$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/27992F96832811EFA1BAAC4FC4F9AE02.roa File: 27992F96832811EFA1BAAC4FC4F9AE02.roa (raw, json) Hash identifier: lvDZyQvH6vwmBGRDdLDTP57gwAxKU5Khp3dfalr0lOI= Subject key identifier: 40:BF:FF:BC:16:82:CC:2D:4E:25:D1:B2:BA:E1:1B:13:9F:1A:E8:4A Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 03F6 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/27992F96832811EFA1BAAC4FC4F9AE02.roa Signing time: Sat 05 Oct 2024 14:43:16 +0000 ROA not before: Sat 05 Oct 2024 14:43:16 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 214640 IP address blocks: 103.177.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Oct 5 14:43:16 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=67015084-ed6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:17:1a:04:8c:37:84:e0:f9:81:af:3d:90: 12:97:be:5d:50:84:7e:ea:08:3d:90:75:26:75:3b: 68:6e:3e:ed:09:30:d3:4a:fe:1b:df:d9:04:6e:c0: e8:c4:88:ba:9c:13:52:99:59:1e:e3:2a:2c:cd:9a: 84:74:b4:28:2a:b7:20:de:10:bc:31:19:7b:52:dc: d3:9d:47:3f:40:5f:4f:db:3f:fd:96:a1:98:01:f9: a5:ac:19:63:c2:bd:55:19:4d:13:3e:bc:f9:5b:0f: 99:f3:d2:6c:12:84:9e:50:61:67:60:60:95:04:a4: 9e:c2:e1:ea:29:00:99:fe:ec:2b:5f:70:7c:43:e3: 91:7c:49:75:c9:d7:2b:33:fe:3e:a6:48:e3:d3:c2: a4:62:7b:4b:4d:62:8a:b6:c9:13:70:c2:04:0c:bc: 8d:a9:dc:d0:1f:ed:9b:e3:24:c4:ca:44:9d:89:ed: 26:61:da:90:75:fa:b5:b5:42:19:16:7f:75:c8:70: 31:81:64:9e:3c:06:57:92:ad:7f:19:0a:e5:c8:c9: 21:1d:7f:e3:be:20:b8:2e:1b:ff:39:e2:e1:58:f5: c7:57:c1:90:03:57:28:75:ce:d5:8c:5a:9f:92:7d: 5f:74:53:e1:8c:dc:4e:b5:84:94:04:12:67:f7:88: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BF:FF:BC:16:82:CC:2D:4E:25:D1:B2:BA:E1:1B:13:9F:1A:E8:4A X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/27992F96832811EFA1BAAC4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.248.0/23 Signature Algorithm: sha256WithRSAEncryption 41:03:60:44:6d:33:7f:aa:72:b6:58:72:3e:ba:8d:b4:83:1b: 31:4f:5f:c0:e8:08:63:7c:de:27:a9:f4:97:07:2e:89:71:f1: cc:11:ec:6a:cb:2f:b8:5d:12:41:a3:f4:37:ae:0a:7d:a9:f6: 6b:69:d0:57:cc:d6:bd:dd:42:e2:4b:03:0c:16:fd:80:fe:21: e7:ba:03:33:ef:6d:cc:75:09:3f:6b:c7:90:22:92:7a:2a:2b: 0d:9e:9a:92:56:cb:85:96:cd:69:ad:ed:cb:59:dc:3d:5d:94: 70:9d:d3:41:1d:4b:57:b5:a3:f9:3e:00:58:08:93:92:16:3e: 6b:d4:5f:42:a2:a7:8f:e7:a3:86:03:d8:e0:7c:bf:e3:c7:15: c5:b7:c9:eb:ed:5c:37:7b:2d:3e:8a:48:af:d1:67:00:30:44: 02:81:fe:37:1c:05:44:91:1c:ab:77:07:4a:9d:86:09:50:18: f3:35:c1:52:cf:f3:ae:12:eb:22:bd:bf:48:9b:69:af:74:5b: 99:c9:c5:b8:4d:6d:89:14:32:54:70:98:46:a2:02:e2:6b:52: d5:0b:14:15:4d:46:26:d2:9e:cd:56:11:7e:35:25:ff:09:97: e4:97:0b:3d:14:21:35:4a:28:f2:18:f5:af:0c:83:57:62:70: f9:5c:83:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjQxMDA1MTQ0MzE2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAxNTA4NC1lZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6EXGgSMN4Tg+YGvPZASl75dUIR+6gg9kHUmdTtobj7tCTDTSv4b39kEbsDo xIi6nBNSmVke4yoszZqEdLQoKrcg3hC8MRl7UtzTnUc/QF9P2z/9lqGYAfmlrBlj wr1VGU0TPrz5Ww+Z89JsEoSeUGFnYGCVBKSewuHqKQCZ/uwrX3B8Q+ORfEl1ydcr M/4+pkjj08KkYntLTWKKtskTcMIEDLyNqdzQH+2b4yTEykSdie0mYdqQdfq1tUIZ Fn91yHAxgWSePAZXkq1/GQrlyMkhHX/jviC4Lhv/OeLhWPXHV8GQA1codc7VjFqf kn1fdFPhjNxOtYSUBBJn94givQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEC//7wW gswtTiXRsrrhGxOfGuhKMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBFMTEvRDA2MEM5QjI1QkQ2MTFFQ0FEODMzNjUxQzRGOUFFMDIvMjc5OTJGOTY4 MzI4MTFFRkExQkFBQzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnsfgwDQYJKoZIhvcNAQELBQADggEBAEEDYERtM3+qcrZY cj66jbSDGzFPX8DoCGN83iep9JcHLolx8cwR7GrLL7hdEkGj9DeuCn2p9mtp0FfM 1r3dQuJLAwwW/YD+Iee6AzPvbcx1CT9rx5AiknoqKw2empJWy4WWzWmt7ctZ3D1d lHCd00EdS1e1o/k+AFgIk5IWPmvUX0Kip4/no4YD2OB8v+PHFcW3yevtXDd7LT6K SK/RZwAwRAKB/jccBUSRHKt3B0qdhglQGPM1wVLP864S6yK9v0ibaa90W5nJxbhN bYkUMlRwmEaiAuJrUtULFBVNRibSns1WEX41Jf8Jl+SXCz0UITVKKPIY9a8Mg1di cPlcg3o= -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:55 2024 by rpki-client on console-fra.rpki-client.org