$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/2B622E1282F511EF9090F681C4F9AE02.roa File: 2B622E1282F511EF9090F681C4F9AE02.roa (raw, json) Hash identifier: um5n8atyzeoR8iKANdYR7vhmWocpmppM47bkyObk5w4= Subject key identifier: 4B:41:60:59:3D:5A:E3:2F:39:EC:F7:3A:73:39:C2:20:ED:0C:E0:B6 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3478 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/2B622E1282F511EF9090F681C4F9AE02.roa Signing time: Mon 21 Oct 2024 06:54:06 +0000 ROA not before: Mon 21 Oct 2024 06:54:06 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24391 IP address blocks: 202.91.136.0/22 maxlen: 24 202.91.140.0/23 maxlen: 24 202.91.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Oct 21 06:54:06 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6715fa8e-84be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:be:bb:eb:5b:48:ca:0a:23:0f:fc:77:50: b4:03:e3:2f:67:f2:93:c8:a3:dd:7e:b7:e9:d1:2e: 70:b3:56:be:31:bb:db:11:59:1d:d6:39:5f:c7:91: 52:c3:6d:ed:56:72:b4:d4:d5:bf:27:0c:1b:2c:f5: 70:79:c0:e4:87:5b:b4:97:d4:d3:dc:8e:fe:b8:3b: c8:68:47:9a:d8:d6:64:81:7a:02:ba:92:9b:77:68: 96:21:96:c2:10:62:69:4e:ef:b7:70:84:61:52:73: fa:a1:97:f7:0e:7a:26:1b:d3:42:60:c7:9e:13:37: 61:e1:c9:79:90:c9:a3:d6:8f:15:1c:ee:1e:a4:5e: 84:a9:0c:10:97:64:ed:6b:5a:28:57:c0:80:a5:4f: a3:05:e0:86:1c:bf:69:d5:b3:63:cf:6d:a0:c9:db: 36:fc:a4:ee:3b:2e:1d:64:47:3a:55:cf:c3:9e:55: 89:45:35:a2:60:5a:c5:ce:cf:1e:b9:1c:da:8c:56: 85:81:0e:ac:1e:ec:5d:99:06:4b:3f:47:95:fe:5e: fc:c8:6c:c8:72:1b:9a:07:15:65:bc:82:11:ff:76: a0:d1:b5:a6:d7:af:c7:d8:da:25:02:72:d1:74:f6: 50:1c:75:31:99:87:54:ee:9d:17:e9:6c:7d:d0:8b: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:60:59:3D:5A:E3:2F:39:EC:F7:3A:73:39:C2:20:ED:0C:E0:B6 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/2B622E1282F511EF9090F681C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.91.136.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:ea:d5:de:f7:8c:b2:2c:7c:38:d2:da:9b:39:c9:b2:80:28: 96:79:31:ec:44:5e:ee:59:28:c8:4c:ca:95:0f:ae:58:16:1f: 3c:11:e1:2e:67:74:9a:c2:ae:b5:60:f0:3c:f4:c6:e0:de:44: 72:b4:4c:54:54:0e:a5:df:b9:fe:d1:be:5c:f6:d6:ad:db:9f: 44:13:6f:a1:ba:60:7e:ff:5e:10:2a:fb:c2:1b:38:3a:c4:a0: dd:c5:bc:d0:b9:60:67:fe:30:b3:96:14:41:96:19:0e:5f:ec: 89:ba:e6:af:90:30:25:7e:87:77:3e:a1:bf:8e:5b:39:c0:21: 50:ce:bb:a8:89:d3:65:71:20:76:c8:37:4a:9b:10:25:07:a9: 41:42:5e:32:9b:da:d8:36:a2:11:23:e0:1a:94:d7:1e:1f:36: af:5a:f8:8a:d0:4f:8f:cf:1e:f3:d9:93:24:e6:80:69:8f:6b: 77:59:e8:a1:d1:16:43:73:12:0d:9e:52:cf:a3:f5:f0:3f:55: 28:a9:c4:bc:98:ba:f0:ad:b9:fe:29:c3:79:ba:f6:81:a3:05: c5:c1:5d:72:a9:ec:2e:97:af:8f:0a:bd:da:2e:a2:b8:f7:7f: 75:af:b4:77:c0:97:da:de:04:ed:c0:c5:d3:71:ab:8e:7f:e9: ed:f6:70:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQxMDIxMDY1NDA2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE1ZmE4ZS04NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI2+u+tbSMoKIw/8d1C0A+MvZ/KTyKPdfrfp0S5ws1a+MbvbEVkd1jlfx5FS w23tVnK01NW/JwwbLPVwecDkh1u0l9TT3I7+uDvIaEea2NZkgXoCupKbd2iWIZbC EGJpTu+3cIRhUnP6oZf3DnomG9NCYMeeEzdh4cl5kMmj1o8VHO4epF6EqQwQl2Tt a1ooV8CApU+jBeCGHL9p1bNjz22gyds2/KTuOy4dZEc6Vc/DnlWJRTWiYFrFzs8e uRzajFaFgQ6sHuxdmQZLP0eV/l78yGzIchuaBxVlvIIR/3ag0bWm16/H2NolAnLR dPZQHHUxmYdU7p0X6Wx90Iv9IQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEtBYFk9 WuMvOez3OnM5wiDtDOC2MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMkI2MjJFMTI4 MkY1MTFFRjkwOTBGNjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKW4gwDQYJKoZIhvcNAQELBQADggEBAHzq1d73jLIsfDjS 2ps5ybKAKJZ5MexEXu5ZKMhMypUPrlgWHzwR4S5ndJrCrrVg8Dz0xuDeRHK0TFRU DqXfuf7Rvlz21q3bn0QTb6G6YH7/XhAq+8IbODrEoN3FvNC5YGf+MLOWFEGWGQ5f 7Im65q+QMCV+h3c+ob+OWznAIVDOu6iJ02VxIHbIN0qbECUHqUFCXjKb2tg2ohEj 4BqU1x4fNq9a+IrQT4/PHvPZkyTmgGmPa3dZ6KHRFkNzEg2eUs+j9fA/VSipxLyY uvCtuf4pw3m69oGjBcXBXXKp7C6Xr48Kvdouorj3f3WvtHfAl9reBO3AxdNxq45/ 6e32cNo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org