$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa File: 76C6B0C8105511EC92580578C4F9AE02.roa (raw, json) Hash identifier: f7aJp3CdLsyo0t+stZfCboVaIQ0kQDW57cl0sFNYD7o= Subject key identifier: 52:41:75:F3:F6:F9:18:5F:61:6C:A0:3D:26:82:D4:89:34:9F:1B:E8 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 044D Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa Signing time: Tue 29 Aug 2023 01:02:14 +0000 ROA not before: Tue 29 Aug 2023 01:02:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 138524 IP address blocks: 27.130.252.0/24 maxlen: 24 103.170.130.0/23 maxlen: 23 2407:b1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 29 01:02:14 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ed4395-b877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:fa:14:07:30:79:ed:94:96:6c:f6:a5:45: 27:2c:1b:e9:65:95:ec:75:ce:db:ba:73:af:fb:e6: f5:34:a5:aa:ca:ed:e1:86:bf:83:b2:56:49:68:bf: 5a:51:20:61:40:b9:71:38:f0:a0:b2:29:af:da:6b: 1d:1f:53:70:9d:6e:ee:c0:96:63:6c:13:3f:cd:4e: 80:ac:23:ec:27:09:07:b7:db:08:c8:e7:7c:6b:20: 94:ff:60:01:7b:6b:94:7e:fc:13:b3:9b:a0:13:98: 60:4b:02:8f:1c:77:70:f5:21:08:9f:a5:5a:00:f3: 5e:12:3e:5f:24:0b:aa:70:10:86:32:8f:d4:10:41: e7:b2:44:dd:2f:d1:9e:03:43:12:89:cc:9c:5e:fc: c4:e5:09:c5:6c:3d:90:19:05:87:87:43:86:91:f7: 26:a0:d8:ec:4f:5f:ae:42:5e:bf:47:a2:ff:43:81: e5:2a:ff:5c:ea:e5:38:f1:cc:c8:18:48:b5:12:86: ae:94:e0:a1:cc:3f:8c:0d:ed:88:88:e7:cc:16:3c: 7e:18:51:94:14:c6:98:03:14:78:3f:79:d5:c9:c4: ba:46:a1:ff:1c:ea:aa:9c:8f:e5:f1:60:a0:19:2d: 26:fe:6c:7a:fb:4d:ec:c6:9b:f1:97:61:9c:8d:ac: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:75:F3:F6:F9:18:5F:61:6C:A0:3D:26:82:D4:89:34:9F:1B:E8 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.130.252.0/24 103.170.130.0/23 IPv6: 2407:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:ce:84:61:d3:59:f3:64:85:9a:db:6b:b1:3f:21:ae:6d:0d: d1:75:fe:5f:ca:0a:c6:10:c1:a6:89:3f:87:88:89:0a:28:1a: ea:46:84:83:26:1b:68:9f:56:20:b3:05:4a:83:f9:42:f5:b3: f8:2e:76:90:54:06:bf:90:80:9b:8d:c5:53:db:dd:70:d5:4c: a8:cb:84:85:0b:10:18:c9:5b:7c:b0:a7:85:c8:8a:5b:96:40: de:b2:df:c7:9d:37:91:cc:02:19:6d:47:90:3e:de:09:2d:9f: 23:ab:84:31:fd:d6:02:7b:af:39:66:c5:59:82:ed:75:ea:93: 09:1f:9e:6d:82:a7:a1:85:60:2d:52:4a:4e:b5:2e:f1:c3:bf: c1:d4:60:ac:17:7c:89:d3:05:e6:5f:29:cb:91:43:9e:0c:1d: 66:5e:41:d1:bc:b7:fb:1e:c0:f7:b1:24:2f:1f:58:da:02:6d: 4b:76:b8:de:b4:77:09:18:5f:47:2a:7e:30:0e:6a:fd:81:ad: cc:b1:ab:fe:83:76:19:e5:95:78:aa:e3:87:3c:65:ad:85:d7: 78:eb:95:59:ae:43:52:db:11:10:ca:6e:68:e8:c1:53:6c:f2: 92:04:34:5b:ca:e0:88:1c:a8:9f:7b:5e:ab:d4:81:5b:f0:30: 74:a9:b3:34 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjMwODI5MDEwMjE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVkNDM5NS1iODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GX6FAcwee2Ulmz2pUUnLBvpZZXsdc7bunOv++b1NKWqyu3hhr+DslZJaL9a USBhQLlxOPCgsimv2msdH1NwnW7uwJZjbBM/zU6ArCPsJwkHt9sIyOd8ayCU/2AB e2uUfvwTs5ugE5hgSwKPHHdw9SEIn6VaAPNeEj5fJAuqcBCGMo/UEEHnskTdL9Ge A0MSicycXvzE5QnFbD2QGQWHh0OGkfcmoNjsT1+uQl6/R6L/Q4HlKv9c6uU48czI GEi1EoaulOChzD+MDe2IiOfMFjx+GFGUFMaYAxR4P3nVycS6RqH/HOqqnI/l8WCg GS0m/mx6+03sxpvxl2GcjaxQdwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFJBdfP2 +RhfYWygPSaC1Ik0nxvoMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzZDNkIwQzgx MDU1MTFFQzkyNTgwNTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAAbgvwDBAFnqoIwDQQCAAIwBwMFACQHscAwDQYJKoZIhvcN AQELBQADggEBAIvOhGHTWfNkhZrba7E/Ia5tDdF1/l/KCsYQwaaJP4eIiQooGupG hIMmG2ifViCzBUqD+UL1s/gudpBUBr+QgJuNxVPb3XDVTKjLhIULEBjJW3ywp4XI iluWQN6y38edN5HMAhltR5A+3gktnyOrhDH91gJ7rzlmxVmC7XXqkwkfnm2Cp6GF YC1SSk61LvHDv8HUYKwXfInTBeZfKcuRQ54MHWZeQdG8t/sewPexJC8fWNoCbUt2 uN60dwkYX0cqfjAOav2Brcyxq/6DdhnllXiq44c8Za2F13jrlVmuQ1LbERDKbmjo wVNs8pIENFvK4IgcqJ97XqvUgVvwMHSpszQ= -----END CERTIFICATE-----Generated at Mon May 27 02:57:06 2024 by rpki-client on console-fra.rpki-client.org