$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa File: 85AEBA76504C11ED829F7D24C4F9AE02.roa (raw, json) Hash identifier: MijbaBFOBmjVn0NZXYmQ25vm+DrZhkqNokVzBodlkOI= Subject key identifier: A8:D4:F0:7D:2E:E0:A7:7E:04:E4:07:D9:B3:EA:87:A7:E8:F8:A2:3A Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: 018A Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa Signing time: Mon 11 Nov 2024 01:55:17 +0000 ROA not before: Mon 11 Nov 2024 01:55:17 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 24504 IP address blocks: 202.51.0.0/22 maxlen: 22 202.51.0.0/24 maxlen: 24 202.51.1.0/24 maxlen: 24 202.51.2.0/24 maxlen: 24 202.51.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Validity Not Before: Nov 11 01:55:17 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67316404-6984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:e6:2e:b9:2a:1a:21:94:a9:f5:08:47:8d: 35:54:5f:5a:10:2d:42:2b:c7:68:f7:e8:f6:18:97: 50:1d:07:34:9d:af:80:08:27:6d:67:93:30:88:22: 99:23:e8:6e:ea:aa:f3:14:1e:08:66:0e:05:36:3c: 6a:f3:c9:d0:34:7a:b7:94:96:b3:0f:02:aa:f3:55: 83:dd:e2:5b:55:18:93:e3:b8:89:88:98:cd:41:35: 84:3c:6d:25:87:a7:04:00:da:35:84:0e:4f:bb:a6: ab:1c:59:28:6a:37:45:d2:43:13:e4:1e:4a:7f:64: 60:ec:b1:6a:8a:f8:b2:f0:54:fa:34:a1:4c:86:c1: 51:95:b7:4d:26:d5:8d:10:7e:4d:10:4e:11:34:24: e2:04:a6:6f:5a:76:93:67:86:1b:2d:e9:a4:6e:a8: 1c:ac:30:6b:8f:ab:c7:42:b1:5f:e7:64:14:b1:79: e1:2d:61:5f:2a:16:12:bd:b9:0a:ec:39:93:53:3b: 45:a1:c5:ec:15:9f:a8:8f:f0:10:aa:db:2a:bd:b9: 4e:1a:74:5c:f7:aa:77:08:0b:99:9c:db:ca:41:2a: 93:10:05:c9:5f:14:19:e0:97:1f:59:e2:33:ac:44: 7c:c4:f9:7e:20:5a:c1:cf:20:70:3a:95:89:5b:12: 9a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D4:F0:7D:2E:E0:A7:7E:04:E4:07:D9:B3:EA:87:A7:E8:F8:A2:3A X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.0.0/22 Signature Algorithm: sha256WithRSAEncryption 08:07:51:26:7e:c5:1d:87:fc:37:99:11:79:d9:cc:90:a3:02: 86:4b:43:ac:38:a5:b2:a1:88:1f:6e:e3:68:ac:a6:36:5a:25: e4:b6:6e:09:7a:ab:8e:7b:4a:8f:5f:a6:12:d1:13:a4:60:99: 56:de:f8:51:68:e9:24:5b:a6:42:0d:84:b0:d0:69:8c:5c:7f: e3:f5:2f:77:d0:55:ac:71:21:0c:c5:20:42:78:96:31:92:f8: 55:f5:2e:bf:16:da:1c:da:f3:d6:eb:de:70:1c:f0:d4:cb:49: bf:3d:35:e4:7d:e5:16:d8:90:ed:66:1a:34:4f:60:02:58:d2: 94:a5:9c:4c:53:67:91:8a:3d:c9:57:40:4c:e7:d9:dd:fc:2d: c9:98:ea:37:d6:d4:09:a6:ca:3d:e0:5b:ca:3c:56:81:84:04: 0c:f0:d6:48:00:07:85:e4:bb:ce:a9:f8:5f:74:2e:a9:89:3e: 81:31:65:e1:fb:03:e8:48:e1:e8:04:59:2b:9f:95:ac:99:12: 15:37:2c:ce:e8:6d:88:0c:7b:f7:a2:39:6e:43:db:bc:62:79: b3:b1:cd:18:63:37:ef:3f:26:66:d0:61:84:7a:42:1b:a9:dc: a5:e9:ba:12:23:9b:0a:00:71:68:ee:b5:54:2a:e6:d5:b0:27: 32:68:07:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjQxMTExMDE1NTE3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxNjQwNC02OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRbmLrkqGiGUqfUIR401VF9aEC1CK8do9+j2GJdQHQc0na+ACCdtZ5MwiCKZ I+hu6qrzFB4IZg4FNjxq88nQNHq3lJazDwKq81WD3eJbVRiT47iJiJjNQTWEPG0l h6cEANo1hA5Pu6arHFkoajdF0kMT5B5Kf2Rg7LFqiviy8FT6NKFMhsFRlbdNJtWN EH5NEE4RNCTiBKZvWnaTZ4YbLemkbqgcrDBrj6vHQrFf52QUsXnhLWFfKhYSvbkK 7DmTUztFocXsFZ+oj/AQqtsqvblOGnRc96p3CAuZnNvKQSqTEAXJXxQZ4JcfWeIz rER8xPl+IFrBzyBwOpWJWxKacwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKjU8H0u 4Kd+BOQH2bPqh6fo+KI6MB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4RTIvOTcwMTNBNEU1MDQwMTFFRDhBRUNBQTZGQzRGOUFFMDIvODVBRUJBNzY1 MDRDMTFFRDgyOUY3RDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKMwAwDQYJKoZIhvcNAQELBQADggEBAAgHUSZ+xR2H/DeZ EXnZzJCjAoZLQ6w4pbKhiB9u42ispjZaJeS2bgl6q457So9fphLRE6RgmVbe+FFo 6SRbpkINhLDQaYxcf+P1L3fQVaxxIQzFIEJ4ljGS+FX1Lr8W2hza89br3nAc8NTL Sb89NeR95RbYkO1mGjRPYAJY0pSlnExTZ5GKPclXQEzn2d38LcmY6jfW1Ammyj3g W8o8VoGEBAzw1kgAB4Xku86p+F90LqmJPoExZeH7A+hI4egEWSuflayZEhU3LM7o bYgMe/eiOW5D27xiebOxzRhjN+8/JmbQYYR6Qhup3KXpuhIjmwoAcWjutVQq5tWw JzJoB+E= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org