$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa File: 27C8A978636311EEB35FEF77C4F9AE02.roa (raw, json) Hash identifier: 5Q1zL9Y6ea7qsYPVO2/XeHTbNIbA5GYv7YB91BxjxsM= Subject key identifier: 08:46:6D:49:EF:FA:EF:D4:5E:95:22:24:82:04:93:66:70:11:8F:E3 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3897 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:48 +0000 ROA not before: Tue 16 Jul 2024 14:30:48 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151825 IP address blocks: 171.102.216.0/24 maxlen: 24 171.102.217.0/24 maxlen: 24 2001:fb0:10bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14487 (0x3897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:48 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968418-eed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:15:15:1b:9a:bc:00:21:22:a9:53:ba:25: 19:57:72:d1:92:f0:9e:7d:f1:07:c0:cc:51:50:9c: 5c:ad:d6:17:9b:af:6a:0a:c9:e5:ea:73:cd:25:ce: 28:56:7f:5b:be:61:f4:2c:5e:65:1f:71:3b:48:9d: a5:7c:37:93:9a:f7:22:8a:8c:00:5d:2e:ba:3e:48: 13:59:0e:12:ae:4f:74:73:90:92:aa:1c:44:72:2f: 70:9a:1e:d5:72:1b:61:86:94:3c:f2:30:d2:a5:57: ba:d4:73:6b:1d:ec:5d:32:4d:03:fe:18:c3:a2:77: af:a3:8f:b4:6b:07:b3:78:97:b2:c5:42:66:c5:cd: 2e:9f:ea:b5:2e:dc:c8:79:d1:0f:c5:5c:59:df:3d: 09:11:e7:d9:23:96:29:1d:5f:a5:a0:9d:ef:00:75: 17:d2:79:df:32:c9:83:4c:34:63:32:46:20:72:50: 0c:95:33:e1:61:b4:0a:e4:84:5c:df:c8:19:6c:21: 26:7d:86:12:bd:71:3c:b0:5c:92:85:72:af:e6:04: 4d:f4:e9:02:8f:5a:73:06:15:94:06:3b:83:b3:07: c9:0f:1a:f4:8a:88:65:b6:5b:e4:7f:5e:2e:7f:0d: fe:cf:37:3f:4a:dc:13:2e:7e:10:de:b4:7c:c0:dd: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:6D:49:EF:FA:EF:D4:5E:95:22:24:82:04:93:66:70:11:8F:E3 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/27C8A978636311EEB35FEF77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 171.102.216.0/23 IPv6: 2001:fb0:10bb::/48 Signature Algorithm: sha256WithRSAEncryption 7c:ea:25:f7:97:f0:c9:b4:25:fd:f6:a1:92:83:e0:bd:4b:fd: d0:44:0b:a4:82:c2:1b:0e:e4:d4:80:94:23:11:7a:ee:a0:90: 8a:6d:88:31:a4:40:54:e3:fa:62:e6:3d:3d:33:4f:9d:57:a0: f9:42:ca:d1:c0:ed:51:a0:71:31:bd:55:05:c6:a5:0c:e9:56: 0b:4c:24:7a:84:87:af:98:d4:be:f6:18:8c:e7:3d:bd:5d:3e: be:10:90:c7:97:bc:54:58:e9:f3:74:b6:ee:4d:4b:f8:aa:f1: 85:eb:08:96:9f:26:cc:87:45:db:f9:9a:c0:ec:0c:d3:93:10: e3:4e:ee:5f:5f:92:89:9d:76:17:a1:34:f0:08:7e:13:ad:cb: aa:49:98:7a:a1:0d:eb:a6:85:a3:04:94:6b:27:54:30:37:df: 45:18:f2:7d:d8:64:64:fe:34:72:fc:8f:b1:b3:5b:c7:59:dc: ea:b6:cd:e2:5e:5d:84:4e:7b:f0:39:35:7c:8c:72:ec:08:5a: 92:d0:67:92:44:aa:e4:17:f9:02:17:df:5f:ca:71:be:e7:15: 85:17:ae:d8:8a:80:39:23:e8:e5:14:95:d5:19:94:4c:2a:60: 1a:63:0a:b3:38:9d:19:20:17:62:1b:e5:0d:35:6d:94:5f:b5: 77:43:ac:35 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxOC1lZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCQVFRuavAAhIqlTuiUZV3LRkvCeffEHwMxRUJxcrdYXm69qCsnl6nPNJc4o Vn9bvmH0LF5lH3E7SJ2lfDeTmvciiowAXS66PkgTWQ4Srk90c5CSqhxEci9wmh7V chthhpQ88jDSpVe61HNrHexdMk0D/hjDonevo4+0awezeJeyxUJmxc0un+q1LtzI edEPxVxZ3z0JEefZI5YpHV+loJ3vAHUX0nnfMsmDTDRjMkYgclAMlTPhYbQK5IRc 38gZbCEmfYYSvXE8sFyShXKv5gRN9OkCj1pzBhWUBjuDswfJDxr0iohltlvkf14u fw3+zzc/StwTLn4Q3rR8wN04zwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAhGbUnv +u/UXpUiJIIEk2ZwEY/jMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMjdDOEE5Nzg2 MzYzMTFFRUIzNUZFRjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAGrZtgwDwQCAAIwCQMHACABD7AQuzANBgkqhkiG9w0BAQsF AAOCAQEAfOol95fwybQl/fahkoPgvUv90EQLpILCGw7k1ICUIxF67qCQim2IMaRA VOP6YuY9PTNPnVeg+ULK0cDtUaBxMb1VBcalDOlWC0wkeoSHr5jUvvYYjOc9vV0+ vhCQx5e8VFjp83S27k1L+KrxhesIlp8mzIdF2/mawOwM05MQ407uX1+SiZ12F6E0 8Ah+E63LqkmYeqEN66aFowSUaydUMDffRRjyfdhkZP40cvyPsbNbx1nc6rbN4l5d hE578Dk1fIxy7AhaktBnkkSq5Bf5AhffX8pxvucVhReu2IqAOSPo5RSV1RmUTCpg GmMKszidGSAXYhvlDTVtlF+1d0OsNQ== -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org