$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa File: 6553D6106C2B11EA87ED1160C4F9AE02.roa (raw, json) Hash identifier: 1XLwyu48JVPZ8mtVCNJp5XWePHj2GBYvHY0+JA2KV4M= Subject key identifier: B6:B5:7E:8B:90:6B:37:36:B4:6C:4D:10:51:52:71:8B:4D:F0:39:8B Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 09CB Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa Signing time: Thu 12 Oct 2023 20:28:22 +0000 ROA not before: Thu 12 Oct 2023 20:28:22 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38256 IP address blocks: 124.6.224.0/20 maxlen: 21 124.6.224.0/24 maxlen: 24 124.6.225.0/24 maxlen: 24 124.6.226.0/24 maxlen: 24 124.6.227.0/24 maxlen: 24 124.6.228.0/24 maxlen: 24 124.6.229.0/24 maxlen: 24 124.6.230.0/24 maxlen: 24 124.6.231.0/24 maxlen: 24 124.6.232.0/24 maxlen: 24 124.6.233.0/24 maxlen: 24 124.6.234.0/24 maxlen: 24 124.6.235.0/24 maxlen: 24 124.6.236.0/24 maxlen: 24 124.6.237.0/24 maxlen: 24 124.6.238.0/24 maxlen: 24 124.6.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2507 (0x9cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Oct 12 20:28:22 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652856e6-bb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:5d:4d:59:e5:c9:a4:07:c6:e9:84:8b:0b: be:8f:02:69:0c:d8:a1:b1:f6:28:6d:4e:62:b2:ce: ba:6e:39:39:51:a9:c0:4c:1c:8c:b5:89:29:09:6d: 70:3c:d6:7d:6f:37:82:22:7f:21:3a:0d:75:b8:7a: b1:dc:29:c3:70:88:72:09:21:eb:7a:a1:9b:b0:27: 39:c1:e1:37:2e:b7:87:03:89:4c:97:6c:ca:c5:a9: 58:c8:88:11:a0:e6:3b:63:79:e7:61:62:9a:96:e8: 80:e8:3f:9e:03:32:7f:70:1a:50:04:4d:db:92:7d: 8e:42:60:b2:7b:e9:4e:81:be:2a:c2:90:4c:64:2a: 66:d6:ea:4e:32:66:83:fa:3c:4d:ba:67:7b:71:4f: 1b:a1:b8:e5:1c:a1:60:45:16:f6:e7:04:31:59:0f: b1:fe:39:58:3d:69:c7:24:68:63:49:34:6d:b6:35: fd:4d:5a:7c:37:dc:dd:a3:da:36:b9:17:63:c4:a2: d6:e0:aa:0b:41:e2:2c:fa:c8:ed:26:77:02:e9:73: 4f:a5:e5:78:01:56:7a:f4:17:2b:2f:8c:00:56:53: cc:7a:6b:6d:ff:23:a1:b4:6d:2c:38:d1:af:ea:f3: db:77:24:7a:ac:33:7f:48:61:1d:cd:63:38:6e:d2: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:7E:8B:90:6B:37:36:B4:6C:4D:10:51:52:71:8B:4D:F0:39:8B X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.6.224.0/20 Signature Algorithm: sha256WithRSAEncryption 4e:25:0a:36:6b:54:e6:4a:27:46:38:71:d9:53:16:65:22:03: 2e:6a:a0:a5:2c:b8:6f:21:1a:98:0d:9b:9b:f5:e4:bc:b0:80: 59:e0:13:65:26:0a:b8:e9:9c:b3:bc:da:26:8a:05:cb:ee:87: 07:c2:6b:4f:74:10:e0:f4:51:78:9a:e5:7c:91:7a:1a:f3:18: 68:63:3e:f4:bb:9a:03:bc:16:26:36:b2:1f:fc:12:a9:1d:9b: 73:89:fd:73:3f:a9:56:3b:74:de:40:ef:32:ca:b8:60:49:7d: c2:cc:1c:6f:e6:f3:23:3c:75:ed:e2:85:96:79:fe:ce:6a:92: 3d:ce:b5:f6:a6:ad:96:17:1b:a5:e7:ed:33:ef:a7:7e:d1:f6: c4:73:92:02:e7:7e:3a:6a:fd:c7:3d:03:74:b7:76:fb:e8:b9: 8b:35:e7:75:5b:91:45:eb:f4:28:7e:68:7e:5b:2a:5a:8d:84: a8:b8:3b:80:0c:7b:0f:a6:53:a0:0d:e4:03:7f:f1:ad:a8:56: df:d2:21:3a:99:bc:76:3b:5f:35:7b:ec:b8:b7:23:e9:84:27: e8:86:37:f2:85:31:70:ac:3d:82:66:e2:04:a5:66:55:59:b8: b7:e7:ae:67:a2:66:8f:0f:f7:84:9d:0f:a7:52:d9:1e:4f:d7: 00:86:04:f3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjMxMDEyMjAyODIyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI4NTZlNi1iYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6VdTVnlyaQHxumEiwu+jwJpDNihsfYobU5iss66bjk5UanATByMtYkpCW1w PNZ9bzeCIn8hOg11uHqx3CnDcIhyCSHreqGbsCc5weE3LreHA4lMl2zKxalYyIgR oOY7Y3nnYWKaluiA6D+eAzJ/cBpQBE3bkn2OQmCye+lOgb4qwpBMZCpm1upOMmaD +jxNumd7cU8bobjlHKFgRRb25wQxWQ+x/jlYPWnHJGhjSTRttjX9TVp8N9zdo9o2 uRdjxKLW4KoLQeIs+sjtJncC6XNPpeV4AVZ69BcrL4wAVlPMemtt/yOhtG0sONGv 6vPbdyR6rDN/SGEdzWM4btLjhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLa1fouQ azc2tGxNEFFScYtN8DmLMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDQUQvOUZEOTdBMDg0NUMzMTFFQUJFRjVENDM5QzRGOUFFMDIvNjU1M0Q2MTA2 QzJCMTFFQTg3RUQxMTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8BuAwDQYJKoZIhvcNAQELBQADggEBAE4lCjZrVOZKJ0Y4 cdlTFmUiAy5qoKUsuG8hGpgNm5v15LywgFngE2UmCrjpnLO82iaKBcvuhwfCa090 EOD0UXia5XyRehrzGGhjPvS7mgO8FiY2sh/8Eqkdm3OJ/XM/qVY7dN5A7zLKuGBJ fcLMHG/m8yM8de3ihZZ5/s5qkj3OtfamrZYXG6Xn7TPvp37R9sRzkgLnfjpq/cc9 A3S3dvvouYs153VbkUXr9Ch+aH5bKlqNhKi4O4AMew+mU6AN5AN/8a2oVt/SITqZ vHY7XzV77Li3I+mEJ+iGN/KFMXCsPYJm4gSlZlVZuLfnrmeiZo8P94SdD6dS2R5P 1wCGBPM= -----END CERTIFICATE-----Generated at Thu May 16 22:34:51 2024 by rpki-client on console-ams.rpki-client.org