$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa File: 27417E7AC57F11EEB0E1FE57C4F9AE02.roa (raw, json) Hash identifier: hoxcY/toLvvg/Njx3O6+f8ZVfz5t1CD1YYlKXtkW5uI= Subject key identifier: 86:F1:3E:C1:A9:EA:9E:1E:48:A4:9F:2A:6B:37:94:22:C2:9A:CB:47 Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Certificate serial: 07DE Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa Signing time: Thu 04 Apr 2024 18:26:13 +0000 ROA not before: Thu 04 Apr 2024 18:26:13 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133866 IP address blocks: 45.118.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 18:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2014 (0x7de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0 Validity Not Before: Apr 4 18:26:13 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660ef0c5-c057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:df:b3:cb:a8:d6:bc:7f:02:ac:de:70:fc: ed:cc:77:b5:dd:97:44:5b:0f:7f:96:bf:8a:e3:5e: 4d:95:a9:b4:59:e9:d1:bb:5d:09:ea:2c:68:c4:26: fb:7b:d9:5c:6d:e5:bd:69:13:d0:8c:05:0b:1c:98: c6:80:11:50:d8:e0:57:a9:ea:4a:67:45:fd:b3:bb: de:63:ce:14:42:fa:c5:25:00:f2:74:18:50:f7:b3: db:58:d9:43:1d:eb:f6:19:1c:1a:a4:89:1a:97:be: 74:a5:ba:2d:9a:00:6a:f5:95:75:d4:e2:f7:f4:69: 9c:4b:ca:d0:26:74:38:01:f3:d2:3b:09:e0:31:ff: 3d:47:71:da:72:27:4a:c4:c4:7b:a6:84:25:f2:13: a7:3d:d1:20:0a:af:b3:6d:85:7f:84:d1:c6:57:a1: 1b:f7:1d:a4:c9:28:db:17:99:a5:f7:8a:d8:42:12: f0:6d:31:5d:5d:c0:e0:0f:91:26:42:26:46:cd:2f: fe:ef:f6:36:c5:ae:55:df:07:96:c5:15:75:5c:99: a2:81:61:c9:fa:75:05:12:08:ba:c0:3f:bc:7a:82: 6a:87:18:33:20:2e:36:bc:ce:41:7d:89:06:da:f0: 09:dc:20:e8:12:2e:0d:d4:27:f0:04:08:35:b9:8f: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:3E:C1:A9:EA:9E:1E:48:A4:9F:2A:6B:37:94:22:C2:9A:CB:47 X509v3 Authority Key Identifier: keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/27417E7AC57F11EEB0E1FE57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.70.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:75:af:7a:a4:d3:c2:c5:08:86:a5:34:3a:24:67:76:6f:df: 72:e3:92:39:9b:00:58:cf:4e:a6:75:f8:fe:bf:8f:9b:f8:c1: 3c:27:d1:51:9d:a6:4d:7b:1a:61:1b:f9:2a:86:d3:f1:16:12: 25:0b:e2:d1:41:c6:58:69:72:35:92:5c:08:f3:ef:55:80:8e: 8f:7f:82:df:de:66:ea:07:0a:3c:6a:5e:36:b3:a2:f5:44:f9: 70:62:b2:e4:80:32:8f:f3:40:5a:20:0a:4a:38:fd:ef:d1:1e: bb:6a:e8:ef:67:4e:6c:dd:95:4e:41:ea:28:87:19:06:79:f6: f0:3c:2d:f7:67:d7:52:42:75:47:37:6a:56:8a:8c:2f:50:1c: d1:3a:9a:b2:43:57:4c:01:6e:e7:bb:ad:f2:c7:2c:2d:c3:8d: c0:34:0f:b7:bb:a8:19:24:8c:0c:aa:24:4a:9a:eb:60:42:97: 26:a9:22:bf:64:09:48:d2:12:00:ab:9c:5a:e1:97:44:80:55: b7:2e:a3:d7:c3:64:97:f3:20:69:ec:20:03:53:41:97:bb:50: e7:2b:2c:44:9d:dc:22:4f:d6:a3:2c:77:2a:44:f0:e0:e7:ba: 6a:8d:e9:58:5d:99:bf:af:f9:41:25:75:f1:70:11:f2:cd:0e: 94:c1:ff:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz RTMwNDVEQzAwHhcNMjQwNDA0MTgyNjEzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlZjBjNS1jMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCXfs8uo1rx/AqzecPztzHe13ZdEWw9/lr+K415Nlam0WenRu10J6ixoxCb7 e9lcbeW9aRPQjAULHJjGgBFQ2OBXqepKZ0X9s7veY84UQvrFJQDydBhQ97PbWNlD Hev2GRwapIkal750pbotmgBq9ZV11OL39GmcS8rQJnQ4AfPSOwngMf89R3HacidK xMR7poQl8hOnPdEgCq+zbYV/hNHGV6Eb9x2kySjbF5ml94rYQhLwbTFdXcDgD5Em QiZGzS/+7/Y2xa5V3weWxRV1XJmigWHJ+nUFEgi6wD+8eoJqhxgzIC42vM5BfYkG 2vAJ3CDoEi4N1CfwBAg1uY8VxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIbxPsGp 6p4eSKSfKms3lCLCmstHMB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNCMDkvM0IzNjdCQ0UzM0I3MTFFOUFEMEY1ODdBQzRGOUFFMDIvMjc0MTdFN0FD NTdGMTFFRUIwRTFGRTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtdkYwDQYJKoZIhvcNAQELBQADggEBAEt1r3qk08LFCIal NDokZ3Zv33LjkjmbAFjPTqZ1+P6/j5v4wTwn0VGdpk17GmEb+SqG0/EWEiUL4tFB xlhpcjWSXAjz71WAjo9/gt/eZuoHCjxqXjazovVE+XBisuSAMo/zQFogCko4/e/R Hrtq6O9nTmzdlU5B6iiHGQZ59vA8Lfdn11JCdUc3alaKjC9QHNE6mrJDV0wBbue7 rfLHLC3DjcA0D7e7qBkkjAyqJEqa62BClyapIr9kCUjSEgCrnFrhl0SAVbcuo9fD ZJfzIGnsIANTQZe7UOcrLESd3CJP1qMsdypE8ODnumqN6Vhdmb+v+UEldfFwEfLN DpTB/zI= -----END CERTIFICATE-----Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org