$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa File: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (raw, json) Hash identifier: fZ7YbOLBf50vE4wpQNz484RPKx1PFvg+UMgz178wqrg= Subject key identifier: 88:51:EC:29:9C:7B:98:6D:65:19:98:75:D3:51:78:98:26:F2:41:92 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 06CC Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa Signing time: Thu 24 Oct 2024 14:00:21 +0000 ROA not before: Thu 24 Oct 2024 14:00:21 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 17762 IP address blocks: 27.107.0.0/16 maxlen: 16 27.107.0.0/20 maxlen: 24 27.107.16.0/21 maxlen: 24 27.107.24.0/21 maxlen: 24 27.107.32.0/20 maxlen: 24 27.107.48.0/20 maxlen: 24 27.107.64.0/20 maxlen: 24 27.107.144.0/20 maxlen: 24 27.107.160.0/20 maxlen: 24 27.107.176.0/20 maxlen: 24 27.107.192.0/23 maxlen: 24 27.107.208.0/20 maxlen: 24 49.201.24.0/21 maxlen: 24 49.249.192.0/19 maxlen: 24 103.8.36.0/22 maxlen: 24 115.160.208.0/20 maxlen: 24 182.156.6.0/23 maxlen: 24 182.156.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Oct 24 14:00:21 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=671a52f4-e2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:d3:a0:f2:b8:97:57:f2:3b:6b:2b:07:d0: 6b:5f:12:df:6a:81:e2:7c:26:1f:a9:25:e2:f3:91: 03:1a:00:ab:af:36:83:30:04:0f:ea:2e:4c:1a:6d: 6f:13:e4:62:d7:17:e6:a4:fb:62:d5:4d:0d:56:af: 8b:d7:e2:27:ba:43:a6:90:69:b5:4e:ef:42:95:03: 6d:2c:b1:e7:8e:46:9f:e9:23:04:ef:c4:96:ff:72: 8a:17:5d:28:8c:78:ad:c6:50:70:0e:6d:83:9e:59: 50:01:b3:94:e2:01:97:13:8e:13:96:26:5b:7f:d7: 47:13:c6:f3:d7:56:65:73:e4:7c:6a:31:1d:36:69: c0:c0:9f:49:18:d4:9b:fc:0c:78:24:15:d0:65:f8: d1:7a:4c:a7:63:a9:43:3b:a0:f7:6e:2e:9c:df:a0: d7:47:46:e0:2c:08:d5:ac:74:c3:81:af:18:00:a9: 51:0b:f0:29:a0:a1:43:3b:0e:82:fa:5d:67:9e:5d: 73:63:e3:0f:82:b3:ef:fa:18:8c:dc:30:87:5c:60: 36:c6:c8:01:16:ee:29:2a:1a:cf:89:12:4c:16:e2: b0:e0:9e:f4:83:05:e1:c2:02:63:b1:f4:7c:2d:29: 9e:ed:1f:d6:04:e8:b5:d2:f4:40:49:e6:c2:d9:ee: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:EC:29:9C:7B:98:6D:65:19:98:75:D3:51:78:98:26:F2:41:92 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.107.0.0/16 49.201.24.0/21 49.249.192.0/19 103.8.36.0/22 115.160.208.0/20 182.156.6.0/23 182.156.20.0/23 Signature Algorithm: sha256WithRSAEncryption 08:38:b4:b6:45:a1:3d:30:de:06:0c:b4:87:0f:be:10:14:43: fd:7f:4b:ab:f4:60:f4:99:2b:ff:33:70:31:e4:72:10:65:63: 66:39:d4:68:bc:68:09:96:59:d8:80:66:09:fb:ec:ea:0f:e5: b6:68:d5:69:fd:c6:a3:bd:74:f1:f7:b9:1d:6e:cf:7d:c7:98: 6f:86:ff:f5:38:51:55:29:f7:85:a3:7f:f0:3e:4e:05:9b:ef: 52:a1:21:ce:4f:56:da:6e:d0:2d:fc:0c:d2:b5:09:cc:00:00: 1d:cf:de:03:9b:82:a9:0e:22:48:6d:6f:35:75:cd:ff:84:9b: f4:b4:df:6a:e2:93:8f:cb:00:79:e9:56:28:38:c6:23:02:ac: c9:31:dd:a2:3d:f7:f8:09:8d:63:c5:19:34:bf:42:7a:83:38: 27:37:36:ec:d0:6c:28:61:38:21:90:55:5e:33:56:fb:00:f1: a9:b4:09:8b:55:02:6c:ac:f8:ac:15:3e:b7:05:7e:2b:f1:b5: 87:29:30:8a:7a:f7:d6:3a:51:89:b8:2e:77:4c:d2:79:c2:77: bd:91:d5:3c:0f:a2:e7:45:11:93:57:1d:4e:2f:c7:14:4c:46: e6:14:52:28:df:e2:4d:6a:c9:84:e8:29:0b:9f:9f:40:b2:b6: 67:e7:92:3e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQxMDI0MTQwMDIxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhNTJmNC1lMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPzToPK4l1fyO2srB9BrXxLfaoHifCYfqSXi85EDGgCrrzaDMAQP6i5MGm1v E+Ri1xfmpPti1U0NVq+L1+InukOmkGm1Tu9ClQNtLLHnjkaf6SME78SW/3KKF10o jHitxlBwDm2DnllQAbOU4gGXE44TliZbf9dHE8bz11Zlc+R8ajEdNmnAwJ9JGNSb /Ax4JBXQZfjRekynY6lDO6D3bi6c36DXR0bgLAjVrHTDga8YAKlRC/ApoKFDOw6C +l1nnl1zY+MPgrPv+hiM3DCHXGA2xsgBFu4pKhrPiRJMFuKw4J70gwXhwgJjsfR8 LSme7R/WBOi10vRASebC2e5UmwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFIhR7Cmc e5htZRmYddNReJgm8kGSMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvQkYwNzBBQjZD MUJDMTFFRUJBQjdGMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMC8EAgABMCkDAwAbawMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AMEAbacBgME AbacFDANBgkqhkiG9w0BAQsFAAOCAQEACDi0tkWhPTDeBgy0hw++EBRD/X9Lq/Rg 9Jkr/zNwMeRyEGVjZjnUaLxoCZZZ2IBmCfvs6g/ltmjVaf3Go7108fe5HW7PfceY b4b/9ThRVSn3haN/8D5OBZvvUqEhzk9W2m7QLfwM0rUJzAAAHc/eA5uCqQ4iSG1v NXXN/4Sb9LTfauKTj8sAeelWKDjGIwKsyTHdoj33+AmNY8UZNL9CeoM4Jzc27NBs KGE4IZBVXjNW+wDxqbQJi1UCbKz4rBU+twV+K/G1hykwinr31jpRibgud0zSecJ3 vZHVPA+i50URk1cdTi/HFExG5hRSKN/iTWrJhOgpC5+fQLK2Z+eSPg== -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:46 2024 by rpki-client on console-fra.rpki-client.org