$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa File: 00606C184A3011EFBC542C18C4F9AE02.roa (raw, json) Hash identifier: /6WOvZOOXGezOoUokpji3QyAbuhKhRWRYfUp9II55xg= Subject key identifier: D2:2D:A7:D2:C8:80:D5:8D:57:89:96:95:60:7C:49:6B:68:3A:F4:AB Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: 02 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa Signing time: Thu 25 Jul 2024 02:45:50 +0000 ROA not before: Thu 25 Jul 2024 02:45:50 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 24074 IP address blocks: 202.12.248.0/22 maxlen: 22 202.12.252.0/22 maxlen: 22 202.27.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Jul 25 02:45:50 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66a1bc5d-870b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ba:a7:f1:01:e0:34:dc:c9:48:7c:be:9e:04: 90:6c:2d:9f:5c:44:bf:a5:7e:68:b8:73:dd:a3:d2: 8e:95:0f:b3:be:01:6f:af:f6:cf:75:4f:a7:4c:7e: 60:a8:4c:1a:05:fa:53:b4:76:ec:b5:e7:ff:13:9b: 34:5f:c9:1f:8d:77:57:3e:b0:eb:87:f4:26:34:c0: e6:d6:e2:a4:12:30:24:cf:fb:d2:23:0a:15:b6:30: a4:62:ef:c2:1a:bd:ae:c6:6a:96:5b:66:24:4b:a6: 5f:92:55:71:e5:c5:b7:31:13:69:2d:89:19:57:73: b0:93:7f:17:8c:dc:04:4a:c8:f8:74:4f:17:02:be: 4a:20:dd:7d:4d:86:54:9a:67:09:28:ba:8c:a0:ff: 1a:7d:61:75:aa:92:0a:86:27:34:d8:07:06:05:ba: c1:5f:b5:d4:57:a2:a6:6c:1d:bf:3d:a4:be:c7:25: e0:3b:6d:85:90:c8:cc:31:87:1f:34:14:dc:82:6f: b4:5d:92:c5:b0:37:1c:55:b7:c0:d9:f0:56:cf:43: a5:f6:ce:d1:c3:42:90:fd:ec:9a:b1:d1:1f:1e:1d: ec:67:06:62:02:db:53:28:4e:2d:8f:58:64:e3:26: 1e:48:f2:e5:2c:f4:33:3e:90:61:01:c4:f0:55:7b: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:A7:D2:C8:80:D5:8D:57:89:96:95:60:7C:49:6B:68:3A:F4:AB X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.248.0/21 202.27.140.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:72:c8:0c:87:b6:a3:b3:41:4e:74:22:ae:6b:60:cc:67:c3: df:98:34:18:37:0b:16:86:d6:6f:2c:f8:2f:95:68:22:2e:cd: 04:62:c4:73:4d:a5:ac:56:fb:94:11:a9:fe:c6:06:30:73:7f: 8f:b7:ee:e1:41:99:b9:85:3a:67:06:a6:0d:6d:d9:71:8c:6c: c4:f9:e3:4b:69:86:54:0e:78:47:4c:77:96:f4:68:a7:7c:25: ab:fa:2d:f9:65:45:d6:f9:85:3e:ef:3f:d8:4d:45:93:0e:6e: bb:7f:21:ec:56:b4:87:b9:d2:60:8d:b9:d8:2a:de:cc:05:59: e4:9f:17:0b:f5:ea:52:c1:28:af:76:44:18:35:31:53:e5:84: 78:39:3e:a0:69:da:86:a3:67:bb:f8:0a:f1:e8:25:47:bc:8c: 65:5f:ba:6e:1f:b9:a2:f7:b3:64:6f:38:81:24:47:68:35:ce: 47:5c:65:4e:9c:09:c3:7f:8b:14:6f:6c:7b:bb:84:43:6d:9c: 39:96:de:ed:14:1f:1d:b6:92:12:3a:8c:14:3e:12:65:a8:cf: db:e2:5c:21:bc:9f:9c:8b:54:51:e2:f0:ac:cd:b1:0f:90:a4: 9e:c8:e3:b2:5f:48:2c:b4:bb:6a:98:77:83:b1:d7:17:13:0f: c1:7b:96:d0 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjIzRjExMC8GA1UEBRMoQ0NEQ0ZGMjEyQTZCNjk5QTU3MEI0QTlEMTc1RjE2MjM3 MTgzMkNBNTAeFw0yNDA3MjUwMjQ1NTBaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YTFiYzVkLTg3MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8uqfxAeA03MlIfL6eBJBsLZ9cRL+lfmi4c92j0o6VD7O+AW+v9s91T6dMfmCo TBoF+lO0duy15/8TmzRfyR+Nd1c+sOuH9CY0wObW4qQSMCTP+9IjChW2MKRi78Ia va7GapZbZiRLpl+SVXHlxbcxE2ktiRlXc7CTfxeM3ARKyPh0TxcCvkog3X1NhlSa Zwkouoyg/xp9YXWqkgqGJzTYBwYFusFftdRXoqZsHb89pL7HJeA7bYWQyMwxhx80 FNyCb7RdksWwNxxVt8DZ8FbPQ6X2ztHDQpD97Jqx0R8eHexnBmIC21MoTi2PWGTj Jh5I8uUs9DM+kGEBxPBVe8yVAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU0i2n0siA 1Y1XiZaVYHxJa2g69KswHwYDVR0jBBgwFoAUzNz/ISpraZpXC0qdF18WI3GDLKUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMjNGLzMzOEIyRjQ4NEEy RjExRUZBRTk2QzkxNUM0RjlBRTAyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExL VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvek56X0lTcHJhWnBYQzBxZEYxOFdJM0dETEtVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi8wMDYwNkMxODRB MzAxMUVGQkM1NDJDMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEA8oM+AMEAMobjDANBgkqhkiG9w0BAQsFAAOCAQEAanLIDIe2 o7NBTnQirmtgzGfD35g0GDcLFobWbyz4L5VoIi7NBGLEc02lrFb7lBGp/sYGMHN/ j7fu4UGZuYU6ZwamDW3ZcYxsxPnjS2mGVA54R0x3lvRop3wlq/ot+WVF1vmFPu8/ 2E1Fkw5uu38h7Fa0h7nSYI252CrezAVZ5J8XC/XqUsEor3ZEGDUxU+WEeDk+oGna hqNnu/gK8eglR7yMZV+6bh+5ovezZG84gSRHaDXOR1xlTpwJw3+LFG9se7uEQ22c OZbe7RQfHbaSEjqMFD4SZajP2+JcIbyfnItUUeLwrM2xD5Cknsjjsl9ILLS7aph3 g7HXFxMPwXuW0A== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:22 2024 by rpki-client on console-fra.rpki-client.org