$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa File: 2251B910AC7411EBBE196180C4F9AE02.roa (raw, json) Hash identifier: /9MtAWjM3Biiq8nnUtxhVHZDm3Jggzrs5MJ2Ivek0VE= Subject key identifier: 6B:BF:F9:6B:5B:F1:0E:F6:87:B6:71:59:A3:8C:89:34:22:06:E5:FD Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 33D9 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa Signing time: Thu 02 May 2024 15:00:49 +0000 ROA not before: Thu 02 May 2024 15:00:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24324 IP address blocks: 122.200.176.0/20 maxlen: 20 124.157.64.0/19 maxlen: 19 124.157.68.0/22 maxlen: 22 124.157.96.0/19 maxlen: 19 202.49.128.0/21 maxlen: 21 202.49.129.0/24 maxlen: 24 202.49.131.0/24 maxlen: 24 202.49.132.0/24 maxlen: 24 202.49.133.0/24 maxlen: 24 203.14.20.0/24 maxlen: 24 203.161.187.0/24 maxlen: 24 203.195.124.0/24 maxlen: 24 2404:6c00::/32 maxlen: 32 2404:6c00:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13273 (0x33d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: May 2 15:00:49 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6633aaa1-3322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:59:55:4d:b0:75:00:50:e4:57:85:83:54: 0d:99:94:36:7a:6c:b6:1b:ce:53:e6:59:4b:98:b4: cd:b1:35:b6:ad:ea:ce:bf:d0:5a:47:25:c3:32:fe: 90:ac:ad:a6:c7:36:a4:6f:be:be:f9:08:ad:64:ae: 30:96:8d:08:10:1f:3f:52:f3:14:a6:47:7b:e2:00: c8:1a:b7:1a:2c:e2:4d:32:cf:c5:a7:38:7e:c7:eb: 02:4d:81:24:c5:98:bc:52:2f:93:24:ea:ae:a3:66: 7a:5a:6e:fc:a1:35:28:cd:36:7b:d3:7d:94:be:49: a8:f0:8d:8f:2d:f5:a9:1f:e6:17:78:70:b5:f0:be: b8:48:ee:6a:24:e4:0c:3f:f5:70:2b:fc:f1:35:b9: 0e:66:24:f2:55:ee:f4:31:ca:ef:77:39:c5:39:24: c0:eb:c0:08:3f:14:e1:0b:87:12:43:ff:2d:00:12: 35:a3:07:17:4e:88:69:9c:25:8f:a1:85:b8:f1:d3: bc:72:16:2a:fe:be:1e:c0:9c:e2:9d:ac:2c:b5:f7: 1f:5b:f3:83:87:f1:22:04:74:07:0d:d5:89:bb:65: 1c:53:7c:db:63:1e:a3:b7:ee:9f:88:02:44:31:44: 9c:54:12:b4:45:ae:32:75:0d:09:97:5b:c3:17:46: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:F9:6B:5B:F1:0E:F6:87:B6:71:59:A3:8C:89:34:22:06:E5:FD X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.200.176.0/20 124.157.64.0/18 202.49.128.0/21 203.14.20.0/24 203.161.187.0/24 203.195.124.0/24 IPv6: 2404:6c00::/32 Signature Algorithm: sha256WithRSAEncryption 88:d7:77:46:49:e4:16:69:89:f1:70:eb:95:87:a7:27:a0:4c: 6b:f5:9c:91:0f:69:99:ce:67:95:e2:b2:b6:e8:fd:50:9a:60: cc:5c:8f:44:d5:60:54:b4:07:61:94:40:69:02:b8:6f:3d:e7: 5f:26:75:6c:2f:96:e6:e9:70:f6:f6:d8:fc:d5:ef:01:f2:cd: dd:ad:d6:a2:45:5f:e0:d3:a0:99:1c:41:f3:14:69:d8:80:4b: 8d:42:d5:f6:7d:cb:e8:be:f8:b6:cc:f0:5a:6c:11:f2:ee:9d: 02:54:8b:6c:d1:d3:29:bf:b4:41:90:ae:a6:0f:fa:95:71:31: d9:28:11:88:8e:7f:5c:17:ab:1d:40:07:d2:1c:07:e0:48:2e: 06:42:08:63:c9:29:ba:b1:6d:6e:36:55:c8:4c:6e:b7:42:38: 0a:62:68:85:8c:2e:eb:66:b6:85:ee:d5:be:0c:41:f2:1f:76: b8:e0:53:29:78:ef:7d:7d:9e:e2:9d:e4:4e:d7:c4:e4:73:95: 2d:b8:01:37:93:d9:35:8d:ca:b7:32:55:46:ed:64:0d:6d:fa: fc:8f:8b:8d:44:6c:62:e8:d4:41:08:92:a6:ac:45:da:e7:e6: 4a:d7:74:e0:5e:65:9f:80:ae:f9:b9:85:b5:02:8e:b5:32:21: 8f:bb:d7:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICM9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjQwNTAyMTUwMDQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMzYWFhMS0zMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz1ZVU2wdQBQ5FeFg1QNmZQ2emy2G85T5llLmLTNsTW2rerOv9BaRyXDMv6Q rK2mxzakb76++QitZK4wlo0IEB8/UvMUpkd74gDIGrcaLOJNMs/Fpzh+x+sCTYEk xZi8Ui+TJOquo2Z6Wm78oTUozTZ7032Uvkmo8I2PLfWpH+YXeHC18L64SO5qJOQM P/VwK/zxNbkOZiTyVe70McrvdznFOSTA68AIPxThC4cSQ/8tABI1owcXTohpnCWP oYW48dO8chYq/r4ewJzinawstfcfW/ODh/EiBHQHDdWJu2UcU3zbYx6jt+6fiAJE MUScVBK0Ra4ydQ0Jl1vDF0bmVQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFGu/+Wtb 8Q72h7ZxWaOMiTQiBuX9MB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIxNjgvMjRDNjJDMDYxRDkxMTFFMjkyNDQzMEYzMDhCMDJDRDIvMjI1MUI5MTBB Qzc0MTFFQkJFMTk2MTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAR6yLADBAZ8nUADBAPKMYADBADLDhQDBADLobsDBADLw3ww DQQCAAIwBwMFACQEbAAwDQYJKoZIhvcNAQELBQADggEBAIjXd0ZJ5BZpifFw65WH pyegTGv1nJEPaZnOZ5Xisrbo/VCaYMxcj0TVYFS0B2GUQGkCuG89518mdWwvlubp cPb22PzV7wHyzd2t1qJFX+DToJkcQfMUadiAS41C1fZ9y+i++LbM8FpsEfLunQJU i2zR0ym/tEGQrqYP+pVxMdkoEYiOf1wXqx1AB9IcB+BILgZCCGPJKbqxbW42VchM brdCOApiaIWMLutmtoXu1b4MQfIfdrjgUyl47319nuKd5E7XxORzlS24ATeT2TWN yrcyVUbtZA1t+vyPi41EbGLo1EEIkqasRdrn5krXdOBeZZ+Arvm5hbUCjrUyIY+7 1ys= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org