$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa File: 6BCCFC3021C711ECAB50C72DC4F9AE02.roa (raw, json) Hash identifier: +MebhCidoI/tNLlpFoAl07FaFTZO8y5wh8m+xwp4/gc= Subject key identifier: 18:83:22:01:BB:EE:28:3A:B4:5A:E3:B7:AF:E5:2B:16:8C:04:25:8D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6B50 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa Signing time: Wed 10 May 2023 16:19:04 +0000 ROA not before: Wed 10 May 2023 16:19:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 134871 IP address blocks: 27.0.228.0/24 maxlen: 24 27.0.231.0/24 maxlen: 24 103.208.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27472 (0x6b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:19:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc3f8-efb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:f8:e4:7c:4b:28:68:73:92:e6:3f:b8:7f: be:6b:a8:e2:a3:ae:c1:b9:bd:91:7e:77:57:11:7f: 08:9c:27:f0:0f:2b:9e:f8:62:ea:60:d2:da:74:52: 0e:9b:e7:14:17:0c:62:f6:2a:f0:8e:8c:5c:42:b3: e1:67:c7:14:79:87:18:b7:5d:4f:90:c7:07:db:21: 7b:c5:cb:1e:e7:df:9f:1f:d8:8b:56:20:62:90:fb: 40:f0:32:75:f0:56:25:37:d9:f5:6a:01:0f:5b:29: e2:3d:b9:b7:89:ec:e3:38:34:38:53:9b:bc:c7:34: e6:3c:ce:8a:2c:07:7d:cb:71:55:f4:7f:c9:1a:a9: d5:bf:e6:24:8d:be:ec:3d:05:4c:f7:b0:25:b9:e3: 6a:a3:66:6d:60:d8:77:08:ba:b2:c3:61:69:09:ad: d8:08:c2:79:9b:ca:71:29:15:6a:62:32:ef:78:b9: b6:ea:81:eb:cb:59:93:cc:be:bd:a3:40:dd:30:21: 8a:72:6a:fd:d1:d0:34:3c:26:87:f0:94:0d:e3:37: 4f:27:cf:52:35:a6:e4:30:cb:15:63:87:c8:49:65: f2:69:89:bd:cc:cd:27:bb:54:5e:3a:a7:c8:fe:6f: dd:70:af:83:c4:cc:52:a3:78:19:93:ca:62:b5:d6: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:22:01:BB:EE:28:3A:B4:5A:E3:B7:AF:E5:2B:16:8C:04:25:8D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCCFC3021C711ECAB50C72DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.228.0/24 27.0.231.0/24 103.208.80.0/22 Signature Algorithm: sha256WithRSAEncryption b2:c1:3c:a5:94:7f:0d:fb:6e:44:dc:7a:41:4b:7d:db:bc:f2: 59:c1:c7:51:cf:aa:37:97:20:fd:ae:83:5c:f6:af:1c:12:ff: a2:01:e5:e9:4a:c0:a7:0c:a9:b0:96:6c:cf:44:7f:ff:30:59: 21:0b:9d:08:a4:cd:2f:69:54:33:da:57:49:2e:4e:2d:df:bf: cd:ea:de:1d:21:a5:0c:a0:50:2b:59:21:19:9e:d3:75:dc:f2: f4:05:d4:b4:2d:70:67:1d:44:99:82:17:ff:ad:c8:f5:5e:5e: 53:83:31:48:03:85:d6:55:ad:74:c5:ab:6d:31:7c:1a:88:25: a9:5e:a7:96:cf:bf:fe:20:36:f7:4e:54:60:8c:45:18:12:81: 63:f4:a9:4e:d8:aa:60:a6:63:85:cf:b4:24:d6:07:d4:c6:62: 51:b6:85:9c:2f:b0:ee:48:84:16:e1:fe:bd:c1:59:de:6d:4e: 7a:23:68:6b:49:b3:d2:66:15:7f:13:6e:96:f6:d2:20:18:45: 1e:5a:0d:3c:76:6b:28:d9:94:a8:78:08:f7:91:d5:d0:4a:83: 2d:e3:fa:d7:63:0d:3c:19:4d:b0:25:db:f8:a7:80:18:f4:52: b6:12:af:35:73:39:db:90:56:78:f7:aa:0d:9e:52:56:c0:2d: 27:49:cb:8c -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICa1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYxOTA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzNmOC1lZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMv45HxLKGhzkuY/uH++a6jio67Bub2RfndXEX8InCfwDyue+GLqYNLadFIO m+cUFwxi9irwjoxcQrPhZ8cUeYcYt11PkMcH2yF7xcse59+fH9iLViBikPtA8DJ1 8FYlN9n1agEPWyniPbm3iezjODQ4U5u8xzTmPM6KLAd9y3FV9H/JGqnVv+Ykjb7s PQVM97AlueNqo2ZtYNh3CLqyw2FpCa3YCMJ5m8pxKRVqYjLveLm26oHry1mTzL69 o0DdMCGKcmr90dA0PCaH8JQN4zdPJ89SNabkMMsVY4fISWXyaYm9zM0nu1ReOqfI /m/dcK+DxMxSo3gZk8pitdasWQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBiDIgG7 7ig6tFrjt6/lKxaMBCWNMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkJDQ0ZDMzAy MUM3MTFFQ0FCNTBDNzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAbAOQDBAAbAOcDBAJn0FAwDQYJKoZIhvcNAQELBQADggEB ALLBPKWUfw37bkTcekFLfdu88lnBx1HPqjeXIP2ug1z2rxwS/6IB5elKwKcMqbCW bM9Ef/8wWSELnQikzS9pVDPaV0kuTi3fv83q3h0hpQygUCtZIRme03Xc8vQF1LQt cGcdRJmCF/+tyPVeXlODMUgDhdZVrXTFq20xfBqIJalep5bPv/4gNvdOVGCMRRgS gWP0qU7YqmCmY4XPtCTWB9TGYlG2hZwvsO5IhBbh/r3BWd5tTnojaGtJs9JmFX8T bpb20iAYRR5aDTx2ayjZlKh4CPeR1dBKgy3j+tdjDTwZTbAl2/ingBj0UrYSrzVz OduQVnj3qg2eUlbALSdJy4w= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:36 2024 by rpki-client on console-ams.rpki-client.org