:b9:d1:08:d6:0e:5b:27:fb:aa:65:cf:c1: a6:f8:a3:b9:6d:50:6f:be:2c:bc:fa:37:6b:ad:59: d9:6f:ff:44:da:e6:a9:c3:2c:88:3c:bd:b9:cf:7f: 1a:6e:db:5e:72:97:e6:f1:cb:2d:b0:ce:4a:ce:d1: 53:e1:df:c9:3c:21:9f:48:93:f4:79:01:ec:f6:bd: a5:fe:d0:ca:91:a8:1c:99:ec:d6:37:4a:89:22:c7: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:84:4C:5D:A8:A2:5E:34:48:54:8C:19:F8:C4:9D:3E:6C:1E:3D X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CA822F60509111EF9E40402FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.17.0/24 117.121.230.0/24 117.121.236.0/24 117.121.238.0/24 Signature Algorithm: sha256WithRSAEncryption 35:71:a1:20:79:6b:0e:80:a5:58:37:eb:c8:b4:78:d7:48:20: be:bb:7a:f5:4e:e0:79:3d:ad:fb:93:66:27:5b:fb:24:d5:44: 4e:40:af:e3:43:97:ec:bb:d4:ec:2f:1b:92:bc:78:55:c9:7a: 31:a6:5f:33:1b:31:da:b4:cd:99:17:e9:5c:82:80:78:d6:0f: c8:36:16:84:ad:61:96:68:4d:25:ad:5b:8b:dc:f6:c2:3a:24: 2e:ca:77:b7:ff:88:d8:13:c1:97:21:4f:d4:c7:e8:a8:9f:db: 1b:a5:e6:a7:65:59:ca:0f:b4:2a:3f:80:ac:a3:31:45:11:22: b4:b2:7c:b0:22:25:75:f6:aa:17:cb:7d:1d:49:da:b6:3c:2f: 58:79:f8:5f:ab:0f:03:49:b2:3a:74:a5:23:2c:0a:f0:08:7a: 0c:d0:d0:2e:38:c7:1b:ba:8a:fa:fc:45:25:d9:8c:d9:db:4b: 67:d6:ed:67:6e:51:0f:e0:56:8a:05:69:26:3c:da:9e:d6:34: 8a:91:3c:41:76:ea:9e:6d:ef:19:1c:32:87:47:06:6e:ce:3a: d6:91:ae:71:8c:f7:3b:37:b7:d7:bd:63:3f:aa:c9:ba:29:e0: d7:92:a3:5d:e7:00:7e:11:69:8a:59:51:b2:10:3d:e6:5a:5b: 90:c1:f6:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICC08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjQwODAyMDU0MDU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmFjNzE2OS1jYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuXwYPMBhJO/nqb95/wW4JQiiv8et0X0QKTF9k8d6yFfnvt9C+PVNtCe4F5u rUTqi7Y1lC7nadAxo24XAaFP+xm1hXKYBshJJkBcJaI4P2IBxfAIOfzVis6Q+uTj sM6KRooiCNv4RueN/hmg9uNeHAUSfLe2z9ds7ZaCwnR5YvAocn/N4IcMmh8D48di NTDKFIpToSgxLdiaZEmO7qCOv+XL8CeghSO50QjWDlsn+6plz8Gm+KO5bVBvviy8 +jdrrVnZb/9E2uapwyyIPL25z38abttecpfm8cstsM5KztFT4d/JPCGfSJP0eQHs 9r2l/tDKkagcmezWN0qJIsdK2wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCNAhExd qKJeNEhUjBn4xJ0+bB49MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0E4MjJGNjA1 MDkxMTFFRjlFNDA0MDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAbbxEDBAB1eeYDBAB1eewDBAB1ee4wDQYJKoZIhvcNAQEL BQADggEBADVxoSB5aw6ApVg368i0eNdIIL67evVO4Hk9rfuTZidb+yTVRE5Ar+ND l+y71OwvG5K8eFXJejGmXzMbMdq0zZkX6VyCgHjWD8g2FoStYZZoTSWtW4vc9sI6 JC7Kd7f/iNgTwZchT9TH6Kif2xul5qdlWcoPtCo/gKyjMUURIrSyfLAiJXX2qhfL fR1J2rY8L1h5+F+rDwNJsjp0pSMsCvAIegzQ0C44xxu6ivr8RSXZjNnbS2fW7Wdu UQ/gVooFaSY82p7WNIqRPEF26p5t7xkcModHBm7OOtaRrnGM9zs3t9e9Yz+qybop 4NeSo13nAH4RaYpZUbIQPeZaW5DB9pw= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org