$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa File: 827D7766AACC11EA8113F532C4F9AE02.roa (raw, json) Hash identifier: xP6ndfAIUT4kjjg3Z1yDgdvpNzEsqIUZcM1cJmsAZNg= Subject key identifier: F4:02:78:AD:31:68:37:11:58:2E:65:89:95:60:EC:96:57:33:52:2C Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Certificate serial: 0BA1 Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa Signing time: Sat 02 Dec 2023 19:06:46 +0000 ROA not before: Sat 02 Dec 2023 19:06:46 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 59268 IP address blocks: 27.126.221.0/24 maxlen: 24 27.126.222.0/24 maxlen: 24 27.126.223.0/24 maxlen: 24 27.126.228.0/24 maxlen: 24 27.126.229.0/24 maxlen: 24 27.126.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7 Validity Not Before: Dec 2 19:06:46 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b8045-df36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:73:4a:7f:ef:0a:01:5f:93:0f:48:01:07: e2:66:5f:03:aa:90:ac:88:11:f3:dc:cb:31:ba:8f: 6a:a7:cf:e4:dc:6a:3e:3e:e1:4e:55:9d:1b:d0:6e: 72:2f:55:a8:c9:ca:fa:06:27:78:95:69:ed:76:cd: 64:c8:43:8a:c4:68:81:37:b2:84:85:c9:0d:ba:5f: 13:00:87:51:7c:e9:5b:6e:64:a3:1d:b8:f5:ee:64: 27:f8:dc:89:a4:b5:8c:4c:da:71:6c:d6:87:bf:db: 32:95:2d:97:11:ee:a1:5b:18:d2:1f:7a:ed:6f:1d: e2:82:22:a6:5f:02:15:ec:ed:af:ab:e6:c4:43:ae: 11:ca:5c:05:d2:e7:72:9f:fa:5b:33:87:3b:69:a1: 70:6a:ec:9a:3e:0e:e1:43:cf:22:6d:1b:f4:e7:ed: 32:b0:a1:6f:65:36:6f:07:e2:da:7b:70:ae:29:4a: 49:79:70:0e:13:66:23:18:4c:4e:49:8a:62:36:a1: 9d:9a:0d:a6:5e:20:eb:79:b6:a8:d4:67:dc:ea:c9: 3e:84:e8:b9:cc:f1:e8:72:bb:40:88:e6:7b:61:e6: 44:18:15:3e:7b:80:49:5c:ad:64:dd:fe:18:ba:c0: c9:d3:28:77:1a:ca:95:c5:73:26:61:6b:23:73:b3: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:02:78:AD:31:68:37:11:58:2E:65:89:95:60:EC:96:57:33:52:2C X509v3 Authority Key Identifier: keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/827D7766AACC11EA8113F532C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.221.0-27.126.223.255 27.126.228.0-27.126.230.255 Signature Algorithm: sha256WithRSAEncryption 37:19:28:ba:c6:b5:50:cc:e3:ec:2a:03:e2:6c:90:91:a5:d1: 68:14:a3:3b:f0:eb:f6:6b:94:65:70:55:50:19:88:6a:cc:a7: a1:c4:af:c1:e9:16:66:d6:6a:b5:26:cf:7a:f9:1e:dd:c9:11: 36:4a:01:09:7f:3e:ca:29:a4:07:73:3d:c6:05:2d:9b:58:a3: f7:05:61:c8:71:73:be:49:09:aa:78:39:31:31:80:17:e1:1c: db:f2:26:7a:92:9f:4a:01:3f:4a:d0:78:5f:dc:79:ca:d4:52: f9:dd:34:20:3e:1f:e4:bc:2c:7e:15:56:b9:f0:30:fe:ea:6c: 30:ff:27:e0:15:f8:59:49:e3:a9:90:54:7f:73:73:f5:07:49: 66:43:b9:f6:23:86:80:99:8a:de:13:9f:12:3b:1f:49:43:fa: 35:17:d8:93:99:f7:19:6c:ad:22:c0:3b:e7:2c:09:78:ab:81: 48:e6:0e:30:11:b0:bd:b8:72:1f:dd:b5:66:99:43:77:10:97: e1:b0:df:ce:3e:4d:2d:2d:65:77:3f:89:e2:a1:0b:f0:74:aa: 92:d5:9a:ca:ca:db:ee:61:fd:a0:33:38:d2:0b:7f:df:0b:42: 35:bb:d1:8a:15:57:3e:79:21:be:11:b7:e3:a2:21:e7:9e:f6: 16:f9:72:60 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG RUY3RUIzRTcwHhcNMjMxMjAyMTkwNjQ2WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiODA0NS1kZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m5zSn/vCgFfkw9IAQfiZl8DqpCsiBHz3Msxuo9qp8/k3Go+PuFOVZ0b0G5y L1Woycr6Bid4lWntds1kyEOKxGiBN7KEhckNul8TAIdRfOlbbmSjHbj17mQn+NyJ pLWMTNpxbNaHv9sylS2XEe6hWxjSH3rtbx3igiKmXwIV7O2vq+bEQ64RylwF0udy n/pbM4c7aaFwauyaPg7hQ88ibRv05+0ysKFvZTZvB+Lae3CuKUpJeXAOE2YjGExO SYpiNqGdmg2mXiDrebao1Gfc6sk+hOi5zPHocrtAiOZ7YeZEGBU+e4BJXK1k3f4Y usDJ0yh3GsqVxXMmYWsjc7NCZQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPQCeK0x aDcRWC5liZVg7JZXM1IsMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3 MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkxRUIvNTBFRkUwNzRGNzA1MTFFOUFEQkE0NTFGQzRGOUFFMDIvODI3RDc3NjZB QUNDMTFFQTgxMTNGNTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEABt+3QMEBRt+wDAMAwQCG37kAwQAG37mMA0GCSqGSIb3 DQEBCwUAA4IBAQA3GSi6xrVQzOPsKgPibJCRpdFoFKM78Ov2a5RlcFVQGYhqzKeh xK/B6RZm1mq1Js96+R7dyRE2SgEJfz7KKaQHcz3GBS2bWKP3BWHIcXO+SQmqeDkx MYAX4Rzb8iZ6kp9KAT9K0Hhf3HnK1FL53TQgPh/kvCx+FVa58DD+6mww/yfgFfhZ SeOpkFR/c3P1B0lmQ7n2I4aAmYreE58SOx9JQ/o1F9iTmfcZbK0iwDvnLAl4q4FI 5g4wEbC9uHIf3bVmmUN3EJfhsN/OPk0tLWV3P4nioQvwdKqS1ZrKytvuYf2gMzjS C3/fC0I1u9GKFVc+eSG+EbfjoiHnnvYW+XJg -----END CERTIFICATE-----Generated at Mon May 20 19:59:55 2024 by rpki-client on console-ams.rpki-client.org