$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa File: 562B3D3E7A9411ED91BE2586C4F9AE02.roa (raw, json) Hash identifier: k8fSvVdIYZ3BTVwLHSHdazxXSeCJ4c1LTVMkZVzSkoc= Subject key identifier: 10:D8:9C:9C:B5:CB:A7:A3:B1:EE:50:95:C4:8B:62:88:2C:69:3C:F7 Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 7A Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa Signing time: Sat 29 Jul 2023 04:24:32 +0000 ROA not before: Sat 29 Jul 2023 04:24:32 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 4826 IP address blocks: 45.117.24.0/24 maxlen: 24 45.117.25.0/24 maxlen: 24 45.117.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Jul 29 04:24:32 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c4947f-d4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:cf:c4:42:fc:e7:5d:83:e6:80:00:1d:3c: 2a:5f:06:c8:4f:c3:b9:34:c8:ac:7d:95:fd:52:59: b5:5d:7a:ba:21:7c:9d:fe:40:a3:b8:50:41:a8:98: ef:92:07:4e:69:50:e1:2e:a8:43:57:d4:95:01:27: c4:b2:60:ed:0b:14:a9:6e:21:18:62:67:a4:7c:4e: d1:24:a1:c7:47:37:fd:d4:ec:63:2c:ba:f3:c2:2d: 00:11:2f:ff:97:cc:7b:a2:e8:cf:97:23:7a:01:7c: 93:99:fb:a7:dd:b2:3f:e3:a4:a0:93:ea:14:61:2e: 42:b6:0b:cc:48:a6:d0:10:0a:bc:87:79:27:b4:9a: 8c:07:82:ef:4c:3e:0f:e0:fb:f9:6d:3e:c6:78:fe: 0f:07:fb:d4:95:38:e9:c6:0e:75:41:99:d2:18:41: 7a:be:5a:b5:b4:88:28:42:2d:cc:93:f7:04:ab:e3: 26:a5:52:c4:f6:8a:a0:20:61:2c:59:a3:b1:fc:ff: 87:48:5e:3b:bd:50:39:0c:d5:ab:6f:59:4b:92:72: 88:d5:6e:2f:28:b9:ed:6a:0f:63:c4:d7:52:08:2d: ab:d5:f5:b6:95:c8:9d:cd:e3:81:df:5c:a6:5d:e7: a3:75:b6:b8:8c:32:6f:b8:98:23:d5:ae:e0:05:11: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D8:9C:9C:B5:CB:A7:A3:B1:EE:50:95:C4:8B:62:88:2C:69:3C:F7 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/562B3D3E7A9411ED91BE2586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.24.0-45.117.26.255 Signature Algorithm: sha256WithRSAEncryption 60:50:7a:21:56:56:00:a4:6c:5e:7a:c0:04:97:04:c0:ed:48: 4f:6b:2a:e7:42:7e:ca:13:ee:c0:f2:6c:6e:40:f7:2d:96:b8: 66:c5:4d:ea:5f:61:39:06:4c:fb:22:af:76:6b:5b:aa:35:0d: 82:26:9d:77:55:45:63:f9:67:33:df:b2:8d:9a:12:51:c6:ec: ba:03:9a:fb:5a:5a:dc:82:e5:79:db:5b:d8:9b:d4:3b:b7:85: 82:b8:19:1d:b9:52:b0:2b:6e:f5:4f:2e:a6:27:5e:96:8f:e7: 56:fe:8f:d8:25:ac:88:1f:4f:4e:f8:36:07:99:4e:42:34:96: 35:69:62:96:66:f7:cf:f0:84:63:ef:58:91:ec:c2:3f:3c:62: e5:bf:51:7b:ab:95:e4:31:a2:9d:28:8e:b4:ea:84:d9:83:44: a7:34:be:26:d0:45:31:c9:c8:44:36:03:5c:74:1b:79:89:b6: ac:bf:9e:34:bb:92:bf:ec:c2:b9:d2:e9:e5:b1:56:0a:05:f2: d0:a2:df:39:db:4e:08:a0:81:17:a0:d0:af:5c:d8:c4:68:b6: 86:5b:04:77:1d:ff:cb:9e:3b:21:22:ce:48:ad:3f:2c:52:3b: 5b:ac:2e:bb:67:77:2a:49:b8:08:55:a0:0c:8c:d9:4b:df:61: 0b:29:3a:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0U5OTExMC8GA1UEBRMoRTI1MzREMjZDNzhDOTcwMTc5MDk5NjQzOEMxMTQxMDgy NTQ3NzZBQTAeFw0yMzA3MjkwNDI0MzJaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY0YzQ5NDdmLWQ0ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/s/EQvznXYPmgAAdPCpfBshPw7k0yKx9lf1SWbVderohfJ3+QKO4UEGomO+S B05pUOEuqENX1JUBJ8SyYO0LFKluIRhiZ6R8TtEkocdHN/3U7GMsuvPCLQARL/+X zHui6M+XI3oBfJOZ+6fdsj/jpKCT6hRhLkK2C8xIptAQCryHeSe0mowHgu9MPg/g +/ltPsZ4/g8H+9SVOOnGDnVBmdIYQXq+WrW0iChCLcyT9wSr4yalUsT2iqAgYSxZ o7H8/4dIXju9UDkM1atvWUuScojVbi8oue1qD2PE11IILavV9baVyJ3N44HfXKZd 56N1triMMm+4mCPVruAFEaY5AgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUENicnLXL p6Ox7lCVxItiiCxpPPcwHwYDVR0jBBgwFoAU4lNNJseMlwF5CZZDjBFBCCVHdqow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RTk5LzBBQ0UxOUIwN0E4 NTExRURBRDY5Mjg4N0M0RjlBRTAyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxOTkpzZU1sd0Y1Q1paRGpCRkJDQ1ZIZHFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi81NjJCM0QzRTdB OTQxMUVEOTFCRTI1ODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQDLXUYAwQALXUaMA0GCSqGSIb3DQEBCwUAA4IBAQBgUHoh VlYApGxeesAElwTA7UhPayrnQn7KE+7A8mxuQPctlrhmxU3qX2E5Bkz7Iq92a1uq NQ2CJp13VUVj+Wcz37KNmhJRxuy6A5r7WlrcguV521vYm9Q7t4WCuBkduVKwK271 Ty6mJ16Wj+dW/o/YJayIH09O+DYHmU5CNJY1aWKWZvfP8IRj71iR7MI/PGLlv1F7 q5XkMaKdKI606oTZg0SnNL4m0EUxychENgNcdBt5ibasv540u5K/7MK50unlsVYK BfLQot85204IoIEXoNCvXNjEaLaGWwR3Hf/LnjshIs5IrT8sUjtbrC67Z3cqSbgI VaAMjNlL32ELKTrM -----END CERTIFICATE-----Generated at Fri May 17 06:18:04 2024 by rpki-client on console-fra.rpki-client.org