$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6BCEC330344311EFB7DD0D34C4F9AE02.roa File: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (raw, json) Hash identifier: Ew84b4aOPu0Bq7VG724cz8ODigtWKExUYVKnAP4kXU8= Subject key identifier: 9A:00:E7:82:0E:15:0E:2D:0E:82:AA:EA:BB:FD:84:70:D0:CB:A8:98 Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: 02 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6BCEC330344311EFB7DD0D34C4F9AE02.roa Signing time: Thu 27 Jun 2024 05:09:25 +0000 ROA not before: Thu 27 Jun 2024 05:09:25 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152122 IP address blocks: 36.50.22.0/23 maxlen: 23 36.50.22.0/24 maxlen: 24 36.50.23.0/24 maxlen: 24 2001:df3:3140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Jun 27 05:09:25 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=667cf405-e6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:1e:ff:a3:aa:60:b0:6e:68:0f:b4:6b:de: e6:c6:49:54:2e:55:11:05:8f:ff:37:28:39:36:06: c5:20:ef:ff:51:77:dc:22:7e:cd:16:7c:ff:f6:9b: 1c:c0:2e:e5:1c:2d:97:d2:17:b3:56:13:50:ba:cc: 3a:90:fc:69:37:56:e4:9c:32:79:b9:97:f2:9d:7b: 2e:22:71:d7:c2:c8:99:dd:5c:01:1a:8b:af:36:60: e4:9b:1e:cb:d5:19:6b:7d:29:53:4a:86:93:26:12: da:ee:d8:0f:00:fe:45:2d:c1:2a:e4:a7:bf:5c:ab: 43:34:98:1a:60:98:c9:5c:c9:6e:01:d9:ce:fc:f7: d4:26:e8:55:71:dc:3c:1b:f3:8f:4b:b8:89:77:48: c7:3f:7f:76:e5:e5:1f:b0:a7:ac:30:92:3d:e4:ce: d9:8e:bb:e5:f3:66:66:cd:fa:ac:f1:77:bc:53:27: e4:04:2a:76:60:7e:90:85:16:a9:47:ea:a4:b9:75: bf:dd:d2:c4:c9:0c:dc:f9:8f:a2:18:f4:4a:56:6b: 25:88:3f:ff:aa:d1:33:2e:2a:33:0a:74:b9:70:63: 2e:34:7d:e1:f7:eb:9f:df:51:ef:26:6f:15:27:0f: 8f:47:f0:a2:35:ac:da:91:8a:fa:0c:b5:5f:83:7f: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:00:E7:82:0E:15:0E:2D:0E:82:AA:EA:BB:FD:84:70:D0:CB:A8:98 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6BCEC330344311EFB7DD0D34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.22.0/23 IPv6: 2001:df3:3140::/48 Signature Algorithm: sha256WithRSAEncryption ce:ed:02:c9:65:8e:a9:8a:13:02:68:59:fc:e7:55:21:38:7d: 18:14:23:ad:bf:1e:6f:d2:ae:f2:d1:09:87:b9:cd:c5:54:fe: 9f:c2:46:8f:bc:1d:60:fc:16:b8:78:75:51:7b:99:fe:9f:ca: b2:73:0e:26:df:d4:a6:6b:7b:36:8a:51:85:83:ed:27:fe:91: 25:d7:95:f8:c5:6f:57:26:cf:3c:7a:57:fc:e7:c4:f4:f9:36: c1:d1:e5:ef:b4:77:23:02:53:9b:2e:99:83:82:34:7d:27:39: c4:ee:a8:71:57:b2:76:42:ad:85:63:60:8e:b6:93:dc:92:8d: 9b:42:7f:fa:aa:dd:62:7d:7a:fc:ad:5d:6a:b4:b0:ab:08:f8: 42:de:c6:1e:0e:e7:28:a0:5e:a6:91:56:0b:aa:38:f8:1e:72: 20:d4:61:47:8a:8b:09:f6:2d:f8:98:d5:aa:4e:ef:47:b2:0f: 79:a4:f0:87:ab:ed:1e:2c:b3:b0:50:4b:45:cb:6e:25:af:84: 94:1b:e9:b9:ef:c8:bf:22:06:6c:60:ab:97:ad:0e:44:8a:26: 77:2e:d5:20:4a:87:2d:3a:f5:ad:0d:7b:b4:3b:06:ff:c0:3e: 04:c7:12:01:f8:68:a8:67:a8:d1:86:96:f7:ae:ef:48:a6:bb: 49:93:03:b5 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTU0RjExMC8GA1UEBRMoODVGRkJFNThEQzFDRjdGOTFDMkQzODEzNEUyMEI2RUYw QjJDM0E1RjAeFw0yNDA2MjcwNTA5MjVaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2NmNDA1LWU2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ7x7/o6pgsG5oD7Rr3ubGSVQuVREFj/83KDk2BsUg7/9Rd9wifs0WfP/2mxzA LuUcLZfSF7NWE1C6zDqQ/Gk3VuScMnm5l/Kdey4icdfCyJndXAEai682YOSbHsvV GWt9KVNKhpMmEtru2A8A/kUtwSrkp79cq0M0mBpgmMlcyW4B2c7899Qm6FVx3Dwb 849LuIl3SMc/f3bl5R+wp6wwkj3kztmOu+XzZmbN+qzxd7xTJ+QEKnZgfpCFFqlH 6qS5db/d0sTJDNz5j6IY9EpWayWIP/+q0TMuKjMKdLlwYy40feH365/fUe8mbxUn D49H8KI1rNqRivoMtV+Df5qrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUmgDngg4V Di0Ogqrqu/2EcNDLqJgwHwYDVR0jBBgwFoAUhf++WNwc9/kcLTgTTiC27wssOl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5NTRGLzU5MUEzMjIwOTE0 QTExRUU5NDJDQzg3MUM0RjlBRTAyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGYtLVdOd2M5X2tjTFRnVFRpQzI3d3NzT2w4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi82QkNFQzMzMDM0 NDMxMUVGQjdERDBEMzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASQyFjAPBAIAAjAJAwcAIAEN8zFAMA0GCSqGSIb3DQEBCwUA A4IBAQDO7QLJZY6pihMCaFn851UhOH0YFCOtvx5v0q7y0QmHuc3FVP6fwkaPvB1g /Ba4eHVRe5n+n8qycw4m39Sma3s2ilGFg+0n/pEl15X4xW9XJs88elf858T0+TbB 0eXvtHcjAlObLpmDgjR9JznE7qhxV7J2Qq2FY2COtpPcko2bQn/6qt1ifXr8rV1q tLCrCPhC3sYeDucooF6mkVYLqjj4HnIg1GFHiosJ9i34mNWqTu9Hsg95pPCHq+0e LLOwUEtFy24lr4SUG+m578i/IgZsYKuXrQ5EiiZ3LtUgSoctOvWtDXu0Owb/wD4E xxIB+GioZ6jRhpb3ru9IprtJkwO1 -----END CERTIFICATE-----Generated at Thu Oct 17 06:45:43 2024 by rpki-client on console-fra.rpki-client.org