$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa File: DA7F8A1478E611E7AEAB9A41C4F9AE02.roa (raw, json) Hash identifier: f2xfdjt5L6ii+q40owTSoerJo2iUinwQIXlKTQ56Lok= Subject key identifier: B4:33:97:8D:71:C0:E0:10:20:C9:46:8A:25:CF:64:A2:45:83:AE:A4 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 336D Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa Signing time: Tue 30 Jan 2024 16:13:02 +0000 ROA not before: Tue 30 Jan 2024 16:13:01 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 58396 IP address blocks: 27.54.116.0/22 maxlen: 22 27.54.116.0/24 maxlen: 24 27.54.117.0/24 maxlen: 24 27.54.118.0/24 maxlen: 24 27.54.119.0/24 maxlen: 24 103.11.21.0/24 maxlen: 24 103.11.222.0/24 maxlen: 24 103.225.172.0/23 maxlen: 23 103.225.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13165 (0x336d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 30 16:13:01 2024 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=65b9200d-ee99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:21:11:32:76:8a:c4:20:36:19:50:c3:0e: fc:d3:cf:cb:88:c4:3b:f1:a8:fc:b8:90:9c:cb:10: 34:82:49:af:31:f0:26:ca:65:e5:a4:16:72:f1:a0: 53:7f:74:8c:8c:c1:d2:80:c0:48:71:f6:34:54:10: 37:34:5e:00:f8:18:c7:5f:d8:80:d6:9f:98:c1:29: 45:5a:60:e9:67:44:36:a0:5c:64:a1:ae:97:93:ab: c2:cc:19:a1:0c:b3:d2:5d:e3:3e:bd:d8:d7:c0:fe: b5:a5:cd:fb:14:b3:a5:27:3d:89:47:a9:f6:5a:f7: e4:06:c8:52:0a:70:87:8a:c5:18:c6:4e:86:bd:71: c6:e0:05:02:16:92:87:e9:62:9f:2e:34:8a:f1:05: 54:88:01:54:48:b3:18:3d:68:f3:4d:99:9e:e0:9f: 47:cc:4e:fd:fc:d9:7e:44:e5:86:98:d8:e3:4f:cd: d6:30:f1:55:e6:04:95:e0:c1:aa:ec:e8:60:d4:8c: 58:d7:d8:5f:ce:39:de:69:21:28:25:c1:27:be:fd: 22:0d:c3:aa:79:01:b5:1a:67:d5:7d:66:25:d4:8f: 7f:9c:e0:2b:40:40:bc:c4:9b:8a:f9:55:7b:c9:86: 04:24:4d:01:9f:c3:3c:74:cd:ef:3e:91:6c:a4:d7: 40:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:33:97:8D:71:C0:E0:10:20:C9:46:8A:25:CF:64:A2:45:83:AE:A4 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.54.116.0/22 103.11.21.0/24 103.11.222.0/24 103.225.172.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:c1:11:4d:46:b2:c0:c2:79:7f:cd:1f:c1:e2:de:4f:7a:b8: 20:c3:96:8d:6b:14:06:c6:53:ef:ec:cd:03:54:a3:00:ef:70: 15:a6:ad:9d:f2:cd:e3:57:fd:1b:71:0c:9b:f8:70:45:9f:7f: 31:4e:d4:88:97:49:9e:e6:a1:52:01:43:fc:32:6f:e6:a4:76: 4a:14:68:22:a6:7d:4d:9a:3f:47:d5:b9:14:78:da:d9:85:14: a8:f8:ae:e3:19:5b:e0:3f:c2:76:83:f7:b3:06:a2:1b:15:1a: a0:65:54:11:04:f1:9b:a1:48:21:5e:76:c5:91:21:68:be:23: ac:46:c7:21:57:66:24:e5:fa:4c:3f:78:4e:8e:0d:3b:33:3d: c8:58:fb:e5:55:4c:c3:c6:39:18:ed:e6:85:b3:1f:f4:88:25: d4:97:68:ad:52:e9:cc:5f:db:f8:c1:3d:f7:3e:07:a2:7b:16: d1:91:e9:a4:67:7b:79:93:ae:74:05:a3:02:a1:3e:d9:ff:32: ca:37:d3:fa:2d:c5:dc:cb:87:34:03:3a:27:f7:32:ff:c5:24: f5:69:ec:7f:35:76:29:74:aa:c2:ae:9e:ff:23:88:c1:b7:e1: 5a:28:f7:05:8d:90:0a:9d:26:f8:41:e5:f1:a9:fc:6e:c6:37: db:50:f6:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICM20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMzAxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5MjAwZC1lZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmMhETJ2isQgNhlQww7808/LiMQ78aj8uJCcyxA0gkmvMfAmymXlpBZy8aBT f3SMjMHSgMBIcfY0VBA3NF4A+BjHX9iA1p+YwSlFWmDpZ0Q2oFxkoa6Xk6vCzBmh DLPSXeM+vdjXwP61pc37FLOlJz2JR6n2WvfkBshSCnCHisUYxk6GvXHG4AUCFpKH 6WKfLjSK8QVUiAFUSLMYPWjzTZme4J9HzE79/Nl+ROWGmNjjT83WMPFV5gSV4MGq 7Ohg1IxY19hfzjneaSEoJcEnvv0iDcOqeQG1GmfVfWYl1I9/nOArQEC8xJuK+VV7 yYYEJE0Bn8M8dM3vPpFspNdAHQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLQzl41x wOAQIMlGiiXPZKJFg66kMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvREE3RjhBMTQ3 OEU2MTFFN0FFQUI5QTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbNnQDBABnCxUDBABnC94DBAFn4awwDQYJKoZIhvcNAQEL BQADggEBAF7BEU1GssDCeX/NH8Hi3k96uCDDlo1rFAbGU+/szQNUowDvcBWmrZ3y zeNX/RtxDJv4cEWffzFO1IiXSZ7moVIBQ/wyb+akdkoUaCKmfU2aP0fVuRR42tmF FKj4ruMZW+A/wnaD97MGohsVGqBlVBEE8ZuhSCFedsWRIWi+I6xGxyFXZiTl+kw/ eE6ODTszPchY++VVTMPGORjt5oWzH/SIJdSXaK1S6cxf2/jBPfc+B6J7FtGR6aRn e3mTrnQFowKhPtn/Mso30/otxdzLhzQDOif3Mv/FJPVp7H81dil0qsKunv8jiMG3 4Voo9wWNkAqdJvhB5fGp/G7GN9tQ9ps= -----END CERTIFICATE-----Generated at Fri May 10 16:38:08 2024 by rpki-client on console-ams.rpki-client.org