$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/527AA5C69F4F11EAA7970484C4F9AE02.roa File: 527AA5C69F4F11EAA7970484C4F9AE02.roa (raw, json) Hash identifier: T96ePwaxRSdFBmc3Y6k58ry+6iGVCBzjCHazC1p/+dY= Subject key identifier: 4D:01:96:D3:8E:C7:46:7C:9E:F7:67:10:45:8C:C1:3E:61:6B:EB:A2 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1D25 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/527AA5C69F4F11EAA7970484C4F9AE02.roa Signing time: Tue 06 Feb 2024 16:43:44 +0000 ROA not before: Tue 06 Feb 2024 16:43:44 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 45121 IP address blocks: 27.131.62.0/23 maxlen: 23 27.131.62.0/24 maxlen: 24 27.131.63.0/24 maxlen: 24 122.0.31.0/24 maxlen: 24 202.133.108.0/22 maxlen: 22 202.133.108.0/23 maxlen: 24 202.133.110.0/23 maxlen: 24 2405:6400:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7461 (0x1d25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Feb 6 16:43:44 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65c261bf-7502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:69:64:7d:70:fa:2f:12:0e:2b:f6:8e:d0: 98:e0:4b:10:1e:80:4b:13:45:fd:96:4f:06:d8:f5: 5f:65:7f:e7:90:34:f5:3c:67:c5:cc:2b:8a:0a:22: 9d:9a:93:55:9d:2d:6f:4f:c9:db:b4:77:89:6f:e9: 33:2c:52:ae:85:ce:4b:c8:ee:8d:b2:f1:d3:62:d4: 69:d0:0a:6b:ac:27:dd:62:0a:6c:33:18:c3:2e:0e: dc:81:8a:45:4b:64:87:a9:61:fc:46:e2:c9:1f:d0: 23:c6:1b:b4:6d:4e:e1:c6:ac:b9:2c:6c:1e:b8:53: d2:0e:aa:32:d9:65:01:00:b7:8a:11:65:f7:3b:5b: f8:41:19:96:0f:43:4d:f1:ab:fe:d7:4f:4d:b0:02: 2a:6e:e6:5f:ef:b6:56:b1:a2:cb:e2:1a:26:95:3c: 02:cc:19:df:0d:c3:60:dc:fb:34:cc:fd:d0:d1:ed: dc:d3:cb:08:93:24:af:67:aa:f8:ee:d3:df:29:23: 0b:70:b4:60:b2:aa:b5:91:94:01:92:32:fd:67:10: 54:29:c5:1e:47:2a:57:7c:2d:1d:45:d3:fd:5e:dc: 95:26:9e:69:9e:d3:dd:eb:1b:d5:47:76:72:26:1a: 34:f8:0f:e4:24:d1:73:fb:92:07:0f:e9:18:11:ad: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:01:96:D3:8E:C7:46:7C:9E:F7:67:10:45:8C:C1:3E:61:6B:EB:A2 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/527AA5C69F4F11EAA7970484C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.131.62.0/23 122.0.31.0/24 202.133.108.0/22 IPv6: 2405:6400:4000::/36 Signature Algorithm: sha256WithRSAEncryption ac:df:12:b0:32:b6:19:d5:bf:f0:68:32:2b:01:1d:24:84:79: 00:59:87:35:49:c3:67:c9:a4:17:5b:32:6b:b6:92:c1:6e:5f: 79:df:68:08:d1:0f:7f:41:60:55:cd:25:dd:c7:f6:88:f1:ec: 9e:e3:79:c6:1b:0e:09:73:db:50:2a:bb:79:b7:18:c1:d0:2c: df:c7:8f:ec:b3:02:54:a2:10:17:0d:2d:b1:9f:da:db:eb:80: 4e:47:66:fb:9c:ff:04:a1:e4:41:d2:09:56:cd:95:56:5a:0a: fe:04:ee:65:9a:f2:ba:2d:e1:42:c7:90:10:42:8e:08:2a:08: 5b:79:14:f3:cb:3a:ca:f5:7d:37:21:59:51:d4:c1:81:1e:7b: e2:7a:43:9e:48:26:3a:68:4c:36:ae:13:f2:9a:ce:85:5a:77: a2:69:51:25:07:fe:e6:df:1d:ac:b4:bf:53:3a:88:9d:4f:c8: a0:50:ac:4c:66:97:c8:05:c2:90:0d:eb:34:19:59:3a:3b:da: 93:f1:55:80:0c:74:a1:3a:dd:df:41:03:ab:61:ef:5c:9d:92: d5:fd:54:ce:20:ea:a6:55:8e:99:46:0c:1e:1f:12:b5:c7:bc: 76:08:aa:d1:ab:3c:10:54:a3:5d:0b:7c:a5:76:d9:53:d9:dd: eb:03:24:d0 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjQwMjA2MTY0MzQ0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWMyNjFiZi03NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz5pZH1w+i8SDiv2jtCY4EsQHoBLE0X9lk8G2PVfZX/nkDT1PGfFzCuKCiKd mpNVnS1vT8nbtHeJb+kzLFKuhc5LyO6NsvHTYtRp0AprrCfdYgpsMxjDLg7cgYpF S2SHqWH8RuLJH9Ajxhu0bU7hxqy5LGweuFPSDqoy2WUBALeKEWX3O1v4QRmWD0NN 8av+109NsAIqbuZf77ZWsaLL4homlTwCzBnfDcNg3Ps0zP3Q0e3c08sIkySvZ6r4 7tPfKSMLcLRgsqq1kZQBkjL9ZxBUKcUeRypXfC0dRdP9XtyVJp5pntPd6xvVR3Zy Jho0+A/kJNFz+5IHD+kYEa3eqwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFE0BltOO x0Z8nvdnEEWMwT5ha+uiMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM0NkEvMDA1MDAxNjQ5NDMyMTFFNjhDMUI4MjRBQzRGOUFFMDIvNTI3QUE1QzY5 RjRGMTFFQUE3OTcwNDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMBgEAgABMBIDBAEbgz4DBAB6AB8DBALKhWwwDgQCAAIwCAMGBCQFZABAMA0G CSqGSIb3DQEBCwUAA4IBAQCs3xKwMrYZ1b/waDIrAR0khHkAWYc1ScNnyaQXWzJr tpLBbl9532gI0Q9/QWBVzSXdx/aI8eye43nGGw4Jc9tQKrt5txjB0Czfx4/sswJU ohAXDS2xn9rb64BOR2b7nP8EoeRB0glWzZVWWgr+BO5lmvK6LeFCx5AQQo4IKghb eRTzyzrK9X03IVlR1MGBHnviekOeSCY6aEw2rhPyms6FWneiaVElB/7m3x2stL9T OoidT8igUKxMZpfIBcKQDes0GVk6O9qT8VWADHShOt3fQQOrYe9cnZLV/VTOIOqm VY6ZRgweHxK1x7x2CKrRqzwQVKNdC3yldtlT2d3rAyTQ -----END CERTIFICATE-----Generated at Sat May 18 16:57:54 2024 by rpki-client on console-fra.rpki-client.org