$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa File: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json) Hash identifier: ecbq5n9i8YsI1DnV/FNeUcy7K6RyCgb2n5KgFVtlRys= Subject key identifier: A7:35:FE:52:35:3F:90:03:C8:A9:61:E5:69:5B:4F:73:12:50:0D:0E Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1C56 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa Signing time: Mon 28 Oct 2024 14:40:36 +0000 ROA not before: Mon 28 Oct 2024 14:40:36 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 136974 IP address blocks: 210.2.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7254 (0x1c56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 28 14:40:36 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fa264-791f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3d:80:c5:50:75:26:72:71:4b:e9:29:32:7c: 43:7d:8e:26:4e:a4:61:62:2d:71:13:23:c0:5e:df: 2c:5d:78:b6:fd:e6:db:a4:38:35:98:20:cd:c5:b4: f5:3c:e9:01:6b:50:36:e2:ea:4f:9f:e2:86:8f:35: b0:4d:88:8b:9c:ab:2c:be:98:ee:d1:65:a6:60:5f: 82:89:72:00:87:14:06:34:8b:69:47:aa:22:a9:f0: 52:e6:c6:73:d6:a7:e6:04:0e:93:4c:15:12:5f:a9: 0a:79:80:f3:17:fa:4d:42:4d:15:0f:df:79:5b:38: e2:ed:e6:b0:6d:b6:17:4b:83:91:37:b0:91:c5:8f: 80:7a:c6:94:2d:53:8b:b1:9e:76:f5:fa:0c:87:13: c3:e9:70:63:38:45:0a:0b:5c:2e:97:46:cc:fe:1d: dc:93:2c:da:06:51:ec:9e:5c:e9:c3:41:d7:9b:d0: 97:51:9b:a2:93:56:f0:38:98:1c:b0:f9:e2:a8:fe: 34:e3:e0:f9:a2:d7:76:cf:70:d3:b9:91:8d:00:c4: 30:27:5e:5c:12:49:ba:a2:15:f4:8f:a7:fd:33:c8: 23:79:f0:ad:7b:f8:c8:54:2e:4a:64:2d:12:a7:fa: 91:81:5e:45:c6:08:57:6c:7a:cc:5f:63:9a:73:46: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:FE:52:35:3F:90:03:C8:A9:61:E5:69:5B:4F:73:12:50:0D:0E X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.2.136.0/24 Signature Algorithm: sha256WithRSAEncryption 25:4d:af:fb:8b:2e:2f:a2:bc:9d:88:7b:b0:af:2e:92:fc:33: 5b:7d:9e:28:a4:ff:02:02:f6:a9:0d:34:fd:9c:5d:32:bf:43: ac:49:90:9a:a4:58:0f:48:f7:36:40:80:c5:90:6c:88:09:a2: c6:e7:ce:34:11:b8:c1:e5:bb:a5:a9:f7:0b:ce:96:54:8e:79: 31:46:15:02:08:13:a1:80:44:b8:7b:0a:40:37:7d:33:1e:9c: 2c:47:ba:11:69:35:64:51:93:dd:a0:d4:ce:58:d5:1e:33:92: 3b:60:e9:21:4a:eb:ad:80:a4:18:d4:76:d0:b3:6d:ac:c9:06: 4c:b4:61:e2:6a:ff:46:81:af:fd:1f:84:c4:04:50:92:d8:e4: 20:ef:0e:dc:46:07:66:c2:c2:51:6f:e0:bf:3e:7b:57:5d:c1: 95:63:96:85:04:6a:6e:d1:3e:56:74:ee:78:3c:9a:21:3b:68: 31:b9:26:2b:31:f1:25:5b:60:70:b7:7e:05:66:d7:5c:55:91: 41:86:c4:0e:e8:bd:2f:70:18:fc:af:15:d8:0c:e5:98:27:36: 6d:61:a1:13:6e:2c:b3:03:5c:cc:53:e9:51:4b:41:c6:f7:d6: 79:02:5b:a0:d3:e6:40:c4:ae:a3:a3:bf:0e:8b:de:32:0c:78: b1:9f:df:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDM2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmYTI2NC03OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkj2AxVB1JnJxS+kpMnxDfY4mTqRhYi1xEyPAXt8sXXi2/ebbpDg1mCDNxbT1 POkBa1A24upPn+KGjzWwTYiLnKssvpju0WWmYF+CiXIAhxQGNItpR6oiqfBS5sZz 1qfmBA6TTBUSX6kKeYDzF/pNQk0VD995Wzji7eawbbYXS4ORN7CRxY+AesaULVOL sZ529foMhxPD6XBjOEUKC1wul0bM/h3ckyzaBlHsnlzpw0HXm9CXUZuik1bwOJgc sPniqP404+D5otd2z3DTuZGNAMQwJ15cEkm6ohX0j6f9M8gjefCte/jIVC5KZC0S p/qRgV5FxghXbHrMX2Oac0bmpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKc1/lI1 P5ADyKlh5WlbT3MSUA0OMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRDJFRjUzMTIx OUFFMTFFQjhEM0JDMjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSAogwDQYJKoZIhvcNAQELBQADggEBACVNr/uLLi+ivJ2I e7CvLpL8M1t9niik/wIC9qkNNP2cXTK/Q6xJkJqkWA9I9zZAgMWQbIgJosbnzjQR uMHlu6Wp9wvOllSOeTFGFQIIE6GARLh7CkA3fTMenCxHuhFpNWRRk92g1M5Y1R4z kjtg6SFK662ApBjUdtCzbazJBky0YeJq/0aBr/0fhMQEUJLY5CDvDtxGB2bCwlFv 4L8+e1ddwZVjloUEam7RPlZ07ng8miE7aDG5Jisx8SVbYHC3fgVm11xVkUGGxA7o vS9wGPyvFdgM5ZgnNm1hoRNuLLMDXMxT6VFLQcb31nkCW6DT5kDErqOjvw6L3jIM eLGf30M= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org