$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B2A86726A69A11ED83470E12C4F9AE02.roa File: B2A86726A69A11ED83470E12C4F9AE02.roa (raw, json) Hash identifier: Cq/xyEkIVmScH6tqTWnjcEKGti9B6Wc1QVrFjny4ZNg= Subject key identifier: 81:0E:47:D2:B2:DA:CD:9C:D2:55:77:7C:E0:4E:EA:78:EA:57:F8:E9 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 06D0 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B2A86726A69A11ED83470E12C4F9AE02.roa Signing time: Mon 14 Oct 2024 22:52:44 +0000 ROA not before: Mon 14 Oct 2024 22:52:44 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 4826 IP address blocks: 124.198.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1744 (0x6d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 14 22:52:44 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670da0bc-ddee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:67:ea:62:84:c5:60:01:72:50:51:28:a1: 68:91:0d:e9:14:62:a5:65:10:9a:49:1e:f4:b5:01: 7d:aa:c5:3f:c3:51:eb:ae:2f:0d:4b:d8:07:ad:58: af:8c:c7:65:e2:33:0d:3d:ee:32:a0:3c:c2:ef:75: 5d:09:7d:41:d3:8a:89:e0:a8:bd:a4:3d:64:35:2a: 72:d7:c2:1f:7f:dd:c3:7c:d8:4b:84:0e:d7:7f:50: 0d:b2:11:90:70:89:5a:2f:f8:6b:9b:c1:20:8c:21: 25:17:b7:76:8c:01:3f:5c:29:58:87:0c:42:d4:74: 44:3b:70:73:2e:a3:ba:db:34:31:98:d4:ae:41:13: 12:98:86:5e:d7:97:fd:d8:42:8e:97:f1:16:d9:c1: 88:57:37:26:a3:79:b1:d2:82:5d:47:32:65:87:29: ed:02:f5:91:9e:b6:b3:a5:49:40:2c:31:0d:f1:da: 05:a6:b8:95:86:85:ab:44:e0:3c:3f:97:ff:de:04: 53:75:06:39:39:b0:52:2e:10:93:2e:1f:a1:17:fc: b6:4d:75:a9:8a:c4:95:1c:58:2a:6e:47:0e:42:7f: d8:56:5a:db:47:09:02:01:3d:b9:eb:f7:29:f9:98: 7a:0c:80:de:b4:63:1e:05:4d:66:d4:27:69:65:d5: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:47:D2:B2:DA:CD:9C:D2:55:77:7C:E0:4E:EA:78:EA:57:F8:E9 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B2A86726A69A11ED83470E12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.198.160.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:37:d7:44:d5:29:65:97:37:c9:ee:1b:50:12:6b:51:07:f0: df:6e:2c:f7:df:a6:89:c1:6e:68:3a:0b:51:4f:bd:13:77:08: 97:b6:71:0c:ff:07:89:af:ee:5e:7b:59:d5:1b:db:11:27:12: 65:59:74:32:2d:64:0d:0c:13:ab:50:9c:93:a6:ed:b2:60:d0: 25:96:ba:55:6f:46:f4:05:60:c5:92:da:6d:14:3e:fb:5d:ac: a6:a7:90:67:68:b4:e9:cc:e8:a1:ed:4e:b1:48:e2:5d:72:b3: 10:6e:cd:fc:68:31:c6:9d:f6:11:72:0c:82:61:fa:15:bc:e7: 85:08:5e:90:8b:a7:e6:1d:46:77:61:4f:dc:18:11:8a:fa:30: 3c:01:3e:4a:f3:12:88:46:fe:66:31:b0:70:68:ca:ab:7a:35: bb:05:9d:40:da:2a:fd:ff:a8:50:67:f0:6e:cf:0a:22:cb:2b: 31:4b:0e:ff:43:c2:e2:a0:98:d3:65:ce:22:aa:21:90:8d:06: d0:61:47:cb:7a:60:f5:7b:fb:73:d4:c8:e9:2b:00:a9:d7:1b: df:70:64:55:89:7b:b1:83:8d:a1:88:49:f4:c5:93:0a:0c:fe: ff:79:ca:99:fc:05:d0:f2:6b:c8:94:ce:f1:96:8f:13:a1:70: ba:56:75:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjQxMDE0MjI1MjQ0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkYTBiYy1kZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJtn6mKExWABclBRKKFokQ3pFGKlZRCaSR70tQF9qsU/w1Hrri8NS9gHrViv jMdl4jMNPe4yoDzC73VdCX1B04qJ4Ki9pD1kNSpy18Iff93DfNhLhA7Xf1ANshGQ cIlaL/hrm8EgjCElF7d2jAE/XClYhwxC1HREO3BzLqO62zQxmNSuQRMSmIZe15f9 2EKOl/EW2cGIVzcmo3mx0oJdRzJlhyntAvWRnrazpUlALDEN8doFpriVhoWrROA8 P5f/3gRTdQY5ObBSLhCTLh+hF/y2TXWpisSVHFgqbkcOQn/YVlrbRwkCAT256/cp +Zh6DIDetGMeBU1m1CdpZdXk2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEOR9Ky 2s2c0lV3fOBO6njqV/jpMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvQjJBODY3MjZB NjlBMTFFRDgzNDcwRTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN8xqAwDQYJKoZIhvcNAQELBQADggEBAA4310TVKWWXN8nu G1ASa1EH8N9uLPffponBbmg6C1FPvRN3CJe2cQz/B4mv7l57WdUb2xEnEmVZdDIt ZA0ME6tQnJOm7bJg0CWWulVvRvQFYMWS2m0UPvtdrKankGdotOnM6KHtTrFI4l1y sxBuzfxoMcad9hFyDIJh+hW854UIXpCLp+YdRndhT9wYEYr6MDwBPkrzEohG/mYx sHBoyqt6NbsFnUDaKv3/qFBn8G7PCiLLKzFLDv9DwuKgmNNlziKqIZCNBtBhR8t6 YPV7+3PUyOkrAKnXG99wZFWJe7GDjaGISfTFkwoM/v95ypn8BdDya8iUzvGWjxOh cLpWdaA= -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:48 2024 by rpki-client on console-ams.rpki-client.org