$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa File: 85AEBA76504C11ED829F7D24C4F9AE02.roa (raw, json) Hash identifier: NLkibe4sIvuvX1gTpb125fcvFKo+vEVtZ7WUhYt+DQk= Subject key identifier: BB:1C:37:C9:2B:A1:65:80:1B:0B:23:57:C9:1D:AA:48:0D:26:BE:6D Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: C3 Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa Signing time: Sat 21 Oct 2023 03:55:31 +0000 ROA not before: Sat 21 Oct 2023 03:55:31 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 24504 IP address blocks: 202.51.0.0/22 maxlen: 22 202.51.0.0/24 maxlen: 24 202.51.1.0/24 maxlen: 24 202.51.2.0/24 maxlen: 24 202.51.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Validity Not Before: Oct 21 03:55:31 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65334bb2-5951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0d:c5:db:6a:59:52:c0:c4:56:9c:0e:a0:9e: 0a:7d:d0:09:45:ac:bf:ad:a4:06:0d:69:bb:e8:08: 2d:f0:ca:84:58:1e:25:bf:89:50:33:41:1b:2d:83: 3f:52:39:7d:3d:5a:64:d7:49:b2:80:50:2d:62:ba: 55:91:33:d0:2f:77:fe:9a:07:e2:1c:45:fe:2d:d5: 3e:2a:5e:f1:53:4c:de:83:15:d8:1d:c5:94:e3:87: e6:85:8d:1e:b4:1f:71:da:bb:d8:99:3e:e8:aa:07: 1d:79:0b:0f:9f:37:0d:39:6b:3d:68:1b:29:bc:c6: 52:05:82:dd:75:91:1a:54:37:14:40:af:89:7c:93: 14:4c:0f:a7:99:04:fe:66:19:7a:18:f8:0f:3c:fe: b3:44:ce:03:fa:e6:aa:29:34:a8:cc:65:76:12:88: 32:60:e1:a9:53:b2:9c:ef:33:92:89:03:b8:ac:f0: ef:0b:4c:be:f4:0d:6c:a5:06:2f:9d:37:bb:89:18: af:b2:7e:7a:cb:33:11:65:58:3b:d9:09:7f:1a:19: a1:a8:20:a8:80:81:e0:39:f3:4e:f9:27:35:e0:94: 9d:80:b1:b3:6a:d9:be:18:28:57:36:90:7f:a1:7a: f3:23:ea:bf:a2:07:02:26:72:23:35:61:06:d2:ca: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1C:37:C9:2B:A1:65:80:1B:0B:23:57:C9:1D:AA:48:0D:26:BE:6D X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.0.0/22 Signature Algorithm: sha256WithRSAEncryption 47:a6:49:0d:a7:d8:8c:2e:4c:a0:65:56:d8:e6:af:f5:66:b0: 00:16:c9:15:8c:ee:b4:f1:ce:8d:d7:69:94:d4:4e:fa:61:a7: c8:0c:e3:85:03:cd:e1:ab:1d:0d:89:95:01:a2:e6:1b:12:c9: d6:4a:a3:1d:c4:28:28:37:5b:7b:da:7a:e3:cf:37:c5:20:0c: df:61:90:05:b5:ab:03:d3:c2:cc:b8:9e:1b:cb:b6:45:c6:3c: 7a:72:cd:64:86:98:88:6c:43:d8:fc:d5:31:21:a6:f6:b9:f4: 84:36:3e:f6:dc:b6:bc:06:2b:ef:92:84:4f:ee:ae:53:d2:29: 6b:e7:a6:11:91:64:a7:31:3e:54:64:9f:df:0f:55:47:1c:c1: 6b:56:cf:06:27:58:86:6e:8c:b0:28:69:d1:10:ac:cd:64:40: 7c:db:40:aa:4f:1e:47:66:fa:bf:28:ba:3d:4d:3a:2d:ff:70: b0:69:e5:16:0b:1a:45:07:2d:74:dd:66:7c:9e:dd:d0:7a:9c: 0e:45:2a:8f:8c:d3:b8:f8:50:93:33:77:b3:4a:64:e5:c3:a0: fc:de:31:66:c4:17:c3:09:f8:30:1d:a3:a5:2b:20:74:c3:bf: 14:53:43:06:e2:c1:a9:77:80:30:7b:70:14:ec:54:98:55:d1: 14:f0:59:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjMxMDIxMDM1NTMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMzNGJiMi01OTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA3F22pZUsDEVpwOoJ4KfdAJRay/raQGDWm76Agt8MqEWB4lv4lQM0EbLYM/ Ujl9PVpk10mygFAtYrpVkTPQL3f+mgfiHEX+LdU+Kl7xU0zegxXYHcWU44fmhY0e tB9x2rvYmT7oqgcdeQsPnzcNOWs9aBspvMZSBYLddZEaVDcUQK+JfJMUTA+nmQT+ Zhl6GPgPPP6zRM4D+uaqKTSozGV2EogyYOGpU7Kc7zOSiQO4rPDvC0y+9A1spQYv nTe7iRivsn56yzMRZVg72Ql/GhmhqCCogIHgOfNO+Sc14JSdgLGzatm+GChXNpB/ oXrzI+q/ogcCJnIjNWEG0srIRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLscN8kr oWWAGwsjV8kdqkgNJr5tMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4RTIvOTcwMTNBNEU1MDQwMTFFRDhBRUNBQTZGQzRGOUFFMDIvODVBRUJBNzY1 MDRDMTFFRDgyOUY3RDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKMwAwDQYJKoZIhvcNAQELBQADggEBAEemSQ2n2IwuTKBl Vtjmr/VmsAAWyRWM7rTxzo3XaZTUTvphp8gM44UDzeGrHQ2JlQGi5hsSydZKox3E KCg3W3vaeuPPN8UgDN9hkAW1qwPTwsy4nhvLtkXGPHpyzWSGmIhsQ9j81TEhpva5 9IQ2PvbctrwGK++ShE/urlPSKWvnphGRZKcxPlRkn98PVUccwWtWzwYnWIZujLAo adEQrM1kQHzbQKpPHkdm+r8ouj1NOi3/cLBp5RYLGkUHLXTdZnye3dB6nA5FKo+M 07j4UJMzd7NKZOXDoPzeMWbEF8MJ+DAdo6UrIHTDvxRTQwbiwal3gDB7cBTsVJhV 0RTwWfM= -----END CERTIFICATE-----Generated at Sat May 25 06:05:10 2024 by rpki-client on console-ams.rpki-client.org