$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa File: BF341AF869A911EE8CB76452C4F9AE02.roa (raw, json) Hash identifier: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58= Subject key identifier: FC:CE:0E:08:CC:E7:5C:6C:C4:06:C3:DF:4E:62:28:0C:97:D2:39:5E Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: B1 Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa Signing time: Fri 21 Jun 2024 06:11:06 +0000 ROA not before: Fri 21 Jun 2024 06:11:06 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55523 IP address blocks: 27.96.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: Jun 21 06:11:06 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6675197a-c5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:37:ee:00:a9:c9:32:d0:c8:f4:80:36:bb: 96:1e:9e:36:da:42:d8:e8:7e:9e:ff:c0:8a:f1:4f: 1f:7a:81:7a:b1:72:83:69:2a:b7:3c:52:55:c3:10: 6a:b5:a3:61:e7:58:16:22:bd:3e:4f:d3:0b:ff:9c: 7c:e3:36:bc:65:ee:de:2a:18:64:62:ad:7f:99:df: 65:31:fc:94:ee:0c:ad:06:c0:0a:e0:00:c7:79:b5: 5d:5a:b3:ca:80:ab:53:a7:29:e0:a2:f4:8c:8f:10: 9c:ae:af:a8:6f:73:35:c7:1c:93:b8:dc:d8:91:e5: 1e:82:59:a4:93:2e:d0:e4:00:89:f4:7b:13:53:2a: c8:49:11:ff:19:95:61:aa:eb:99:1a:00:84:e6:62: 29:bb:c0:f6:02:5d:f6:49:53:52:8f:77:a0:93:6e: 81:0a:e5:cb:36:f6:07:c8:34:59:47:a1:8f:da:a8: 39:e5:d5:c5:13:a9:b1:b0:8e:63:d9:28:01:e3:a9: 13:e1:c5:d1:f8:f1:72:2e:49:78:ec:02:0c:70:62: 79:53:f2:d7:30:32:ea:7a:3b:52:05:8d:04:58:4e: 5e:10:49:68:4a:28:e7:c4:34:7d:9d:e0:97:27:e5: 22:2c:2e:ba:4a:51:b5:d5:e5:b4:0c:49:20:25:3e: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CE:0E:08:CC:E7:5C:6C:C4:06:C3:DF:4E:62:28:0C:97:D2:39:5E X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/BF341AF869A911EE8CB76452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.96.24.0/21 Signature Algorithm: sha256WithRSAEncryption 27:c1:e3:4c:ca:cb:f6:96:e3:99:2d:3b:f0:3b:48:6a:12:82: 3a:fe:98:ec:4c:cf:13:fb:e7:61:b9:99:61:06:78:06:b4:fb: 8c:0d:9f:db:60:a1:f2:0d:b7:49:fb:5b:f4:09:29:96:54:79: 8d:85:2a:97:72:dc:22:81:28:28:b5:7f:ae:78:f7:5f:91:76: 73:a9:d5:bf:e1:94:bc:4a:1c:e1:85:ea:a6:2b:66:1d:6a:b8: 81:34:bf:f5:c2:80:2c:8a:97:2f:de:c1:aa:40:8f:fb:c9:67: f1:7b:bd:73:8c:0d:37:86:67:ae:e3:9d:41:33:99:73:03:85: 8f:3c:dd:d9:c1:20:e8:7c:4d:32:9c:8d:96:71:37:6f:d4:42: f5:b2:b0:56:9c:cf:b6:cf:1a:1c:81:fa:19:83:0c:4b:ea:c8: 2c:e5:67:86:14:3c:ec:ab:db:e7:53:b9:8b:75:f6:2f:12:b6: e6:89:d5:78:ed:05:5b:9a:86:9c:2b:87:70:0e:8d:cf:a6:d4: 01:58:60:1c:7c:52:39:46:0e:49:77:11:b7:55:c6:ba:65:14: 52:17:dd:1d:fa:a8:72:bc:bd:d6:1c:3f:8b:1b:21:5e:90:e1: 08:f5:2b:25:c8:61:a7:ac:49:ab:dd:8a:b0:22:71:5d:29:58: 1d:40:8d:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjQwNjIxMDYxMTA2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc1MTk3YS1jNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5A37gCpyTLQyPSANruWHp422kLY6H6e/8CK8U8feoF6sXKDaSq3PFJVwxBq taNh51gWIr0+T9ML/5x84za8Ze7eKhhkYq1/md9lMfyU7gytBsAK4ADHebVdWrPK gKtTpyngovSMjxCcrq+ob3M1xxyTuNzYkeUeglmkky7Q5ACJ9HsTUyrISRH/GZVh quuZGgCE5mIpu8D2Al32SVNSj3egk26BCuXLNvYHyDRZR6GP2qg55dXFE6mxsI5j 2SgB46kT4cXR+PFyLkl47AIMcGJ5U/LXMDLqejtSBY0EWE5eEEloSijnxDR9neCX J+UiLC66SlG11eW0DEkgJT6S1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPzODgjM 51xsxAbD305iKAyX0jleMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJCN0UvNzNCQzdBQUM0NzE3MTFFRUE0NDZFMzQ2QzRGOUFFMDIvQkYzNDFBRjg2 OUE5MTFFRThDQjc2NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAMbYBgwDQYJKoZIhvcNAQELBQADggEBACfB40zKy/aW45kt O/A7SGoSgjr+mOxMzxP752G5mWEGeAa0+4wNn9tgofINt0n7W/QJKZZUeY2FKpdy 3CKBKCi1f65491+RdnOp1b/hlLxKHOGF6qYrZh1quIE0v/XCgCyKly/ewapAj/vJ Z/F7vXOMDTeGZ67jnUEzmXMDhY883dnBIOh8TTKcjZZxN2/UQvWysFacz7bPGhyB +hmDDEvqyCzlZ4YUPOyr2+dTuYt19i8StuaJ1XjtBVuahpwrh3AOjc+m1AFYYBx8 UjlGDkl3EbdVxrplFFIX3R36qHK8vdYcP4sbIV6Q4Qj1KyXIYaesSavdirAicV0p WB1AjRM= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org