$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa File: 7F27A9D6C88211EBB7A6F948C4F9AE02.roa (raw, json) Hash identifier: iMlOmr2fNq87x6S0R4H0l10i8IQao1B6aqgg50klXMo= Subject key identifier: A4:F7:71:16:E2:6E:8D:3A:1C:1D:53:92:25:ED:03:55:D4:2F:64:8F Certificate issuer: /CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Certificate serial: 04F0 Authority key identifier: 51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa Signing time: Sat 11 May 2024 01:34:42 +0000 ROA not before: Sat 11 May 2024 01:34:42 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 56270 IP address blocks: 203.1.8.0/24 maxlen: 24 203.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1B9/serialNumber=513F2077D8AD911AC77B5B5C59B3E214C78B023B Validity Not Before: May 11 01:34:42 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663ecb32-cf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:16:48:1b:ad:7f:3d:72:d0:46:9f:9c:df: cd:69:6b:a1:43:06:c8:91:ff:ef:90:35:9e:e9:7c: df:d7:1b:eb:e2:8e:6a:b3:3d:25:d0:0b:b9:2a:09: cb:13:43:b6:4b:8c:ec:69:1d:ea:c0:4b:46:a0:03: 86:c9:4f:70:86:ca:84:2d:83:71:10:9b:a7:d9:db: 39:8d:e8:e9:71:5a:68:bb:7c:4e:35:f7:52:52:04: e4:83:05:17:97:98:4c:5d:83:e9:91:17:12:93:de: 30:1e:b8:6c:c9:5e:7f:15:4d:82:b1:b2:96:c7:d2: a9:2f:24:de:e8:6d:d9:0e:27:de:46:d7:13:9d:b5: 0a:1b:1b:ba:ef:51:af:61:08:30:97:22:4d:a0:9d: be:71:2d:2e:5a:0a:ac:d7:49:1e:4f:67:f7:0c:bb: da:1a:f2:5f:5b:ba:14:30:e7:bc:1b:de:05:ff:85: 66:e3:73:76:8c:ea:17:15:0c:8a:08:00:91:4c:79: c4:4b:97:46:ec:e3:4b:19:2e:8a:c5:4d:e8:36:a6: 6d:bc:cb:49:9f:d6:14:a8:76:54:cd:c9:d6:85:6a: 43:29:76:71:23:94:be:16:49:38:83:a1:54:4d:4f: da:b1:ca:ae:bb:c5:82:8e:8f:d0:22:42:4a:6d:e9: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F7:71:16:E2:6E:8D:3A:1C:1D:53:92:25:ED:03:55:D4:2F:64:8F X509v3 Authority Key Identifier: keyid:51:3F:20:77:D8:AD:91:1A:C7:7B:5B:5C:59:B3:E2:14:C7:8B:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/UT8gd9itkRrHe1tcWbPiFMeLAjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT8gd9itkRrHe1tcWbPiFMeLAjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1B9/CDB702F6C87B11EBAFA6953BC4F9AE02/7F27A9D6C88211EBB7A6F948C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.1.8.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:e7:23:fa:c5:70:e5:56:37:fa:57:46:92:fe:b6:da:01:22: 03:97:58:ff:ef:20:e1:d0:e4:78:7a:48:f6:fd:34:71:c9:75: 05:14:3a:51:12:3d:fe:c6:2b:b3:94:c5:f3:a6:b7:b8:2b:68: e6:9c:d7:0b:68:71:ff:5b:21:52:c0:ef:23:5c:42:08:cb:a7: 3a:e0:b0:0e:ca:1c:a4:4c:cd:c5:ca:87:4f:0c:db:36:5f:53: 77:9f:16:b1:e4:63:a2:10:52:10:95:3b:c4:61:4b:ea:ac:b9: 41:5e:22:28:a0:f1:b6:ee:3b:1d:03:0a:f0:90:a0:ad:d6:13: 99:df:a0:7c:87:4f:45:4d:ae:cf:d5:d6:29:ff:3a:1a:1a:dc: 33:8b:c1:46:e4:03:30:aa:fb:fc:4c:3f:c7:37:1e:c7:6b:6a: 57:73:67:75:4d:08:c4:5c:c8:db:51:b8:6e:6b:24:d3:81:88: b6:ab:03:ab:b1:01:9f:57:3e:51:3b:54:5f:2d:36:06:2a:d0: 2b:f2:6c:4c:d7:af:b3:73:83:93:7c:8d:fd:43:fc:d9:56:14: 80:ab:bd:63:f6:6a:46:2d:dc:84:84:e9:da:01:ac:ad:ee:6c: b3:0f:86:c9:7d:87:2a:fc:d8:17:a6:fb:fa:6f:8f:5a:89:8b: 76:1d:53:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxQjkxMTAvBgNVBAUTKDUxM0YyMDc3RDhBRDkxMUFDNzdCNUI1QzU5QjNFMjE0 Qzc4QjAyM0IwHhcNMjQwNTExMDEzNDQyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlY2IzMi1jZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG0WSButfz1y0EafnN/NaWuhQwbIkf/vkDWe6Xzf1xvr4o5qsz0l0Au5KgnL E0O2S4zsaR3qwEtGoAOGyU9whsqELYNxEJun2ds5jejpcVpou3xONfdSUgTkgwUX l5hMXYPpkRcSk94wHrhsyV5/FU2CsbKWx9KpLyTe6G3ZDifeRtcTnbUKGxu671Gv YQgwlyJNoJ2+cS0uWgqs10keT2f3DLvaGvJfW7oUMOe8G94F/4Vm43N2jOoXFQyK CACRTHnES5dG7ONLGS6KxU3oNqZtvMtJn9YUqHZUzcnWhWpDKXZxI5S+Fkk4g6FU TU/ascquu8WCjo/QIkJKbembIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKT3cRbi bo06HB1TkiXtA1XUL2SPMB8GA1UdIwQYMBaAFFE/IHfYrZEax3tbXFmz4hTHiwI7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFCOS9DREI3MDJGNkM4 N0IxMUVCQUZBNjk1M0JDNEY5QUUwMi9VVDhnZDlpdGtSckhlMXRjV2JQaUZNZUxB anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VUOGdkOWl0a1JySGUxdGNXYlBpRk1lTEFqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxQjkvQ0RCNzAyRjZDODdCMTFFQkFGQTY5NTNCQzRGOUFFMDIvN0YyN0E5RDZD ODgyMTFFQkI3QTZGOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLAQgwDQYJKoZIhvcNAQELBQADggEBAI7nI/rFcOVWN/pX RpL+ttoBIgOXWP/vIOHQ5Hh6SPb9NHHJdQUUOlESPf7GK7OUxfOmt7graOac1wto cf9bIVLA7yNcQgjLpzrgsA7KHKRMzcXKh08M2zZfU3efFrHkY6IQUhCVO8RhS+qs uUFeIiig8bbuOx0DCvCQoK3WE5nfoHyHT0VNrs/V1in/Ohoa3DOLwUbkAzCq+/xM P8c3HsdraldzZ3VNCMRcyNtRuG5rJNOBiLarA6uxAZ9XPlE7VF8tNgYq0CvybEzX r7Nzg5N8jf1D/NlWFICrvWP2akYt3ISE6doBrK3ubLMPhsl9hyr82Bem+/pvj1qJ i3YdUzE= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:16 2024 by rpki-client on console-fra.rpki-client.org