$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa File: 27A298A00C6C11EC82638A40C4F9AE02.roa (raw, json) Hash identifier: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs= Subject key identifier: 5C:4A:0F:50:5E:74:F6:E5:75:76:B6:EB:D9:70:06:E0:41:F2:68:01 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0F50 Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa Signing time: Thu 28 Nov 2024 17:36:12 +0000 ROA not before: Thu 28 Nov 2024 17:36:12 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9009 IP address blocks: 103.131.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51 Validity Not Before: Nov 28 17:36:12 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748aa0c-fe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3a:ce:f5:f5:18:c5:9b:d2:41:c9:6c:9c:9a: 71:89:05:f2:d7:e8:6f:12:6b:b7:8a:b3:ea:86:02: b5:53:c3:0e:16:b5:7f:29:de:c4:a4:e1:cc:4d:40: e3:df:91:5f:b5:55:2f:95:9d:16:8a:a0:c9:f4:ea: a1:66:0d:d0:58:0a:f5:92:cb:51:ff:6b:c1:6e:42: 72:bf:b5:b0:7b:ec:21:9c:ee:fd:e8:28:a9:0d:a8: 31:ce:0e:7d:d7:31:1d:e3:49:03:48:aa:17:c6:57: 87:61:62:b7:3d:96:24:62:50:d6:bd:62:28:68:dd: 98:21:93:20:53:b2:ab:6e:b4:93:1b:27:fd:cd:02: 6d:43:e2:bd:29:08:61:c2:18:9c:a1:a1:05:33:09: 9c:ea:dd:f3:aa:31:5e:4f:4c:d8:56:22:5d:a1:2b: 69:6f:90:a3:44:30:81:6a:44:d1:1f:9c:49:b6:e3: 5a:c4:45:cf:46:3f:bd:c7:9c:40:47:39:7b:c6:67: 0a:f5:c1:15:20:76:61:5f:bb:c3:1c:6d:7e:0a:54: 55:10:e3:58:32:a9:44:88:49:b3:a6:2b:58:60:98: c7:71:17:fe:de:58:e0:e9:a1:2d:a4:55:0f:47:09: 06:73:5e:76:57:5e:55:e7:4a:fb:c8:29:1b:a5:c3: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4A:0F:50:5E:74:F6:E5:75:76:B6:EB:D9:70:06:E0:41:F2:68:01 X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/27A298A00C6C11EC82638A40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.131.235.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e6:5f:fd:8c:cd:4b:d4:52:0d:23:b0:0b:fc:0d:11:ee:db: 75:01:8d:79:64:5d:26:a8:e8:df:77:ef:62:3f:f6:3b:67:8a: 38:4c:fa:9b:9a:a3:12:3f:16:3e:e3:40:61:ae:17:59:6c:f1: c1:68:38:a9:7b:ab:75:a3:a2:01:0d:78:c3:c1:71:d0:25:c7: 01:3c:d5:62:82:b5:44:01:ac:60:b3:69:bd:d8:b7:cb:4f:e7: b1:7c:d5:b6:d2:c8:f5:f2:8f:d9:2b:20:69:57:3b:7e:93:6e: d9:a7:01:66:12:82:46:ab:e2:95:27:c6:8c:4f:d8:84:2e:73: cb:81:90:09:30:ba:b2:9e:ed:68:88:db:ef:5b:81:e8:7a:29: e2:30:d7:3b:48:d6:60:82:3f:83:26:1a:9f:0c:a1:26:f7:f8: 66:b7:4d:fa:16:d9:34:45:5c:a9:f5:32:89:71:53:b1:30:de: ef:9e:54:ba:05:79:d0:98:b5:e4:3e:83:b2:d4:57:51:61:59: 42:70:f6:5a:38:14:8e:d3:f5:00:b1:34:c5:08:f6:76:cd:80: 7f:54:3a:12:38:88:02:c1:d1:ee:95:7b:a9:98:6c:c3:83:66: 51:09:f2:14:16:d4:09:51:63:2e:ba:ca:d6:f5:2d:f1:15:93: 73:81:1f:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjQxMTI4MTczNjEyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4YWEwYy1mZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zrO9fUYxZvSQclsnJpxiQXy1+hvEmu3irPqhgK1U8MOFrV/Kd7EpOHMTUDj 35FftVUvlZ0WiqDJ9OqhZg3QWAr1kstR/2vBbkJyv7Wwe+whnO796CipDagxzg59 1zEd40kDSKoXxleHYWK3PZYkYlDWvWIoaN2YIZMgU7KrbrSTGyf9zQJtQ+K9KQhh whicoaEFMwmc6t3zqjFeT0zYViJdoStpb5CjRDCBakTRH5xJtuNaxEXPRj+9x5xA Rzl7xmcK9cEVIHZhX7vDHG1+ClRVEONYMqlEiEmzpitYYJjHcRf+3ljg6aEtpFUP RwkGc152V15V50r7yCkbpcOFlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFxKD1Be dPbldXa269lwBuBB8mgBMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFNTEvODlGODZGMEE1QjNCMTFFOTg2OUFBNjQxQzRGOUFFMDIvMjdBMjk4QTAw QzZDMTFFQzgyNjM4QTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABng+swDQYJKoZIhvcNAQELBQADggEBAC3mX/2MzUvUUg0j sAv8DRHu23UBjXlkXSao6N9372I/9jtnijhM+puaoxI/Fj7jQGGuF1ls8cFoOKl7 q3WjogENeMPBcdAlxwE81WKCtUQBrGCzab3Yt8tP57F81bbSyPXyj9krIGlXO36T btmnAWYSgkar4pUnxoxP2IQuc8uBkAkwurKe7WiI2+9bgeh6KeIw1ztI1mCCP4Mm Gp8MoSb3+Ga3TfoW2TRFXKn1MolxU7Ew3u+eVLoFedCYteQ+g7LUV1FhWUJw9lo4 FI7T9QCxNMUI9nbNgH9UOhI4iALB0e6Ve6mYbMODZlEJ8hQW1AlRYy66ytb1LfEV k3OBH0o= -----END CERTIFICATE-----Generated at Sat Apr 12 08:42:11 2025 by rpki-client