$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E4E349CBDE411EAB947BE63C4F9AE02.roa File: 3E4E349CBDE411EAB947BE63C4F9AE02.roa (raw, json) Hash identifier: SiCVBr8yJm8JL9DbJkGH/sAX4+1fl9vpG3dXa6AAZQI= Subject key identifier: 0B:7C:E2:7E:10:99:71:8D:05:1C:62:26:9D:00:FD:B4:31:2E:62:63 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 69DC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E4E349CBDE411EAB947BE63C4F9AE02.roa Signing time: Wed 10 May 2023 16:11:54 +0000 ROA not before: Wed 10 May 2023 16:11:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 10201 IP address blocks: 27.251.31.0/24 maxlen: 24 27.251.81.0/24 maxlen: 24 27.251.107.0/24 maxlen: 24 27.251.108.0/24 maxlen: 24 27.251.109.0/24 maxlen: 24 58.68.38.0/24 maxlen: 24 58.68.68.0/24 maxlen: 24 58.68.108.0/24 maxlen: 24 58.68.109.0/24 maxlen: 24 202.148.192.0/24 maxlen: 24 202.148.200.0/24 maxlen: 24 202.148.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27100 (0x69dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:11:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc249-a1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:c9:32:dc:cc:d0:3c:e9:ee:08:ad:5c:9b: 93:50:7d:13:4c:59:15:03:4c:26:2e:23:a3:34:5c: c3:90:41:4f:be:3d:ef:52:5e:97:62:aa:fd:0b:52: d7:f4:66:10:87:e5:3b:24:34:b4:8c:52:24:28:c4: 23:57:c5:be:f0:f5:5e:b6:30:45:aa:25:41:02:30: 2a:49:44:75:68:f7:a8:b8:37:ff:c3:16:24:c5:7f: a3:7c:e1:81:3d:30:36:fa:47:e3:94:d1:bd:52:be: 0c:29:36:7c:2c:9a:9f:c9:0f:df:79:a8:69:08:5a: d9:e9:07:3e:12:21:f2:47:a5:a4:8a:3e:cf:b8:53: 7f:2c:1c:c6:0e:28:e2:30:a7:08:80:30:28:51:11: cf:67:a8:ee:4c:f8:a0:59:2e:09:65:98:4e:8b:78: 54:c7:e8:11:ac:c9:8d:c3:d6:00:7e:9f:68:95:37: ba:47:93:14:40:97:63:90:01:53:5f:83:62:93:6d: b6:a0:c3:8d:22:dc:73:db:c6:2e:42:b6:7d:5c:18: ed:ae:40:69:49:f3:ec:0a:18:12:7a:08:3d:73:e4: 96:5a:2d:03:f8:ab:df:c1:b2:3c:95:d2:37:c5:5c: b3:e3:95:43:0a:f3:35:27:43:74:f4:a7:8c:f3:8b: 61:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7C:E2:7E:10:99:71:8D:05:1C:62:26:9D:00:FD:B4:31:2E:62:63 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3E4E349CBDE411EAB947BE63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.251.31.0/24 27.251.81.0/24 27.251.107.0-27.251.109.255 58.68.38.0/24 58.68.68.0/24 58.68.108.0/23 202.148.192.0/24 202.148.200.0/24 202.148.202.0/24 Signature Algorithm: sha256WithRSAEncryption 75:90:6e:f3:32:f0:af:ba:49:e7:11:f8:e0:46:30:cd:1c:cc: 42:7d:48:98:6a:1f:36:dc:ae:eb:a0:8d:30:09:a3:7e:84:e7: 3d:1c:d1:ce:a2:47:21:ff:45:19:04:0a:5a:f4:8c:d1:ab:28: 8e:b5:8d:9f:29:a7:02:c5:1c:85:70:ad:1d:3c:f5:fa:ee:87: 78:d0:f1:c2:e0:d2:3b:77:3c:d3:88:15:02:84:8a:40:f0:f0: 82:3b:37:59:2a:f9:e7:88:90:14:71:f5:17:23:9f:a0:d1:21: 5d:43:ee:48:eb:ed:c3:83:88:d9:2d:90:81:01:bf:2d:b1:f7: 10:9b:28:c1:70:0a:23:10:ab:8b:1b:ab:f4:51:32:3d:de:7d: e6:81:3f:ce:83:a0:c7:85:ce:c2:f2:42:15:c5:02:57:be:87: b7:7f:4d:82:06:2b:6a:d0:d6:a0:12:43:48:bd:dc:47:88:da: 6a:99:f1:5c:29:a5:14:0b:c9:ed:e8:14:d0:a6:11:35:6e:b9: 80:d6:91:dd:b2:ef:e0:13:f1:d6:c3:40:c6:0d:b6:ca:ba:6b: f9:43:57:d0:ed:ff:49:25:79:d3:42:05:13:1b:06:0a:6a:0a: 42:89:3a:0b:dd:5b:fd:a8:f8:87:20:af:97:f8:99:c9:1c:a2: 32:1e:ea:a5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICadwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxMTU0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzI0OS1hMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7XJMtzM0Dzp7gitXJuTUH0TTFkVA0wmLiOjNFzDkEFPvj3vUl6XYqr9C1LX 9GYQh+U7JDS0jFIkKMQjV8W+8PVetjBFqiVBAjAqSUR1aPeouDf/wxYkxX+jfOGB PTA2+kfjlNG9Ur4MKTZ8LJqfyQ/feahpCFrZ6Qc+EiHyR6Wkij7PuFN/LBzGDiji MKcIgDAoURHPZ6juTPigWS4JZZhOi3hUx+gRrMmNw9YAfp9olTe6R5MUQJdjkAFT X4Nik222oMONItxz28YuQrZ9XBjtrkBpSfPsChgSegg9c+SWWi0D+KvfwbI8ldI3 xVyz45VDCvM1J0N09KeM84thVwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFAt84n4Q mXGNBRxiJp0A/bQxLmJjMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0U0RTM0OUNC REU0MTFFQUI5NDdCRTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMEQEAgABMD4DBAAb+x8DBAAb+1EwDAMEABv7awMEARv7bAMEADpEJgMEADpE RAMEATpEbAMEAMqUwAMEAMqUyAMEAMqUyjANBgkqhkiG9w0BAQsFAAOCAQEAdZBu 8zLwr7pJ5xH44EYwzRzMQn1ImGofNtyu66CNMAmjfoTnPRzRzqJHIf9FGQQKWvSM 0asojrWNnymnAsUchXCtHTz1+u6HeNDxwuDSO3c804gVAoSKQPDwgjs3WSr554iQ FHH1FyOfoNEhXUPuSOvtw4OI2S2QgQG/LbH3EJsowXAKIxCrixur9FEyPd595oE/ zoOgx4XOwvJCFcUCV76Ht39NggYratDWoBJDSL3cR4jaapnxXCmlFAvJ7egU0KYR NW65gNaR3bLv4BPx1sNAxg22yrpr+UNX0O3/SSV500IFExsGCmoKQok6C91b/aj4 hyCvl/iZyRyiMh7qpQ== -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org