$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa File: 03C06766DC1211EC80AE816DC4F9AE02.roa (raw, json) Hash identifier: DmfQ3+8ymZBHNatwkjVgDY8oSbLfHdTsnMMne1LGaYM= Subject key identifier: B2:CD:11:F3:C7:0D:74:9F:A8:52:54:30:23:CD:F4:DD:83:06:F4:E1 Certificate issuer: /CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Certificate serial: 0183 Authority key identifier: 3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa Signing time: Wed 17 May 2023 05:44:01 +0000 ROA not before: Wed 17 May 2023 05:44:01 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 8220 IP address blocks: 27.110.0.0/20 maxlen: 20 27.110.16.0/22 maxlen: 22 2400:81e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 03:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=3B3D6BA9FBEF424AFABFD2BA30C8B857D459F09C Validity Not Before: May 17 05:44:01 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=646469a1-5bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:b4:b3:7e:ba:1d:82:07:c1:55:df:d8:dd: 26:ad:f6:63:77:b1:c1:b3:8c:de:57:02:9d:db:23: b5:8d:89:48:92:19:e5:c6:fb:f9:73:d4:93:a2:58: e9:14:08:57:94:dc:81:72:13:a4:36:5c:38:b5:15: ff:7d:00:e2:c9:8a:d1:77:51:ac:16:af:ee:b0:dc: 9c:3e:91:c7:8f:0a:e9:c9:6f:f0:cd:e5:97:55:72: cf:df:29:0c:f0:ad:3d:79:9b:91:fd:3b:73:6e:49: 49:87:08:1d:f2:d1:98:95:3c:90:64:16:f8:74:f7: d1:b8:83:e2:06:ae:9a:a2:3b:79:1e:8f:b6:61:c7: 12:e0:6b:f7:31:20:a8:b5:d7:54:23:bb:da:15:2b: 04:a9:a2:6c:09:a9:a4:f8:99:ec:a8:5c:75:b3:12: 27:b2:09:6d:9f:89:7b:2b:24:c3:d8:4d:16:a0:fd: 83:de:ca:02:f1:53:df:e2:14:2b:0d:ab:50:91:ab: 0f:8e:3f:d8:01:5a:94:ea:ba:07:56:5b:f6:54:84: b6:a2:b7:43:9f:9d:e1:4d:5a:a8:0e:24:dd:7f:67: 23:e5:31:99:52:f7:a1:c6:d3:e7:7f:06:74:c8:02: e6:b6:de:0a:97:3d:68:e6:3f:23:b8:2e:14:eb:7f: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:11:F3:C7:0D:74:9F:A8:52:54:30:23:CD:F4:DD:83:06:F4:E1 X509v3 Authority Key Identifier: keyid:3B:3D:6B:A9:FB:EF:42:4A:FA:BF:D2:BA:30:C8:B8:57:D4:59:F0:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oz1rqfvvQkr6v9K6MMi4V9RZ8Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/B35EB50CDBF811EC93240E5DC4F9AE02/03C06766DC1211EC80AE816DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.110.0.0-27.110.19.255 IPv6: 2400:81e0::/32 Signature Algorithm: sha256WithRSAEncryption 35:5a:65:3b:da:0e:a1:17:af:96:ed:55:19:c2:6e:4e:d7:b5: 2d:44:a2:64:9d:10:44:7e:f5:eb:05:55:52:cf:99:0d:a3:c6: 86:09:08:c9:17:12:ec:bd:24:e8:06:fc:8a:12:7e:f4:01:44: 74:c9:18:35:22:45:d8:89:bf:62:73:8f:b9:33:5e:59:eb:a1: 6f:bc:fc:93:39:cb:77:1e:a1:c0:81:85:6c:9f:3f:68:d2:9d: 10:71:0c:53:53:84:0e:5e:2b:b9:66:e0:8d:bf:6b:e0:e0:fb: 19:45:60:98:0e:04:91:44:f8:0a:bf:62:54:4e:80:74:7b:62: 33:8c:4a:bb:26:0e:96:8d:6f:b5:5a:89:c2:ce:a8:e6:9b:12: fc:57:a1:d5:57:4c:f8:cc:7b:d4:3a:1d:a7:80:d3:49:f9:94: 3c:42:2e:00:da:f7:f5:14:f8:fd:08:75:60:83:aa:9e:07:d7: 6f:92:6f:68:27:0f:3a:2d:1d:f7:8a:1d:db:ea:44:f8:eb:6e: f4:6b:4e:5b:9c:00:48:ac:ae:ed:50:aa:91:db:02:7b:ca:6b: 75:68:1c:6d:1e:92:ae:6c:87:aa:79:4c:71:c7:90:2c:70:87: ca:c6:af:35:c0:6d:2a:55:f4:c0:38:41:ff:f9:9f:a5:a2:c2: fb:3a:51:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKDNCM0Q2QkE5RkJFRjQyNEFGQUJGRDJCQTMwQzhCODU3 RDQ1OUYwOUMwHhcNMjMwNTE3MDU0NDAxWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY0NjlhMS01YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRm0s366HYIHwVXf2N0mrfZjd7HBs4zeVwKd2yO1jYlIkhnlxvv5c9SToljp FAhXlNyBchOkNlw4tRX/fQDiyYrRd1GsFq/usNycPpHHjwrpyW/wzeWXVXLP3ykM 8K09eZuR/TtzbklJhwgd8tGYlTyQZBb4dPfRuIPiBq6aojt5Ho+2YccS4Gv3MSCo tddUI7vaFSsEqaJsCamk+JnsqFx1sxInsgltn4l7KyTD2E0WoP2D3soC8VPf4hQr DatQkasPjj/YAVqU6roHVlv2VIS2ordDn53hTVqoDiTdf2cj5TGZUvehxtPnfwZ0 yALmtt4Klz1o5j8juC4U639GtwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLLNEfPH DXSfqFJUMCPN9N2DBvThMB8GA1UdIwQYMBaAFDs9a6n770JK+r/SujDIuFfUWfCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC9CMzVFQjUwQ0RC RjgxMUVDOTMyNDBFNURDNEY5QUUwMi9PejFycWZ2dlFrcjZ2OUs2TU1pNFY5Ulo4 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL096MXJxZnZ2UWtyNnY5SzZNTWk0VjlSWjhKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM0RUQvQjM1RUI1MENEQkY4MTFFQzkzMjQwRTVEQzRGOUFFMDIvMDNDMDY3NjZE QzEyMTFFQzgwQUU4MTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBMEAgABMA0wCwMDARtuAwQCG24QMA0EAgACMAcDBQAkAIHgMA0GCSqGSIb3 DQEBCwUAA4IBAQA1WmU72g6hF6+W7VUZwm5O17UtRKJknRBEfvXrBVVSz5kNo8aG CQjJFxLsvSToBvyKEn70AUR0yRg1IkXYib9ic4+5M15Z66FvvPyTOct3HqHAgYVs nz9o0p0QcQxTU4QOXiu5ZuCNv2vg4PsZRWCYDgSRRPgKv2JUToB0e2IzjEq7Jg6W jW+1WonCzqjmmxL8V6HVV0z4zHvUOh2ngNNJ+ZQ8Qi4A2vf1FPj9CHVgg6qeB9dv km9oJw86LR33ih3b6kT46270a05bnABIrK7tUKqR2wJ7ymt1aBxtHpKubIeqeUxx x5AscIfKxq81wG0qVfTAOEH/+Z+losL7OlHA -----END CERTIFICATE-----Generated at Wed May 29 06:12:10 2024 by rpki-client on console-ams.rpki-client.org