$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa File: 6553D6106C2B11EA87ED1160C4F9AE02.roa (raw, json) Hash identifier: BZiEWDD0IL9/iTmQj4cpibFzXusaM/aZuvYBDfGJDK8= Subject key identifier: 3B:E1:DD:FC:0B:33:2E:10:A7:79:61:80:C7:25:B5:6E:63:88:7E:2C Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0A90 Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa Signing time: Mon 28 Oct 2024 19:50:03 +0000 ROA not before: Mon 28 Oct 2024 19:50:03 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 38256 IP address blocks: 124.6.224.0/20 maxlen: 21 124.6.224.0/24 maxlen: 24 124.6.225.0/24 maxlen: 24 124.6.226.0/24 maxlen: 24 124.6.227.0/24 maxlen: 24 124.6.228.0/24 maxlen: 24 124.6.229.0/24 maxlen: 24 124.6.230.0/24 maxlen: 24 124.6.231.0/24 maxlen: 24 124.6.232.0/24 maxlen: 24 124.6.233.0/24 maxlen: 24 124.6.234.0/24 maxlen: 24 124.6.235.0/24 maxlen: 24 124.6.236.0/24 maxlen: 24 124.6.237.0/24 maxlen: 24 124.6.238.0/24 maxlen: 24 124.6.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Oct 28 19:50:03 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=671feaea-00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:3f:1e:6d:6b:cc:3d:6e:22:68:1e:62:5b: dc:73:bf:b0:bc:96:42:04:bb:d5:80:f7:48:00:51: 47:23:03:e5:f8:b3:59:19:98:bb:15:95:08:33:9c: 88:9d:66:c1:87:f6:a3:07:23:cd:4e:20:a4:f8:0f: 0c:a1:3e:3d:bf:e1:6b:6c:01:b4:bd:8b:af:df:0b: 7c:50:07:6d:86:30:1f:0f:b1:1b:53:8b:d4:5a:65: 4b:9a:72:aa:52:7a:79:c0:a7:f6:36:3a:2c:ed:d9: b9:c9:2d:83:e2:a9:2c:f7:92:7f:d8:12:1d:25:62: f9:2b:6a:c8:a4:f0:ef:62:0f:51:11:3c:57:2a:51: f4:79:dd:f9:2f:d0:7e:68:ed:c5:11:dd:e9:21:bb: 8e:57:4a:a6:55:35:54:9a:ed:7e:9d:4e:c3:be:03: 1b:a4:eb:3b:9f:85:62:a5:45:99:79:4f:0c:73:41: 4b:cb:3f:06:49:91:85:76:d1:9e:54:c3:cc:04:9e: 71:66:dc:43:f1:6e:7b:72:ce:4e:dc:09:d8:58:56: 26:09:42:33:1a:e3:e8:07:37:8e:36:d8:3a:b6:c9: e8:b6:91:10:96:7c:8f:37:e6:ff:3b:63:8f:d9:90: e6:45:96:65:da:7a:cb:02:6d:15:b3:28:7b:2d:11: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:DD:FC:0B:33:2E:10:A7:79:61:80:C7:25:B5:6E:63:88:7E:2C X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.6.224.0/20 Signature Algorithm: sha256WithRSAEncryption 54:8f:22:34:20:83:00:6c:d3:f4:ad:ba:a3:d4:11:4f:4c:e9: 94:bd:61:bb:6b:56:f2:3e:8b:c9:77:82:02:f7:10:cb:74:94: 98:ae:03:ef:39:d3:52:7e:1a:c3:2c:90:d0:ec:c3:d8:1a:1e: 4d:92:a2:1d:d1:19:3d:23:a1:02:bf:94:b9:22:a2:ed:2c:22: 38:2e:a0:8d:9b:ce:9e:0b:4e:37:2d:c4:2d:39:de:7b:01:85: 2b:5c:41:e9:37:c8:fb:e5:48:26:11:3d:aa:77:93:30:15:d2: a5:2d:11:8b:74:7a:8e:36:53:7d:0b:49:2a:69:db:ca:78:18: 24:89:2d:34:79:2e:2a:cb:10:ec:9a:7f:1c:16:cb:42:8f:ef: 01:01:b9:9e:bb:1b:56:0e:85:f7:62:0d:6c:d6:76:37:fe:61: d7:cf:cd:4b:5c:84:36:1e:6d:ad:81:f2:2d:57:aa:a1:b6:6a: 50:bd:6e:d3:a5:bb:80:2c:1c:ee:53:77:f4:f7:55:75:64:ff: b9:91:8f:7b:6b:b4:d4:4e:33:ac:ec:36:02:80:19:28:5c:25: 32:08:ad:6c:42:c9:6d:ad:56:0b:85:ac:f4:b3:19:a0:e1:eb: a8:10:9a:9a:53:0a:91:ec:aa:59:44:d2:89:52:df:de:1c:c5: 0b:8b:45:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjQxMDI4MTk1MDAzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmZWFlYS0wMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNs/Hm1rzD1uImgeYlvcc7+wvJZCBLvVgPdIAFFHIwPl+LNZGZi7FZUIM5yI nWbBh/ajByPNTiCk+A8MoT49v+FrbAG0vYuv3wt8UAdthjAfD7EbU4vUWmVLmnKq Unp5wKf2Njos7dm5yS2D4qks95J/2BIdJWL5K2rIpPDvYg9RETxXKlH0ed35L9B+ aO3FEd3pIbuOV0qmVTVUmu1+nU7DvgMbpOs7n4VipUWZeU8Mc0FLyz8GSZGFdtGe VMPMBJ5xZtxD8W57cs5O3AnYWFYmCUIzGuPoBzeONtg6tsnotpEQlnyPN+b/O2OP 2ZDmRZZl2nrLAm0Vsyh7LRFCGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvh3fwL My4Qp3lhgMcltW5jiH4sMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDQUQvOUZEOTdBMDg0NUMzMTFFQUJFRjVENDM5QzRGOUFFMDIvNjU1M0Q2MTA2 QzJCMTFFQTg3RUQxMTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8BuAwDQYJKoZIhvcNAQELBQADggEBAFSPIjQggwBs0/St uqPUEU9M6ZS9YbtrVvI+i8l3ggL3EMt0lJiuA+8501J+GsMskNDsw9gaHk2Soh3R GT0joQK/lLkiou0sIjguoI2bzp4LTjctxC053nsBhStcQek3yPvlSCYRPap3kzAV 0qUtEYt0eo42U30LSSpp28p4GCSJLTR5LirLEOyafxwWy0KP7wEBuZ67G1YOhfdi DWzWdjf+YdfPzUtchDYeba2B8i1XqqG2alC9btOlu4AsHO5Td/T3VXVk/7mRj3tr tNROM6zsNgKAGShcJTIIrWxCyW2tVguFrPSzGaDh66gQmppTCpHsqllE0olS394c xQuLRdo= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org