$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa File: BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa (raw, json) Hash identifier: gHO3ucDCMpaAi01yTk9v+DmdcMeSIsp2IE197EC8p+s= Subject key identifier: 9B:DA:F5:00:05:4D:38:5E:2E:DD:59:9F:34:C4:E9:E4:22:FD:90:21 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 06F2 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa Signing time: Fri 13 Dec 2024 06:13:32 +0000 ROA not before: Fri 13 Dec 2024 06:13:32 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 17762 IP address blocks: 27.107.0.0/16 maxlen: 16 27.107.0.0/20 maxlen: 24 27.107.16.0/21 maxlen: 24 27.107.24.0/21 maxlen: 24 27.107.32.0/20 maxlen: 24 27.107.48.0/20 maxlen: 24 27.107.64.0/20 maxlen: 24 27.107.144.0/20 maxlen: 24 27.107.160.0/20 maxlen: 24 27.107.176.0/20 maxlen: 24 27.107.192.0/23 maxlen: 24 27.107.194.0/23 maxlen: 24 27.107.196.0/23 maxlen: 24 27.107.198.0/23 maxlen: 24 27.107.208.0/20 maxlen: 24 49.201.24.0/21 maxlen: 24 49.249.192.0/19 maxlen: 24 103.8.36.0/22 maxlen: 24 115.160.208.0/20 maxlen: 24 182.156.6.0/23 maxlen: 24 182.156.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Dec 13 06:13:32 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=675bd08c-5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:e9:8e:2a:5e:03:a9:14:17:17:fe:c4:96: bc:12:68:ab:bb:f7:e5:07:3c:98:b9:6b:e2:87:7b: 6f:87:79:a4:ec:35:e7:17:ac:77:9e:39:e6:c9:78: b1:f9:50:b6:fe:4f:d2:99:e8:0c:55:52:c2:27:91: ec:91:e5:b9:39:4e:45:6a:04:2d:96:4c:83:08:0e: 85:3a:ef:a8:3d:11:d3:08:e3:93:41:09:6d:39:a4: 73:6d:62:ae:e8:51:bf:c6:f2:f6:05:d3:70:51:5f: f4:87:fd:cd:a9:00:e4:93:5c:11:bf:4c:36:16:80: 51:4c:3b:5c:7d:23:cb:33:a4:70:90:40:bb:ff:9b: 48:79:92:e1:b5:e6:17:78:04:3b:5d:40:55:c2:79: 5d:63:db:4d:bd:81:3d:fc:c0:f6:71:60:cd:7b:d5: 3e:6a:20:dd:2b:3d:a5:6e:ba:52:bc:b5:8f:09:a0: ae:e5:d8:65:36:4b:dc:39:8f:41:32:84:5d:84:2c: 7d:79:d5:e7:6b:be:17:18:9c:a2:c4:39:e6:14:00: 97:df:9e:a5:ef:9d:be:b3:f2:f4:d6:68:86:ea:c5: 5b:ae:44:d9:77:e3:9a:2d:b7:66:79:f7:3a:5f:01: 04:dd:75:2f:7f:98:1f:e2:c4:c3:8b:ee:45:d5:7b: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:F5:00:05:4D:38:5E:2E:DD:59:9F:34:C4:E9:E4:22:FD:90:21 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/BF070AB6C1BC11EEBAB7F25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.107.0.0/16 49.201.24.0/21 49.249.192.0/19 103.8.36.0/22 115.160.208.0/20 182.156.6.0/23 182.156.20.0/23 Signature Algorithm: sha256WithRSAEncryption 49:5d:26:4e:6e:27:b6:69:a5:5c:1f:3b:36:dc:76:d0:10:d9: 45:4a:e4:eb:78:56:15:e0:6b:cd:fb:4d:bb:b6:c4:b1:82:46: 41:2e:05:a3:5c:d3:b6:50:37:82:bc:9d:19:35:e4:00:d3:64: cc:f4:86:07:6b:cb:55:72:72:3f:02:96:01:30:ac:e1:1c:37: 94:2e:11:be:92:c7:f4:3a:9b:58:43:ca:81:ae:2a:8a:69:a6: 2a:1b:97:4c:fc:d4:a2:5e:28:1b:58:48:c2:b4:b5:fe:2c:ce: 10:44:38:9b:63:9a:0e:5b:29:43:87:44:48:15:ee:db:5d:d0: 14:91:de:09:67:a4:41:22:d7:84:e6:68:c0:21:73:c7:a7:92: db:06:d3:43:15:05:45:d8:ac:c7:d1:33:44:aa:dc:54:2a:7c: fa:e8:c4:ac:ae:a8:7e:ad:a9:58:59:4f:33:84:0a:cb:d8:f1: 4c:40:90:90:48:61:23:e0:c6:05:23:0c:35:5f:fc:05:51:60: 60:0b:b5:ef:23:52:29:eb:9b:1f:95:ad:6f:99:ed:c9:59:9c: 32:46:e5:f7:35:ec:da:4a:7c:58:2c:8b:3d:fe:bd:e8:0a:30: 7d:f4:6a:12:90:85:16:91:d5:33:cb:95:91:10:71:10:85:1b: e5:cb:7b:49 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjQxMjEzMDYxMzMyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzViZDA4Yy01NjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArevpjipeA6kUFxf+xJa8Emiru/flBzyYuWvih3tvh3mk7DXnF6x3njnmyXix +VC2/k/SmegMVVLCJ5HskeW5OU5FagQtlkyDCA6FOu+oPRHTCOOTQQltOaRzbWKu 6FG/xvL2BdNwUV/0h/3NqQDkk1wRv0w2FoBRTDtcfSPLM6RwkEC7/5tIeZLhteYX eAQ7XUBVwnldY9tNvYE9/MD2cWDNe9U+aiDdKz2lbrpSvLWPCaCu5dhlNkvcOY9B MoRdhCx9edXna74XGJyixDnmFACX356l752+s/L01miG6sVbrkTZd+OaLbdmefc6 XwEE3XUvf5gf4sTDi+5F1XsMhwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFJva9QAF TTheLt1ZnzTE6eQi/ZAhMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvQkYwNzBBQjZD MUJDMTFFRUJBQjdGMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMC8EAgABMCkDAwAbawMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AMEAbacBgME AbacFDANBgkqhkiG9w0BAQsFAAOCAQEASV0mTm4ntmmlXB87Ntx20BDZRUrk63hW FeBrzftNu7bEsYJGQS4Fo1zTtlA3grydGTXkANNkzPSGB2vLVXJyPwKWATCs4Rw3 lC4RvpLH9DqbWEPKga4qimmmKhuXTPzUol4oG1hIwrS1/izOEEQ4m2OaDlspQ4dE SBXu213QFJHeCWekQSLXhOZowCFzx6eS2wbTQxUFRdisx9EzRKrcVCp8+ujErK6o fq2pWFlPM4QKy9jxTECQkEhhI+DGBSMMNV/8BVFgYAu17yNSKeubH5Wtb5ntyVmc Mkbl9zXs2kp8WCyLPf696AowffRqEpCFFpHVM8uVkRBxEIUb5ct7SQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:35:30 2025 by rpki-client