$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE17729EC4AB11E99055C166C4F9AE02.roa File: FE17729EC4AB11E99055C166C4F9AE02.roa (raw, json) Hash identifier: nfAVOXrfyH4C1DmiSFJaMGD2xaV6rCYvWd4N7T8A3xU= Subject key identifier: 04:EA:E3:A1:B1:FB:7B:80:74:0E:ED:B7:A4:88:24:92:D4:11:F1:E5 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 341D Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE17729EC4AB11E99055C166C4F9AE02.roa Signing time: Tue 30 Jul 2024 16:02:47 +0000 ROA not before: Tue 30 Jul 2024 16:02:47 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 41239 IP address blocks: 27.124.87.0/24 maxlen: 24 27.124.88.0/24 maxlen: 24 2402:d680::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13341 (0x341d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jul 30 16:02:47 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66a90ea7-b5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:07:dc:6d:55:0f:58:54:5e:18:be:31:88: b8:ce:dc:b1:57:9f:b9:35:d5:33:7e:be:47:97:4d: c3:98:7b:13:56:ae:17:7c:9b:40:04:5a:11:6c:7a: 20:3c:2b:a6:33:34:7f:3f:af:a2:2b:00:12:66:ec: c3:4a:fc:17:bd:ff:22:6e:b3:31:17:6a:73:85:bb: d0:aa:33:53:54:1c:36:58:b0:ad:56:af:d2:0f:1e: 31:0c:a4:14:9c:4b:f1:2f:7d:e8:de:ac:49:09:92: f4:29:9a:86:0e:49:a0:5c:d9:29:56:d6:f3:dd:22: c5:75:08:96:b9:12:9b:66:40:c3:f9:60:3c:bf:2e: 2f:be:b4:ef:03:22:78:5c:f8:48:45:4b:e6:df:25: 6e:c1:d7:fb:f3:f8:a1:f3:d6:07:47:9f:35:0a:fb: 2e:ac:95:4f:95:82:94:39:d1:e6:e3:9a:cc:4a:b5: 16:31:ad:6f:29:c7:cf:25:33:48:f7:fe:0d:71:f3: 43:54:f6:13:24:04:16:f7:6d:ce:d2:1e:52:0b:a8: 76:87:98:a8:b6:c2:3d:e1:2b:19:04:65:d3:33:75: ab:87:ab:5b:75:49:ff:e7:08:94:b7:f0:67:e7:99: 6b:23:80:55:ed:1f:59:07:69:d2:de:3d:ef:94:bc: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:E3:A1:B1:FB:7B:80:74:0E:ED:B7:A4:88:24:92:D4:11:F1:E5 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE17729EC4AB11E99055C166C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.124.87.0-27.124.88.255 IPv6: 2402:d680::/34 Signature Algorithm: sha256WithRSAEncryption 2d:5a:0f:c3:15:e3:3d:49:75:66:cf:9a:fa:71:5d:38:59:f0: b5:18:51:8b:53:ad:5b:e6:8d:ce:00:0d:84:42:e8:e5:58:9e: 14:4a:d9:55:75:c7:ae:b3:aa:35:8f:86:3e:0c:23:3c:a8:d3: 24:6c:cf:9b:77:bc:4a:a4:e9:1e:f2:9e:41:c6:6d:47:be:8b: 01:8c:0f:37:b3:e3:71:31:74:d5:34:a3:66:e2:34:89:9a:5f: 63:65:a2:70:0a:58:d2:62:d9:7b:c6:f6:41:24:10:43:85:aa: d0:14:5a:65:9a:95:3d:5a:6b:38:52:ed:ea:49:23:81:d2:f1: ae:c6:32:3f:0a:19:58:fc:d9:05:0e:9f:f6:eb:38:52:64:99: af:4d:5b:d5:f4:15:2c:01:06:83:da:fe:d7:8b:a6:28:9e:2a: 82:2b:dd:c9:77:b3:19:0e:68:5e:1c:22:d6:a3:51:c2:5e:8f: 8e:21:65:12:31:c8:07:93:8f:47:59:70:df:e7:62:72:ab:6f: 5c:be:45:07:9f:4e:ce:a4:e5:10:00:ec:98:17:ab:c0:08:eb: bd:d7:07:ca:09:b8:ce:cf:b7:fc:42:11:00:2c:56:25:09:d9: f3:fc:3c:94:cd:3e:ea:d5:39:68:fa:ed:b6:0e:ac:59:44:50: e3:ad:0e:ca -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICNB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwNzMwMTYwMjQ3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVhNy1iNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNUH3G1VD1hUXhi+MYi4ztyxV5+5NdUzfr5Hl03DmHsTVq4XfJtABFoRbHog PCumMzR/P6+iKwASZuzDSvwXvf8ibrMxF2pzhbvQqjNTVBw2WLCtVq/SDx4xDKQU nEvxL33o3qxJCZL0KZqGDkmgXNkpVtbz3SLFdQiWuRKbZkDD+WA8vy4vvrTvAyJ4 XPhIRUvm3yVuwdf78/ih89YHR581CvsurJVPlYKUOdHm45rMSrUWMa1vKcfPJTNI 9/4NcfNDVPYTJAQW923O0h5SC6h2h5iotsI94SsZBGXTM3Wrh6tbdUn/5wiUt/Bn 55lrI4BV7R9ZB2nS3j3vlLwV0QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFATq46Gx +3uAdA7tt6SIJJLUEfHlMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvRkUxNzcyOUVD NEFCMTFFOTkwNTVDMTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBQEAgABMA4wDAMEABt8VwMEABt8WDAOBAIAAjAIAwYGJALWgAAwDQYJKoZI hvcNAQELBQADggEBAC1aD8MV4z1JdWbPmvpxXThZ8LUYUYtTrVvmjc4ADYRC6OVY nhRK2VV1x66zqjWPhj4MIzyo0yRsz5t3vEqk6R7ynkHGbUe+iwGMDzez43ExdNU0 o2biNImaX2NlonAKWNJi2XvG9kEkEEOFqtAUWmWalT1aazhS7epJI4HS8a7GMj8K GVj82QUOn/brOFJkma9NW9X0FSwBBoPa/teLpiieKoIr3cl3sxkOaF4cItajUcJe j44hZRIxyAeTj0dZcN/nYnKrb1y+RQefTs6k5RAA7JgXq8AI673XB8oJuM7Pt/xC EQAsViUJ2fP8PJTNPurVOWj67bYOrFlEUOOtDso= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org