$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa File: DA7F8A1478E611E7AEAB9A41C4F9AE02.roa (raw, json) Hash identifier: wJLvQq2AcQa8Z75whnNtpNJWQDmk4E7EAyXoOtZnFmk= Subject key identifier: 0D:CE:B1:01:F5:F4:BE:63:6E:15:C5:00:2D:5F:35:2D:B6:3D:27:23 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3427 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa Signing time: Tue 30 Jul 2024 16:02:56 +0000 ROA not before: Tue 30 Jul 2024 16:02:56 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 58396 IP address blocks: 27.54.116.0/22 maxlen: 22 27.54.116.0/24 maxlen: 24 27.54.117.0/24 maxlen: 24 27.54.118.0/24 maxlen: 24 27.54.119.0/24 maxlen: 24 103.11.21.0/24 maxlen: 24 103.11.222.0/24 maxlen: 24 103.225.172.0/23 maxlen: 23 103.225.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13351 (0x3427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jul 30 16:02:56 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66a90eb0-c1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:66:8a:58:9c:2d:a9:62:10:aa:f4:02:b7: 3b:4b:9d:14:a6:f1:13:bd:03:dd:ca:2d:b6:65:1d: 40:da:72:f8:96:34:c7:16:48:12:9f:c6:b8:84:18: ae:70:6f:e4:86:68:8c:af:b5:30:52:5d:18:84:83: ca:f4:fd:e9:40:01:ff:03:b2:d0:3e:fc:ff:fd:03: c0:9b:67:5c:87:a2:bf:5f:19:8a:9d:ea:4b:10:3d: 77:55:ac:57:8c:5a:bb:a2:48:21:1e:26:c8:fe:12: 18:7f:62:6b:da:70:0a:04:8f:03:eb:01:75:23:3b: f0:ba:e9:15:67:a5:18:a5:0a:7d:18:c1:4e:5e:4e: 2f:4b:e9:1a:19:9b:ae:e9:1a:af:7f:d6:8e:7a:19: bd:5f:41:07:1e:4f:33:5f:c7:9b:f4:1f:66:e5:16: 7a:1c:dc:7d:19:a2:23:1f:92:04:06:f3:4a:b2:9f: 3b:6b:bc:62:2b:81:2a:aa:eb:38:81:c7:81:e6:39: ca:02:ba:c4:3c:0e:69:0c:22:52:c4:26:8a:80:69: 92:f8:36:af:32:1c:17:98:d7:27:33:10:c1:bc:6f: 24:3f:1a:ea:21:2b:65:4e:b4:9f:1c:ad:d3:36:f6: 15:b1:9d:3a:97:4b:fa:c8:6e:4b:7a:92:31:5b:11: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:B1:01:F5:F4:BE:63:6E:15:C5:00:2D:5F:35:2D:B6:3D:27:23 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/DA7F8A1478E611E7AEAB9A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.54.116.0/22 103.11.21.0/24 103.11.222.0/24 103.225.172.0/23 Signature Algorithm: sha256WithRSAEncryption bf:85:13:23:17:cd:65:19:43:4c:3c:f8:47:f1:d5:9d:6e:1c: 38:46:b7:a9:41:a6:15:be:44:d0:05:a2:ea:95:65:31:f1:51: d3:a7:fd:94:5f:cc:5b:15:af:ed:a6:39:94:c9:0a:29:f0:fa: 6a:69:d1:74:f2:a7:92:50:40:10:40:6f:04:49:24:78:6a:a0: a6:c0:6f:81:ec:41:39:89:a3:d4:69:b0:68:d2:56:75:78:f1: 53:34:5a:4a:fb:de:39:07:bb:ae:60:97:ce:5d:ce:46:c5:c3: 8f:d0:d6:08:a2:ed:7b:59:25:17:e3:7d:20:08:f7:b0:f7:8a: 94:c4:94:25:07:2d:1d:7f:31:75:2d:40:c2:63:87:c1:f1:4a: 66:a6:f9:b9:c8:0a:8f:23:2b:4a:7f:c2:9c:91:29:d5:b5:ff: 9a:40:b2:94:35:90:c0:68:90:d0:95:43:a1:03:08:7c:76:9e: 7e:1f:c6:4e:d0:17:76:9e:dd:74:37:c0:69:6b:61:3d:88:62: aa:8a:2c:ea:37:4b:97:08:bb:ad:92:74:64:4d:92:05:5c:8b: 45:4f:6b:61:0b:18:fd:86:2f:84:f5:c4:26:9d:66:d1:9c:e6: 4d:4e:29:a0:71:9e:74:5d:38:61:a0:31:60:74:1b:91:f6:67: c0:26:07:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICNCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwNzMwMTYwMjU2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGViMC1jMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHxmilicLaliEKr0Arc7S50UpvETvQPdyi22ZR1A2nL4ljTHFkgSn8a4hBiu cG/khmiMr7UwUl0YhIPK9P3pQAH/A7LQPvz//QPAm2dch6K/XxmKnepLED13VaxX jFq7okghHibI/hIYf2Jr2nAKBI8D6wF1IzvwuukVZ6UYpQp9GMFOXk4vS+kaGZuu 6Rqvf9aOehm9X0EHHk8zX8eb9B9m5RZ6HNx9GaIjH5IEBvNKsp87a7xiK4Eqqus4 gceB5jnKArrEPA5pDCJSxCaKgGmS+DavMhwXmNcnMxDBvG8kPxrqIStlTrSfHK3T NvYVsZ06l0v6yG5LepIxWxE7twIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFA3OsQH1 9L5jbhXFAC1fNS22PScjMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvREE3RjhBMTQ3 OEU2MTFFN0FFQUI5QTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbNnQDBABnCxUDBABnC94DBAFn4awwDQYJKoZIhvcNAQEL BQADggEBAL+FEyMXzWUZQ0w8+Efx1Z1uHDhGt6lBphW+RNAFouqVZTHxUdOn/ZRf zFsVr+2mOZTJCinw+mpp0XTyp5JQQBBAbwRJJHhqoKbAb4HsQTmJo9RpsGjSVnV4 8VM0Wkr73jkHu65gl85dzkbFw4/Q1gii7XtZJRfjfSAI97D3ipTElCUHLR1/MXUt QMJjh8HxSmam+bnICo8jK0p/wpyRKdW1/5pAspQ1kMBokNCVQ6EDCHx2nn4fxk7Q F3ae3XQ3wGlrYT2IYqqKLOo3S5cIu62SdGRNkgVci0VPa2ELGP2GL4T1xCadZtGc 5k1OKaBxnnRdOGGgMWB0G5H2Z8AmB90= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org