$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa File: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (raw, json) Hash identifier: /cYlUkny1IQKuDP/jKnNDzmTJRWVUTKZHhg+6p55ztY= Subject key identifier: D4:49:AB:22:05:22:28:AA:04:0B:47:6D:45:A4:6D:4D:7F:85:FF:C6 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 178C Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa Signing time: Tue 20 Feb 2024 17:55:20 +0000 ROA not before: Tue 20 Feb 2024 17:55:20 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 10113 IP address blocks: 27.0.64.0/19 maxlen: 19 202.62.144.0/24 maxlen: 24 202.68.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6028 (0x178c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:55:20 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65d4e787-e489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:57:db:3b:9a:cc:c9:8d:25:f3:5f:90:31: c9:9f:81:4e:b6:69:55:73:6b:e8:eb:54:34:a2:0e: 4d:06:95:b9:23:84:df:11:e1:39:bb:dd:9f:a9:20: 96:1f:b3:ec:80:f9:3e:0b:96:58:62:f8:1d:b4:e1: a9:99:e0:c2:2c:0e:e9:d9:fb:c6:bc:61:0c:1e:2a: b4:6b:d0:ef:22:c3:8c:94:df:13:06:5b:c3:71:48: c0:b9:17:96:5f:cc:37:29:ad:56:66:69:f1:e4:3e: cd:6a:27:f7:46:00:db:6a:f6:92:36:ae:d7:b2:a8: 9c:5f:a9:65:f8:b0:f2:4c:c9:89:72:5e:a6:85:86: cd:4e:be:d6:9d:cf:42:4a:05:a1:4b:dc:a9:a2:f6: 1a:df:71:ca:7d:c0:9a:bc:37:db:8d:9f:bd:51:ca: d8:e9:41:f2:6b:8e:03:f9:e0:fe:81:18:9c:88:7f: b7:9c:1f:9d:42:4f:e4:30:c3:02:63:25:4e:13:24: 3a:c1:4c:97:43:c9:cd:8c:e6:cd:f5:c5:6c:c2:07: 31:62:e3:e5:7e:0a:0b:7d:2b:49:87:1c:39:8a:ec: 91:b1:d3:cb:79:4a:bc:90:b4:b8:27:5e:3a:f5:c5: 45:bf:10:be:b8:f3:69:c3:fb:5f:20:40:49:0a:16: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:49:AB:22:05:22:28:AA:04:0B:47:6D:45:A4:6D:4D:7F:85:FF:C6 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/B9FF8C12120A11EEBF7A0D72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.64.0/19 202.62.144.0/24 202.68.96.0/19 Signature Algorithm: sha256WithRSAEncryption 92:98:95:4c:b8:ef:95:99:fd:7d:2b:9f:f1:8a:d3:f9:7e:4d: 23:d7:4a:8a:4f:d0:16:a9:e3:26:6a:15:84:df:3c:47:5d:90: 85:d4:3c:05:20:8f:b5:79:a0:b7:a8:ee:15:90:97:95:cd:9a: b4:c2:1f:c9:5e:fc:5f:ad:eb:27:d0:e2:6b:ee:9f:b0:40:94: d2:35:7c:95:95:ae:5e:ad:79:0d:2d:6f:d7:75:2f:3f:78:23: 50:27:73:dc:3e:23:f0:f5:e7:7f:66:e1:fd:2f:97:9f:2a:53: 4c:08:aa:b0:c6:e5:7d:9c:33:29:f1:92:05:ae:25:58:2a:a6: c2:90:05:5d:af:9c:81:76:76:05:67:7f:79:8e:c5:64:aa:eb: d3:f4:7b:17:1e:f9:e8:ef:08:83:11:71:a2:f3:ee:6e:60:9a: 5a:2f:71:bd:67:34:0f:d3:fa:83:b5:91:58:c8:9c:53:45:3d: 60:0d:83:29:2f:36:20:df:71:4c:be:1a:17:29:8d:32:95:33: 16:4f:d8:ee:2b:f6:7e:ba:c1:d9:a1:4b:a2:eb:7c:b6:f5:39: 93:24:58:ab:81:5c:be:7d:57:94:51:0c:7f:62:42:80:45:f4: ca:a1:2d:44:81:29:12:ed:16:ac:e8:3c:e2:f3:dd:22:5a:9a: c0:e5:71:93 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICF4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjQwMjIwMTc1NTIwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ0ZTc4Ny1lNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ5X2zuazMmNJfNfkDHJn4FOtmlVc2vo61Q0og5NBpW5I4TfEeE5u92fqSCW H7PsgPk+C5ZYYvgdtOGpmeDCLA7p2fvGvGEMHiq0a9DvIsOMlN8TBlvDcUjAuReW X8w3Ka1WZmnx5D7Naif3RgDbavaSNq7XsqicX6ll+LDyTMmJcl6mhYbNTr7Wnc9C SgWhS9ypovYa33HKfcCavDfbjZ+9UcrY6UHya44D+eD+gRiciH+3nB+dQk/kMMMC YyVOEyQ6wUyXQ8nNjObN9cVswgcxYuPlfgoLfStJhxw5iuyRsdPLeUq8kLS4J146 9cVFvxC+uPNpw/tfIEBJChaZLwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNRJqyIF IiiqBAtHbUWkbU1/hf/GMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvQjlGRjhDMTIx MjBBMTFFRUJGN0EwRDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAUbAEADBADKPpADBAXKRGAwDQYJKoZIhvcNAQELBQADggEB AJKYlUy475WZ/X0rn/GK0/l+TSPXSopP0Bap4yZqFYTfPEddkIXUPAUgj7V5oLeo 7hWQl5XNmrTCH8le/F+t6yfQ4mvun7BAlNI1fJWVrl6teQ0tb9d1Lz94I1Anc9w+ I/D1539m4f0vl58qU0wIqrDG5X2cMynxkgWuJVgqpsKQBV2vnIF2dgVnf3mOxWSq 69P0exce+ejvCIMRcaLz7m5gmlovcb1nNA/T+oO1kVjInFNFPWANgykvNiDfcUy+ GhcpjTKVMxZP2O4r9n66wdmhS6LrfLb1OZMkWKuBXL59V5RRDH9iQoBF9MqhLUSB KRLtFqzoPOLz3SJamsDlcZM= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org