$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa File: 6BCCFC3021C711ECAB50C72DC4F9AE02.roa (raw, json) Hash identifier: 5paZ0sxqeYLyASZiw8MaIFJfiYsQR4TZL3nEmpcEe5s= Subject key identifier: 56:F7:CB:7E:83:2C:E0:93:A1:BA:47:29:75:31:BE:AF:47:A8:EE:AE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89CC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa Signing time: Thu 30 May 2024 16:00:21 +0000 ROA not before: Thu 30 May 2024 16:00:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134871 IP address blocks: 27.0.228.0/24 maxlen: 24 27.0.231.0/24 maxlen: 24 103.208.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35276 (0x89cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:00:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a295-d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:c7:84:ab:08:60:5d:10:7e:9c:65:76:b7: 37:2f:09:a8:cb:aa:84:90:7c:78:7d:f8:e2:e0:9a: f8:7e:69:60:d3:0f:f8:7a:8a:09:53:ba:61:9d:6c: 10:9c:cc:08:c4:dd:9b:9f:32:53:65:77:5e:ac:6c: 5e:dc:33:90:76:90:02:6a:0e:ab:c6:1e:d3:b4:41: d0:cb:57:88:5d:fd:52:87:28:a8:68:8b:7e:b4:c6: b8:2c:9d:c6:90:18:9e:5f:fc:6a:e1:f8:8f:e4:4a: 7c:06:6d:86:16:5e:2a:34:99:4a:57:f6:09:e4:98: b8:40:da:27:57:67:ce:e9:9a:ae:0c:18:8b:fe:6c: 30:aa:7e:6a:c8:5b:ad:d6:bb:ec:bb:8a:8b:65:f6: 09:e1:b3:ae:86:82:65:59:56:3d:7c:a3:78:bb:3d: ae:50:dd:94:5c:2e:fa:98:3c:54:a9:2e:ab:6c:f3: eb:ef:7d:2d:da:54:24:9d:05:73:d1:a6:d2:23:b2: e7:d6:48:bc:38:41:66:f9:1a:1f:92:14:e8:16:0b: 83:c4:bb:74:57:02:16:0f:f6:eb:a9:5b:3e:97:d1: 82:50:36:61:0e:b3:b2:bd:26:14:ef:4f:e2:b4:42: 1f:8c:a6:ea:b5:89:1d:67:81:21:b6:c3:e5:72:6d: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F7:CB:7E:83:2C:E0:93:A1:BA:47:29:75:31:BE:AF:47:A8:EE:AE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.228.0/24 27.0.231.0/24 103.208.80.0/22 Signature Algorithm: sha256WithRSAEncryption 60:d3:27:1c:ad:42:ff:88:8f:a8:38:6d:e5:60:a4:82:2a:cc: 75:19:13:1f:f6:29:ec:92:e5:d1:56:20:00:46:46:28:20:9b: 9f:d8:ec:13:ab:ee:46:b8:24:23:39:9c:e9:94:18:0f:58:bd: a0:5c:1c:a5:a8:2a:0a:a2:b9:14:10:c2:17:88:ee:99:7f:71: 55:17:c8:b8:01:ba:d5:e6:80:6b:2f:6f:98:9d:95:a1:93:4d: 7b:95:60:a5:47:9b:d3:47:74:4c:cc:9a:11:a9:87:8a:89:64: 66:7f:e1:8a:33:0c:f8:35:4b:70:63:cc:99:34:82:eb:9a:13: 10:be:a5:b8:64:f1:88:49:3f:8a:59:af:e8:f1:29:90:89:0a: f7:bb:f0:2e:18:3a:0b:5f:1c:2a:04:02:d7:64:c7:d7:6e:39: 3f:cd:45:9e:8e:ee:37:c3:03:60:c4:48:f8:8b:b6:76:f1:8a: ca:d8:84:3c:93:fe:93:9d:3f:9f:fc:b0:dd:1e:48:d6:49:86: 2c:b7:a9:39:63:f8:ab:c6:5c:44:89:ec:df:ed:d8:e3:0c:33: 69:e7:1a:c5:12:c6:87:f0:65:0c:f1:7f:87:aa:8a:97:f0:5e: 21:92:90:09:b8:d2:13:8d:80:b0:02:6e:17:db:32:75:4a:02: 25:3d:26:71 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIDAInMMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAyMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyOTUtZDNiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhxx4SrCGBdEH6cZXa3Ny8JqMuqhJB8eH344uCa+H5pYNMP+HqKCVO6YZ1s EJzMCMTdm58yU2V3XqxsXtwzkHaQAmoOq8Ye07RB0MtXiF39UocoqGiLfrTGuCyd xpAYnl/8auH4j+RKfAZthhZeKjSZSlf2CeSYuEDaJ1dnzumargwYi/5sMKp+ashb rda77LuKi2X2CeGzroaCZVlWPXyjeLs9rlDdlFwu+pg8VKkuq2zz6+99LdpUJJ0F c9Gm0iOy59ZIvDhBZvkaH5IU6BYLg8S7dFcCFg/266lbPpfRglA2YQ6zsr0mFO9P 4rRCH4ym6rWJHWeBIbbD5XJtVxUCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBRW98t+ gyzgk6G6Ryl1Mb6vR6jurjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZCQ0NGQzMw MjFDNzExRUNBQjUwQzcyREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/ BBwwGjAYBAIAATASAwQAGwDkAwQAGwDnAwQCZ9BQMA0GCSqGSIb3DQEBCwUAA4IB AQBg0yccrUL/iI+oOG3lYKSCKsx1GRMf9inskuXRViAARkYoIJuf2OwTq+5GuCQj OZzplBgPWL2gXBylqCoKorkUEMIXiO6Zf3FVF8i4AbrV5oBrL2+YnZWhk017lWCl R5vTR3RMzJoRqYeKiWRmf+GKMwz4NUtwY8yZNILrmhMQvqW4ZPGIST+KWa/o8SmQ iQr3u/AuGDoLXxwqBALXZMfXbjk/zUWeju43wwNgxEj4i7Z28YrK2IQ8k/6TnT+f /LDdHkjWSYYst6k5Y/irxlxEiezf7djjDDNp5xrFEsaH8GUM8X+HqoqX8F4hkpAJ uNITjYCwAm4X2zJ1SgIlPSZx -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:25 2025 by rpki-client