$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa File: 2CF180F0809511EFB8A82822C4F9AE02.roa (raw, json) Hash identifier: lDDEBm32JM0cQu/+f4XIWY3ZcR0OwELlDosv7tiA0ls= Subject key identifier: 56:10:43:03:CB:91:AB:3F:E6:5C:2A:54:80:DA:D5:2C:6F:1A:1B:63 Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 15ED Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa Signing time: Wed 02 Oct 2024 08:06:07 +0000 ROA not before: Wed 02 Oct 2024 08:06:07 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.208.0/20 maxlen: 20 27.111.224.0/22 maxlen: 22 27.111.232.0/21 maxlen: 21 101.97.64.0/22 maxlen: 22 101.97.72.0/21 maxlen: 21 101.97.80.0/21 maxlen: 21 118.103.180.0/22 maxlen: 22 202.79.192.0/22 maxlen: 22 202.79.196.0/23 maxlen: 23 202.79.200.0/21 maxlen: 21 202.79.208.0/20 maxlen: 20 2403:b100::/32 maxlen: 32 2403:b101::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5613 (0x15ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: Oct 2 08:06:07 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66fcfeee-49cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:26:af:1e:47:a0:ec:ca:0d:b6:6f:62:83:7f: 70:b6:3a:a0:1a:34:0c:3d:ac:8e:22:0f:ae:ea:0e: 41:64:65:c7:81:08:ce:fd:96:2e:52:06:d1:a1:32: 04:af:1f:c8:07:22:48:7c:e6:67:40:81:ee:c2:00: 8d:1f:3b:16:21:ef:66:e8:0a:ef:0e:c5:b3:2e:28: e5:dd:ad:44:0d:69:b7:2c:54:61:77:44:6b:36:18: e6:4d:4b:d9:ca:eb:41:9a:1c:c4:7d:3a:cd:69:0e: 2e:b5:78:d3:04:9f:27:f5:1d:84:91:51:8c:dc:3e: fd:ed:c9:c1:1b:ab:a1:27:74:92:20:2f:f0:1d:14: d8:17:23:bc:8b:34:22:e1:f5:ab:c4:e3:d5:d7:6e: e5:26:9a:99:78:b4:32:e7:cd:08:4b:30:8c:3c:5c: 50:a3:26:9b:44:c0:d3:ec:0c:8a:f1:eb:38:48:45: 0d:98:38:08:84:72:e8:c1:27:e3:3d:1c:b0:96:8f: 62:60:5d:13:2a:52:38:c5:05:3b:84:18:1d:2e:c6: ad:03:01:a8:60:2b:b4:07:9a:e7:de:f9:37:93:77: 71:e9:90:97:1a:ce:ac:de:73:d3:a1:bb:57:c2:aa: 0b:b6:6e:5d:10:c4:7d:4e:8c:e2:d3:0e:e7:be:75: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:43:03:CB:91:AB:3F:E6:5C:2A:54:80:DA:D5:2C:6F:1A:1B:63 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.208.0-27.111.227.255 27.111.232.0/21 101.97.64.0/22 101.97.72.0-101.97.87.255 118.103.180.0/22 202.79.192.0-202.79.197.255 202.79.200.0-202.79.223.255 IPv6: 2403:b100::-2403:b101:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ab:47:5f:6a:19:f2:f8:3f:f9:ad:9d:13:ef:a8:11:6d:19:52: e7:36:07:43:20:43:b3:25:ed:25:26:8a:90:f3:60:06:30:b1: 31:f3:94:cc:88:c1:f8:4c:18:65:2d:8b:68:bf:70:4f:1c:ba: 51:45:5e:8e:94:46:4b:be:9e:eb:74:3e:7e:2e:43:0d:8c:2f: 40:86:8a:84:37:92:8c:97:44:d8:ab:3d:ad:3a:3f:a1:3d:8c: 2d:a1:17:07:36:a5:55:da:64:aa:2a:fb:4d:87:be:7e:c0:4f: b6:16:a5:9d:35:c7:f8:0e:c3:88:b1:ef:b2:ca:c4:20:42:6b: 8f:de:43:2f:84:10:43:1c:c1:1e:21:6b:41:fd:3e:ea:05:9b: 85:ae:27:30:37:c1:72:2f:ae:96:b7:e9:d6:4d:24:c3:b8:51: 38:04:7c:5d:33:30:ad:d2:80:3b:30:21:7f:97:cb:c5:31:17: 8e:be:05:b5:03:ad:64:76:97:cc:d5:3a:32:b3:12:f6:67:d6: 79:a9:08:67:5a:ff:25:6c:86:95:c5:53:da:e6:8d:3c:40:6c: 87:7a:57:07:99:75:c1:5b:ef:13:7f:e2:0a:9e:2c:93:e6:66: 49:c5:60:c0:bf:40:80:c9:50:56:a1:60:2e:73:82:e0:7e:0b: 06:ff:dc:97 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgICFe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjQxMDAyMDgwNjA3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZjZmVlZS00OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yavHkeg7MoNtm9ig39wtjqgGjQMPayOIg+u6g5BZGXHgQjO/ZYuUgbRoTIE rx/IByJIfOZnQIHuwgCNHzsWIe9m6ArvDsWzLijl3a1EDWm3LFRhd0RrNhjmTUvZ yutBmhzEfTrNaQ4utXjTBJ8n9R2EkVGM3D797cnBG6uhJ3SSIC/wHRTYFyO8izQi 4fWrxOPV127lJpqZeLQy580ISzCMPFxQoyabRMDT7AyK8es4SEUNmDgIhHLowSfj PRywlo9iYF0TKlI4xQU7hBgdLsatAwGoYCu0B5rn3vk3k3dx6ZCXGs6s3nPTobtX wqoLtm5dEMR9Tozi0w7nvnWqnwIDAQABo4IC8TCCAu0wHQYDVR0OBBYEFFYQQwPL kas/5lwqVIDa1SxvGhtjMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvMkNGMTgwRjA4 MDk1MTFFRkI4QTgyODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwewYIKwYBBQUHAQcBAf8E bDBqMFAEAgABMEowDAMEBBtv0AMEAhtv4AMEAxtv6AMEAmVhQDAMAwQDZWFIAwQD ZWFQAwQCdme0MAwDBAbKT8ADBAHKT8QwDAMEA8pPyAMEBcpPwDAWBAIAAjAQMA4D BAAkA7EDBgAkA7EBADANBgkqhkiG9w0BAQsFAAOCAQEAq0dfahny+D/5rZ0T76gR bRlS5zYHQyBDsyXtJSaKkPNgBjCxMfOUzIjB+EwYZS2LaL9wTxy6UUVejpRGS76e 63Q+fi5DDYwvQIaKhDeSjJdE2Ks9rTo/oT2MLaEXBzalVdpkqir7TYe+fsBPthal nTXH+A7DiLHvssrEIEJrj95DL4QQQxzBHiFrQf0+6gWbha4nMDfBci+ulrfp1k0k w7hROAR8XTMwrdKAOzAhf5fLxTEXjr4FtQOtZHaXzNU6MrMS9mfWeakIZ1r/JWyG lcVT2uaNPEBsh3pXB5l1wVvvE3/iCp4sk+ZmScVgwL9AgMlQVqFgLnOC4H4LBv/c lw== -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org