$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa File: CF1EEA5232E311EFA2DDE95DC4F9AE02.roa (raw, json) Hash identifier: 2krmOJsDy3EDkhNEYGZKTSrjH+gKtv0W8Oseq3l01Q0= Subject key identifier: E4:65:39:B6:CD:EB:79:F2:9E:37:19:12:8B:45:FB:34:3B:5A:79:DA Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0525 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa Signing time: Wed 31 Jul 2024 02:34:00 +0000 ROA not before: Wed 31 Jul 2024 02:34:00 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55927 IP address blocks: 27.254.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Jul 31 02:34:00 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a9a298-f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:04:e8:7c:62:13:fe:97:52:61:98:12:a9: 9f:4c:78:62:a4:47:a8:44:5c:2d:a5:e8:d1:5a:23: 37:01:55:55:29:9e:45:49:92:da:b2:36:1e:d5:e6: c5:1e:85:21:03:fb:5e:3d:fc:dc:95:05:2d:4a:0a: 84:94:ef:01:e5:83:31:be:d4:05:a8:66:33:53:3c: fd:97:80:2a:2f:f7:85:95:cd:4d:6e:4b:a5:9d:66: 91:0c:f9:f4:61:fd:b7:cd:00:78:35:fb:d2:29:81: ff:98:82:4e:75:2c:7d:18:62:22:4f:ea:88:d6:3c: 67:1e:20:eb:57:87:bf:a4:61:6a:a6:f5:49:6d:cd: 0d:07:3e:71:62:c9:48:b7:18:d3:24:da:fc:9a:46: e7:8e:72:03:90:53:1f:0d:8f:6c:dd:34:c3:98:a9: ff:54:1f:05:8f:f2:80:d0:a2:82:e0:30:e4:c8:17: 15:9c:19:cb:fb:b1:e9:42:47:de:07:9a:aa:9f:0f: c5:86:ab:80:d7:e7:bb:79:2d:16:74:7b:d1:d6:52: 35:0f:97:da:f1:d2:39:a2:96:39:77:1a:88:00:7d: 0c:8c:3b:da:e1:e3:51:72:fc:9b:35:b1:77:67:73: ad:40:31:d2:0e:08:09:b3:7b:02:40:c6:fe:fa:f2: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:39:B6:CD:EB:79:F2:9E:37:19:12:8B:45:FB:34:3B:5A:79:DA X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.254.221.0/24 Signature Algorithm: sha256WithRSAEncryption 02:24:ab:da:d8:06:4f:a5:ff:8a:66:a6:1a:dd:a5:65:8a:8e: ff:fa:12:7c:05:e1:c1:ca:50:3a:b3:84:b6:98:69:c1:1e:fb: 92:b8:20:44:ae:fa:a6:b2:d1:a3:3b:3d:f0:8b:17:a2:91:90: b1:62:61:61:76:01:36:55:67:0a:b8:52:32:4d:45:0f:ba:c3: 69:7d:6a:84:3d:d2:05:57:f9:03:49:36:36:c5:da:3b:98:4b: bf:a5:6c:29:fb:bd:64:22:02:4c:50:15:b2:17:d9:c8:6e:3f: 3a:4f:e0:36:dd:c7:56:c3:41:c9:4b:4f:de:3f:b3:52:b4:06: ef:2f:03:2e:ba:1a:81:84:9e:a2:7a:28:c8:59:c5:9e:76:c0: b2:69:ed:93:66:34:20:78:5a:54:86:fa:f7:59:fc:89:ff:86: 5b:a2:70:a4:bf:59:2b:36:c0:ca:bf:29:ba:49:a0:4d:3b:78: 9d:c0:18:ef:a0:64:76:55:8c:98:88:7c:b8:a6:6e:41:92:fa: 1e:bd:60:65:86:41:c7:2f:05:24:ff:12:bf:30:4c:30:e4:e6: ae:f8:22:14:25:95:9e:2a:2d:a3:05:31:c6:37:97:29:8a:6e: cc:21:87:85:a9:8d:bc:e6:ce:a1:cf:a9:b0:19:c4:5c:10:a4: dc:64:a2:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwNzMxMDIzNDAwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5YTI5OC1mMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIQE6HxiE/6XUmGYEqmfTHhipEeoRFwtpejRWiM3AVVVKZ5FSZLasjYe1ebF HoUhA/tePfzclQUtSgqElO8B5YMxvtQFqGYzUzz9l4AqL/eFlc1NbkulnWaRDPn0 Yf23zQB4NfvSKYH/mIJOdSx9GGIiT+qI1jxnHiDrV4e/pGFqpvVJbc0NBz5xYslI txjTJNr8mkbnjnIDkFMfDY9s3TTDmKn/VB8Fj/KA0KKC4DDkyBcVnBnL+7HpQkfe B5qqnw/FhquA1+e7eS0WdHvR1lI1D5fa8dI5opY5dxqIAH0MjDva4eNRcvybNbF3 Z3OtQDHSDggJs3sCQMb++vL3rQIDAQABo4IClTCCApEwHQYDVR0OBBYEFORlObbN 63nynjcZEotF+zQ7WnnaMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQ0YxRUVBNTIz MkUzMTFFRkEyRERFOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAb/t0wDQYJKoZIhvcNAQELBQADggEBAAIkq9rYBk+l/4pm phrdpWWKjv/6EnwF4cHKUDqzhLaYacEe+5K4IESu+qay0aM7PfCLF6KRkLFiYWF2 ATZVZwq4UjJNRQ+6w2l9aoQ90gVX+QNJNjbF2juYS7+lbCn7vWQiAkxQFbIX2chu PzpP4Dbdx1bDQclLT94/s1K0Bu8vAy66GoGEnqJ6KMhZxZ52wLJp7ZNmNCB4WlSG +vdZ/In/hluicKS/WSs2wMq/KbpJoE07eJ3AGO+gZHZVjJiIfLimbkGS+h69YGWG QccvBST/Er8wTDDk5q74IhQllZ4qLaMFMcY3lymKbswhh4WpjbzmzqHPqbAZxFwQ pNxkorU= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org