$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa File: D9AFDBC2400111EFBB30C475C4F9AE02.roa (raw, json) Hash identifier: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg= Subject key identifier: DE:27:3A:24:92:76:E3:B8:04:4C:B6:67:EA:D2:8A:BC:A2:1E:FC:C4 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0A10 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa Signing time: Wed 06 Nov 2024 20:09:49 +0000 ROA not before: Wed 06 Nov 2024 20:09:49 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 138195 IP address blocks: 27.124.8.0/24 maxlen: 24 202.79.160.0/24 maxlen: 24 202.79.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Nov 6 20:09:49 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bcd0d-c03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:d2:1a:fd:20:39:bd:29:a4:8c:6d:30:37: 2b:42:66:48:75:ad:86:fa:ac:cd:96:a1:a9:78:5a: e4:9a:03:7c:0f:85:42:a8:87:58:4a:c2:f5:01:9c: 84:09:ea:5b:80:3f:1f:da:b5:2b:d2:f7:a6:44:b3: e2:0c:9c:b2:5c:60:7b:80:13:a4:af:7c:ed:c5:6f: 5c:5e:76:9c:24:27:be:24:66:5a:a4:58:9f:15:4f: 54:a1:81:f7:21:68:d8:f5:0f:ed:df:d0:ed:62:39: 7c:78:33:80:98:f0:01:1c:e5:5d:ce:75:d6:ba:6e: 8d:d8:88:b1:78:a2:20:cf:2d:7c:cc:ff:66:4c:6a: 30:e0:e3:a6:e4:ad:ff:22:2a:40:1b:92:87:b0:b8: ba:b9:6a:92:ec:4e:58:77:89:dc:d3:8e:dc:cc:5e: de:f4:5d:2c:48:9d:49:41:40:1a:fe:5a:c5:20:11: 8c:dd:a5:56:b7:3f:de:05:94:1f:65:2a:5d:87:9c: de:3d:89:8d:21:54:9c:af:a3:99:27:de:71:37:c1: ac:7e:b5:c7:ef:f5:94:89:93:60:1d:0e:69:71:01: 82:9b:fc:ec:7c:e3:17:f2:b2:7a:e1:0f:3d:25:c2: c1:fd:89:5a:12:a3:d2:86:dc:48:09:70:65:98:e5: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:3A:24:92:76:E3:B8:04:4C:B6:67:EA:D2:8A:BC:A2:1E:FC:C4 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/D9AFDBC2400111EFBB30C475C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.124.8.0/24 202.79.160.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:d0:9a:70:2b:c2:3b:91:35:ec:67:52:ea:5d:6c:6b:3b:19: a8:ee:14:a8:43:d2:2b:5a:83:f0:1e:c8:79:cc:79:1b:e8:80: af:c6:cd:54:de:e5:86:7a:37:c6:06:af:42:2a:b1:15:e1:ae: 6e:b1:a1:d7:2d:95:4b:34:b4:fa:a5:a7:21:4c:2c:1e:10:d6: 1a:93:2d:2f:b3:74:d9:e2:07:99:0f:8a:e2:bc:d2:d7:f8:1a: 4c:21:b1:18:4a:af:16:15:f8:17:c1:4c:3b:c1:48:3c:7e:5d: 04:21:27:85:cf:8d:8b:0b:d4:de:e9:a9:1d:4a:eb:19:4c:7c: 13:8e:04:ec:90:9b:f1:62:c4:6c:97:fd:30:16:4c:f8:dc:90: 99:02:14:8f:ee:e9:ad:52:97:7d:d8:14:5f:64:8b:1c:79:bf: 22:10:b8:ab:dd:96:5f:b8:d6:fd:b0:f6:e2:8c:4f:c6:01:69: 94:dc:27:01:f9:3a:dc:fa:ef:82:2a:63:dd:37:b9:6c:ab:8c: 16:ec:b7:fe:53:b0:a4:c2:5b:3b:b3:b1:71:51:75:2e:11:3f: 6a:ed:0f:7c:0e:3b:93:8d:ae:c9:e6:fc:f7:a8:d7:3a:4d:cd: 8a:46:95:e6:2c:bc:cc:34:83:83:6a:bc:52:de:fd:86:9d:42: b0:39:dc:eb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjQxMTA2MjAwOTQ5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiY2QwZC1jMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS3SGv0gOb0ppIxtMDcrQmZIda2G+qzNlqGpeFrkmgN8D4VCqIdYSsL1AZyE CepbgD8f2rUr0vemRLPiDJyyXGB7gBOkr3ztxW9cXnacJCe+JGZapFifFU9UoYH3 IWjY9Q/t39DtYjl8eDOAmPABHOVdznXWum6N2IixeKIgzy18zP9mTGow4OOm5K3/ IipAG5KHsLi6uWqS7E5Yd4nc047czF7e9F0sSJ1JQUAa/lrFIBGM3aVWtz/eBZQf ZSpdh5zePYmNIVScr6OZJ95xN8GsfrXH7/WUiZNgHQ5pcQGCm/zsfOMX8rJ64Q89 JcLB/YlaEqPShtxICXBlmOWVbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN4nOiSS duO4BEy2Z+rSiryiHvzEMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMEJCRDlFQTI4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvRDlBRkRCQzI0 MDAxMTFFRkJCMzBDNDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAbfAgDBAHKT6AwDQYJKoZIhvcNAQELBQADggEBAJrQmnAr wjuRNexnUupdbGs7GajuFKhD0itag/AeyHnMeRvogK/GzVTe5YZ6N8YGr0IqsRXh rm6xodctlUs0tPqlpyFMLB4Q1hqTLS+zdNniB5kPiuK80tf4GkwhsRhKrxYV+BfB TDvBSDx+XQQhJ4XPjYsL1N7pqR1K6xlMfBOOBOyQm/FixGyX/TAWTPjckJkCFI/u 6a1Sl33YFF9kixx5vyIQuKvdll+41v2w9uKMT8YBaZTcJwH5Otz674IqY903uWyr jBbst/5TsKTCWzuzsXFRdS4RP2rtD3wOO5ONrsnm/Peo1zpNzYpGleYsvMw0g4Nq vFLe/YadQrA53Os= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org