$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa File: 476F791A443E11EB8E268D3DC4F9AE02.roa (raw, json) Hash identifier: vuBLVhdsLTojEt3Vd8E/8BPdSidAp73q42YrygyHsOU= Subject key identifier: BB:B4:56:9A:6F:11:40:B7:B8:C4:9E:B6:94:90:B5:2E:6A:A1:FC:A1 Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 150B Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa Signing time: Mon 23 Oct 2023 08:43:18 +0000 ROA not before: Mon 23 Oct 2023 08:43:18 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 9989 IP address blocks: 27.111.208.0/20 maxlen: 20 27.111.220.0/24 maxlen: 24 27.111.224.0/22 maxlen: 22 27.111.232.0/22 maxlen: 22 27.111.236.0/23 maxlen: 23 27.111.238.0/23 maxlen: 23 101.97.64.0/22 maxlen: 22 118.103.180.0/22 maxlen: 22 118.103.183.0/24 maxlen: 24 202.79.192.0/22 maxlen: 22 202.79.196.0/24 maxlen: 24 202.79.197.0/24 maxlen: 24 202.79.200.0/21 maxlen: 21 202.79.208.0/20 maxlen: 20 202.79.209.0/24 maxlen: 24 2403:b100::/32 maxlen: 32 2403:b100::/33 maxlen: 33 2403:b100:7f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 17:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5387 (0x150b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: Oct 23 08:43:18 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65363226-9961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:a7:06:cc:77:80:fd:f7:b1:c2:d3:fa:de: 3f:78:b2:a7:f6:18:ba:ff:1e:43:59:27:92:3e:4c: ca:af:78:f2:b1:da:c3:c0:e0:b0:4f:70:47:e1:ec: 8f:e9:7e:b0:4c:75:b8:74:4d:e0:05:c1:28:2f:26: d9:7c:df:70:59:e2:e0:9f:72:2f:02:57:24:11:fd: 59:44:7a:24:76:88:90:c8:8e:b3:b4:f6:c1:7e:6b: 3b:fc:17:fc:1d:b6:8c:74:9b:35:79:62:15:e0:53: f6:54:c7:4c:86:e7:87:7f:a5:1b:95:60:b9:6e:5d: dc:eb:84:83:c3:2c:08:6e:0b:4f:e6:ea:98:d5:a2: d1:a4:de:f5:a1:d3:fe:81:f4:3c:03:63:65:bd:c3: 6e:5e:6c:8d:48:e1:15:15:97:d5:26:10:4a:f7:77: 4c:e2:03:b9:e8:3d:0d:e7:38:ac:3f:cd:9c:85:ac: e2:58:49:cc:c2:13:98:a0:a2:38:81:ea:58:86:7f: 06:6a:ad:0a:21:47:33:26:a3:92:30:ed:d2:de:bb: 93:51:74:e7:37:3e:1f:f1:83:35:ac:18:3e:59:dd: b2:aa:9c:93:89:40:03:67:64:23:2c:e5:51:28:95: 0a:67:81:45:85:16:7a:5e:80:78:22:ee:75:ec:7f: 71:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:56:9A:6F:11:40:B7:B8:C4:9E:B6:94:90:B5:2E:6A:A1:FC:A1 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/476F791A443E11EB8E268D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.208.0-27.111.227.255 27.111.232.0/21 101.97.64.0/22 118.103.180.0/22 202.79.192.0-202.79.197.255 202.79.200.0-202.79.223.255 IPv6: 2403:b100::/32 Signature Algorithm: sha256WithRSAEncryption bc:65:c3:f5:7f:2a:76:fa:99:62:a0:67:ef:87:7f:56:e3:03: 2b:2b:e9:25:b8:00:c0:d2:02:4b:c6:97:a0:e9:8c:5d:73:11: d9:2f:a8:16:ee:01:88:d5:f5:51:30:e9:a6:2b:40:7d:ea:22: a0:67:33:a7:a1:63:aa:ef:51:b4:d7:7d:48:a0:64:cf:20:ff: 55:5d:b4:00:72:b5:a2:9e:9e:73:ec:29:37:38:84:39:0e:d0: 02:2b:97:05:61:d0:ef:4f:32:49:14:4d:af:2a:11:0f:b8:2d: fb:a6:ab:e7:b2:64:96:64:d3:57:26:e2:7d:26:84:42:db:32: 1b:c8:28:99:ae:eb:06:33:d9:25:3a:23:22:8e:55:13:1c:a7: 0f:31:9d:64:99:5b:2a:3c:ae:7b:67:f5:42:bc:9a:b7:c6:32: 84:83:40:23:1a:44:63:62:39:ac:2b:fc:ad:17:65:41:12:95: 69:65:8a:5e:1f:da:db:d0:75:87:a9:8c:e2:00:6d:e6:d7:44: 14:d3:12:25:d7:5e:b5:45:81:8c:89:a3:55:16:44:98:a5:40: ac:bc:95:32:8c:72:a6:2f:f4:19:9d:ad:ac:ad:39:bf:4f:15: 1b:83:05:92:6d:65:e0:84:db:d0:c2:b7:ad:2e:b7:70:ea:97: 98:32:fb:57 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICFQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjMxMDIzMDg0MzE4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTM2MzIyNi05OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYenBsx3gP33scLT+t4/eLKn9hi6/x5DWSeSPkzKr3jysdrDwOCwT3BH4eyP 6X6wTHW4dE3gBcEoLybZfN9wWeLgn3IvAlckEf1ZRHokdoiQyI6ztPbBfms7/Bf8 HbaMdJs1eWIV4FP2VMdMhueHf6UblWC5bl3c64SDwywIbgtP5uqY1aLRpN71odP+ gfQ8A2NlvcNuXmyNSOEVFZfVJhBK93dM4gO56D0N5zisP82chaziWEnMwhOYoKI4 gepYhn8Gaq0KIUczJqOSMO3S3ruTUXTnNz4f8YM1rBg+Wd2yqpyTiUADZ2QjLOVR KJUKZ4FFhRZ6XoB4Iu517H9xMwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFLu0Vppv EUC3uMSetpSQtS5qofyhMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvNDc2Rjc5MUE0 NDNFMTFFQjhFMjY4RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E VTBTMEIEAgABMDwwDAMEBBtv0AMEAhtv4AMEAxtv6AMEAmVhQAMEAnZntDAMAwQG yk/AAwQByk/EMAwDBAPKT8gDBAXKT8AwDQQCAAIwBwMFACQDsQAwDQYJKoZIhvcN AQELBQADggEBALxlw/V/Knb6mWKgZ++Hf1bjAysr6SW4AMDSAkvGl6DpjF1zEdkv qBbuAYjV9VEw6aYrQH3qIqBnM6ehY6rvUbTXfUigZM8g/1VdtABytaKennPsKTc4 hDkO0AIrlwVh0O9PMkkUTa8qEQ+4Lfumq+eyZJZk01cm4n0mhELbMhvIKJmu6wYz 2SU6IyKOVRMcpw8xnWSZWyo8rntn9UK8mrfGMoSDQCMaRGNiOawr/K0XZUESlWll il4f2tvQdYepjOIAbebXRBTTEiXXXrVFgYyJo1UWRJilQKy8lTKMcqYv9Bmdrayt Ob9PFRuDBZJtZeCE29DCt60ut3Dql5gy+1c= -----END CERTIFICATE-----Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org