$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa File: E11035DE02E311EFA9712859C4F9AE02.roa (raw, json) Hash identifier: V6mkU1t+do01ENnx0fHkUqNhuyY++hkugss11RhFtvg= Subject key identifier: 9E:6E:C9:33:F9:07:64:92:28:93:27:18:1C:22:05:4D:4C:C5:84:FB Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0B1D Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa Signing time: Tue 30 Apr 2024 09:47:57 +0000 ROA not before: Tue 30 Apr 2024 09:47:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 136908 IP address blocks: 27.111.17.0/24 maxlen: 24 117.121.230.0/24 maxlen: 24 117.121.236.0/24 maxlen: 24 117.121.238.0/24 maxlen: 24 202.52.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 20:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Apr 30 09:47:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6630be4c-653c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:05:91:d3:da:36:3b:4f:2a:eb:74:3f:4e:2e: 62:56:36:e6:db:27:c3:fb:9c:c8:9d:d6:32:54:0c: 96:5a:bd:4c:08:09:13:73:4a:0a:55:d2:08:8d:10: 63:57:00:c0:63:72:64:ba:03:55:61:e4:4e:01:0a: 30:0e:8e:ae:79:56:d4:3c:9c:cb:21:f1:1d:2b:9f: 46:66:84:c9:12:17:96:fd:35:43:26:f5:96:70:60: ee:a7:72:d7:f3:1e:09:cf:d2:36:90:49:51:1d:bf: 82:4c:ec:43:c8:60:d7:ab:1a:95:0b:e7:6e:b2:72: 93:fe:6d:70:ba:0b:92:25:83:4f:b9:fe:56:07:fb: af:f9:1c:fa:fc:60:48:98:d9:0c:70:5a:a2:92:66: ea:e6:45:2a:b1:73:de:eb:ba:17:a9:6d:f9:ac:2f: 0d:81:eb:29:03:81:0e:72:65:74:b2:a9:69:a6:a3: 5b:10:96:ec:0b:79:b3:85:ce:86:c4:77:5d:b8:55: 8b:16:00:6a:59:43:e9:1c:22:66:41:e0:01:aa:e9: 6f:96:21:48:c0:16:a7:2b:3b:5d:32:f4:eb:92:15: 06:d8:49:1e:4f:42:02:21:3f:b3:90:75:f8:14:7f: 90:de:78:de:28:fc:8c:df:5d:65:fa:a3:a1:04:a3: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6E:C9:33:F9:07:64:92:28:93:27:18:1C:22:05:4D:4C:C5:84:FB X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/E11035DE02E311EFA9712859C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.17.0/24 117.121.230.0/24 117.121.236.0/24 117.121.238.0/24 202.52.243.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ae:ff:bd:61:e0:db:44:63:9f:41:cd:83:da:ae:04:11:a8: 68:de:f8:21:6c:e9:41:a5:13:f1:e7:13:01:60:84:27:45:ff: ba:27:82:c3:62:19:8a:33:91:79:24:7d:4b:57:b0:ce:62:d6: c7:9a:bd:95:5b:6c:94:c1:c6:cd:a2:e7:c6:43:cf:1c:e9:e1: 61:c9:69:4c:be:b9:77:55:11:67:c5:b0:35:39:3d:38:84:bc: c5:d8:3c:76:a0:65:c6:21:9a:27:ae:79:6b:0e:1a:5f:d2:fa: 2f:e0:47:44:50:32:b0:23:89:2b:03:c9:f4:19:a0:f9:98:62: aa:e1:67:8d:df:e0:4c:25:d0:d7:78:3d:6f:59:0d:d6:92:f5: 01:c7:0f:66:a5:19:02:d9:25:09:64:9b:ba:55:b1:50:a2:c3: 11:77:ca:56:3b:f9:90:ad:72:b1:ac:b5:e5:b7:0a:c3:42:59: 3d:45:c1:af:65:f7:4d:f2:71:cd:9c:81:d9:92:0f:fa:76:49: fb:99:fe:d8:b6:33:67:ab:ba:16:e2:36:7c:de:e0:d4:b3:2c: 1a:f5:61:b9:3b:53:92:83:09:2b:e6:81:4b:a4:28:7d:dc:46: 41:e9:b8:e9:b2:b9:e6:a2:e1:45:54:32:9b:59:59:4e:b3:55: 33:da:69:c6 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjQwNDMwMDk0NzU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMwYmU0Yy02NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AWR09o2O08q63Q/Ti5iVjbm2yfD+5zIndYyVAyWWr1MCAkTc0oKVdIIjRBj VwDAY3JkugNVYeROAQowDo6ueVbUPJzLIfEdK59GZoTJEheW/TVDJvWWcGDup3LX 8x4Jz9I2kElRHb+CTOxDyGDXqxqVC+dusnKT/m1wuguSJYNPuf5WB/uv+Rz6/GBI mNkMcFqikmbq5kUqsXPe67oXqW35rC8NgespA4EOcmV0sqlppqNbEJbsC3mzhc6G xHdduFWLFgBqWUPpHCJmQeABqulvliFIwBanKztdMvTrkhUG2EkeT0ICIT+zkHX4 FH+Q3njeKPyM311l+qOhBKPhBQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJ5uyTP5 B2SSKJMnGBwiBU1MxYT7MB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvRTExMDM1REUw MkUzMTFFRkE5NzEyODU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAbbxEDBAB1eeYDBAB1eewDBAB1ee4DBADKNPMwDQYJKoZI hvcNAQELBQADggEBAEOu/71h4NtEY59BzYPargQRqGje+CFs6UGlE/HnEwFghCdF /7ongsNiGYozkXkkfUtXsM5i1seavZVbbJTBxs2i58ZDzxzp4WHJaUy+uXdVEWfF sDU5PTiEvMXYPHagZcYhmieueWsOGl/S+i/gR0RQMrAjiSsDyfQZoPmYYqrhZ43f 4Ewl0Nd4PW9ZDdaS9QHHD2alGQLZJQlkm7pVsVCiwxF3ylY7+ZCtcrGsteW3CsNC WT1Fwa9l903ycc2cgdmSD/p2SfuZ/ti2M2eruhbiNnze4NSzLBr1Ybk7U5KDCSvm gUukKH3cRkHpuOmyueai4UVUMptZWU6zVTPaacY= -----END CERTIFICATE-----Generated at Fri May 24 21:43:16 2024 by rpki-client on console-ams.rpki-client.org