$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa File: 2357FC145F8D11EF94E7303FC4F9AE02.roa (raw, json) Hash identifier: Adsar2w8VAjS3SUaIO5TAhSv+c7iSEo6NtUlziAok5s= Subject key identifier: AE:28:73:7E:FA:5F:53:BE:73:99:93:AF:4A:73:65:F5:76:3D:63:3B Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 15DD Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa Signing time: Wed 21 Aug 2024 07:15:26 +0000 ROA not before: Wed 21 Aug 2024 07:15:26 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 17819 IP address blocks: 27.111.183.0/24 maxlen: 24 2404:6900::/33 maxlen: 33 2404:6900:7000::/40 maxlen: 40 2404:6900:7001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5597 (0x15dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Aug 21 07:15:26 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c5940e-f547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:e8:42:10:71:c1:b0:ca:26:ed:af:77:d7: 45:70:a9:35:bd:a0:53:ec:40:b4:be:40:b6:9c:d7: 87:fc:6f:bd:34:50:16:b0:5a:94:60:bb:8c:73:5c: 4c:06:19:5d:ab:ec:7d:9a:42:dc:dd:83:2b:d2:8f: 2d:36:95:0c:79:0c:96:f1:ed:15:65:57:09:1e:0b: 39:63:26:2d:da:44:eb:42:da:15:75:27:88:2e:23: 96:7c:fb:a4:47:59:46:28:24:2f:8a:e9:f1:59:43: 84:6e:99:6a:6c:9d:41:18:b9:52:16:a2:29:29:a2: 99:03:4e:26:f8:2b:89:cc:28:9a:2a:ca:81:7a:f3: 34:e3:a8:ba:cf:21:86:d7:31:a4:0a:3a:86:39:af: 2c:98:b6:25:c8:f5:a6:69:74:52:75:0c:7b:7f:73: 08:83:80:df:b1:cd:28:bf:55:4f:8b:bb:be:50:c7: a3:19:cf:54:92:b5:e2:b9:3f:10:a5:1f:2e:e3:ac: 26:7a:ad:5d:e7:bf:99:e3:31:7d:e2:77:a5:06:33: 89:03:38:93:ba:71:a1:c7:dc:28:f1:6a:7e:ad:ea: 1f:fd:b5:ce:2e:f3:ca:c0:ef:24:c3:f3:26:8b:5c: d4:07:a0:55:c4:ef:5b:9b:4e:4f:75:7e:45:20:48: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:73:7E:FA:5F:53:BE:73:99:93:AF:4A:73:65:F5:76:3D:63:3B X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.183.0/24 IPv6: 2404:6900::/33 Signature Algorithm: sha256WithRSAEncryption 1e:18:c2:6b:c5:76:c4:7e:e5:49:b2:df:0a:f6:f8:f6:52:e9: 48:85:82:d7:70:2b:0c:45:00:b4:8c:cf:b7:fd:e9:80:8a:6a: 6f:ed:13:4f:ed:a7:61:1d:66:7f:69:eb:1e:1b:e7:79:b6:36: 63:dd:32:68:60:08:51:e6:7b:bb:b1:0a:cd:b2:fa:30:34:92: 95:cc:9e:d6:1a:bb:a6:40:e7:b6:19:2d:dc:af:8c:f4:03:60: 40:ee:13:93:64:33:3c:cc:ac:cf:2f:6d:66:95:63:19:b3:b7: 0f:ad:f2:8c:c8:00:42:94:a4:0c:dc:7f:2f:6b:d9:16:82:44: 30:44:08:01:da:4e:67:2e:4b:93:71:a5:fb:a2:b1:e2:e3:f0: b4:29:48:1d:a4:cc:ff:93:23:cd:28:36:08:dd:50:7e:e5:cc: 12:3c:49:07:67:ae:b9:bf:f6:e7:0c:3a:81:eb:e5:31:fd:60: 00:7e:eb:ab:ab:6e:f1:23:9b:88:56:e2:90:99:41:62:2e:b6: 91:59:f9:6c:13:d4:ea:26:6d:1f:4f:4e:d4:d1:a1:da:4f:cf: cf:45:68:53:6c:2b:57:66:e2:89:e8:17:29:2b:63:b3:b7:57: b4:a3:28:b5:e6:64:1f:c0:11:c1:e3:a5:87:25:72:27:dd:1d: 22:c9:c2:7a -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICFd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjQwODIxMDcxNTI2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1OTQwZS1mNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhfoQhBxwbDKJu2vd9dFcKk1vaBT7EC0vkC2nNeH/G+9NFAWsFqUYLuMc1xM Bhldq+x9mkLc3YMr0o8tNpUMeQyW8e0VZVcJHgs5YyYt2kTrQtoVdSeILiOWfPuk R1lGKCQviunxWUOEbplqbJ1BGLlSFqIpKaKZA04m+CuJzCiaKsqBevM046i6zyGG 1zGkCjqGOa8smLYlyPWmaXRSdQx7f3MIg4Dfsc0ov1VPi7u+UMejGc9UkrXiuT8Q pR8u46wmeq1d57+Z4zF94nelBjOJAziTunGhx9wo8Wp+reof/bXOLvPKwO8kw/Mm i1zUB6BVxO9bm05PdX5FIEgwBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK4oc376 X1O+c5mTr0pzZfV2PWM7MB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvMjM1N0ZDMTQ1 RjhEMTFFRjk0RTczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAAbb7cwDgQCAAIwCAMGByQEaQAAMA0GCSqGSIb3DQEBCwUA A4IBAQAeGMJrxXbEfuVJst8K9vj2UulIhYLXcCsMRQC0jM+3/emAimpv7RNP7adh HWZ/aeseG+d5tjZj3TJoYAhR5nu7sQrNsvowNJKVzJ7WGrumQOe2GS3cr4z0A2BA 7hOTZDM8zKzPL21mlWMZs7cPrfKMyABClKQM3H8va9kWgkQwRAgB2k5nLkuTcaX7 orHi4/C0KUgdpMz/kyPNKDYI3VB+5cwSPEkHZ665v/bnDDqB6+Ux/WAAfuurq27x I5uIVuKQmUFiLraRWflsE9TqJm0fT07U0aHaT8/PRWhTbCtXZuKJ6BcpK2Ozt1e0 oyi15mQfwBHB46WHJXIn3R0iycJ6 -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:21 2024 by rpki-client on console-ams.rpki-client.org