$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa File: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (raw, json) Hash identifier: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA= Subject key identifier: C6:6B:E7:C8:2F:89:23:1C:A8:E0:75:54:BA:72:58:AE:03:6B:28:AF Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0C67 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa Signing time: Mon 02 Dec 2024 18:36:48 +0000 ROA not before: Mon 02 Dec 2024 18:36:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 63005 IP address blocks: 27.126.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB Validity Not Before: Dec 2 18:36:48 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dfe40-f8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:81:eb:4f:bb:fe:11:d2:94:e7:4b:43:4f: 5c:53:d2:bf:31:c3:73:54:d0:51:c1:e2:2b:4f:ab: 67:eb:31:61:a9:41:be:49:c0:ff:eb:62:07:3e:87: 1e:99:ae:fa:aa:36:ea:73:35:8e:37:6e:a2:c4:35: 47:34:ce:55:6e:f9:05:f2:39:19:e3:a0:44:f9:ad: d3:85:cf:a9:63:4c:f6:47:6a:1f:d4:5c:e5:56:19: cf:0d:8e:89:12:7f:7d:cb:79:f8:42:5f:95:c7:82: 8f:72:09:20:dc:64:f6:ee:12:83:3e:ba:ec:73:67: b1:f8:de:b3:3f:e8:d5:e4:a5:c5:c1:28:2f:80:9a: ef:0a:eb:96:77:50:ab:33:6d:e3:11:14:f9:1b:5a: 10:59:e9:d1:7d:d9:4d:82:1c:fb:0b:92:fa:d2:a5: 49:83:a3:a2:2d:36:c1:ca:7a:aa:10:4a:f5:f4:d4: cf:1e:73:cc:18:29:65:db:6d:34:f7:40:b8:9b:13: 17:57:63:6e:3b:fd:91:8d:63:c4:1c:ef:60:ef:69: 63:22:9b:f8:1f:e7:a1:9e:1b:68:d0:cb:1e:5f:fb: ea:ca:1a:54:d8:de:86:5d:5c:ea:90:e4:2e:a2:73: 1c:71:47:c4:00:a4:8f:64:a3:fa:54:ac:aa:9f:91: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:E7:C8:2F:89:23:1C:A8:E0:75:54:BA:72:58:AE:03:6B:28:AF X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:21:6c:bd:47:5e:51:fa:5c:de:33:ad:05:40:db:fa:39:83: 40:5e:c5:fc:a1:9b:05:2f:10:a5:bd:18:e1:11:08:6c:14:91: 71:5f:61:ac:70:c1:96:75:67:0d:b6:7f:4b:97:5d:95:d4:f6: 01:bc:de:13:3b:11:dc:b0:24:16:8d:c5:f4:08:3e:0a:b3:11: 97:26:83:92:9e:c8:7b:84:f0:a8:3e:20:ff:cf:4b:cc:93:09: 32:76:c9:90:92:7c:59:1d:3c:13:f3:c6:1b:15:40:1d:1e:c8: 8d:6a:1f:31:76:8a:0a:4d:ee:0f:af:29:e8:93:cc:bf:c0:7b: e8:a7:79:ed:6c:77:14:7f:a9:65:55:47:d2:42:47:df:38:ab: 20:1d:4b:d6:bd:11:47:09:39:0e:7b:7d:9e:76:9f:85:ec:2b: f9:64:71:d6:02:0f:54:d9:4e:b7:17:b9:7b:9f:89:2a:94:c2: 43:ad:6e:6b:41:ab:55:0a:67:9f:5d:1f:94:02:21:8b:b5:29: 93:61:51:3e:87:44:28:4c:e1:69:af:85:c8:3e:01:cc:27:d2: cc:b8:94:26:1f:86:86:5a:aa:f5:45:bd:c5:66:55:c8:24:d8: c3:60:3c:e0:36:66:80:13:82:61:c3:eb:ae:98:08:e1:b5:f2: b2:b8:d2:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjQxMjAyMTgzNjQ4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkZmU0MC1mOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NaB60+7/hHSlOdLQ09cU9K/McNzVNBRweIrT6tn6zFhqUG+ScD/62IHPoce ma76qjbqczWON26ixDVHNM5VbvkF8jkZ46BE+a3Thc+pY0z2R2of1FzlVhnPDY6J En99y3n4Ql+Vx4KPcgkg3GT27hKDPrrsc2ex+N6zP+jV5KXFwSgvgJrvCuuWd1Cr M23jERT5G1oQWenRfdlNghz7C5L60qVJg6OiLTbBynqqEEr19NTPHnPMGCll2200 90C4mxMXV2NuO/2RjWPEHO9g72ljIpv4H+ehnhto0MseX/vqyhpU2N6GXVzqkOQu onMccUfEAKSPZKP6VKyqn5FDfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMZr58gv iSMcqOB1VLpyWK4DayivMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkxRUIvNTBFRkUwNzRGNzA1MTFFOUFEQkE0NTFGQzRGOUFFMDIvN0Y0Q0IwMEVB QUU4MTFFQTg0MTI4MTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAbftEwDQYJKoZIhvcNAQELBQADggEBAI8hbL1HXlH6XN4z rQVA2/o5g0BexfyhmwUvEKW9GOERCGwUkXFfYaxwwZZ1Zw22f0uXXZXU9gG83hM7 EdywJBaNxfQIPgqzEZcmg5KeyHuE8Kg+IP/PS8yTCTJ2yZCSfFkdPBPzxhsVQB0e yI1qHzF2igpN7g+vKeiTzL/Ae+inee1sdxR/qWVVR9JCR984qyAdS9a9EUcJOQ57 fZ52n4XsK/lkcdYCD1TZTrcXuXufiSqUwkOtbmtBq1UKZ59dH5QCIYu1KZNhUT6H RChM4Wmvhcg+Acwn0sy4lCYfhoZaqvVFvcVmVcgk2MNgPOA2ZoATgmHD666YCOG1 8rK40oU= -----END CERTIFICATE-----Generated at Sat Apr 5 13:47:12 2025 by rpki-client