$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa File: 2A67700A9B4411EFA1772153C4F9AE02.roa (raw, json) Hash identifier: zl+C3NthfIT+XlnjBqg1tdgjzR0Zd+EdwBs85D/sIUU= Subject key identifier: 0D:8A:18:2C:E7:DD:10:8E:24:03:6C:50:4A:9C:0B:29:7B:27:B3:79 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 071E Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa Signing time: Tue 05 Nov 2024 07:04:14 +0000 ROA not before: Tue 05 Nov 2024 07:04:14 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 23686 IP address blocks: 51.162.48.0/24 maxlen: 24 51.162.49.0/24 maxlen: 24 51.162.50.0/23 maxlen: 23 51.162.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Nov 5 07:04:14 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6729c36e-d4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:b5:be:e8:54:2d:89:f2:25:34:31:11:66: 80:68:d1:33:dc:89:8b:2f:2c:23:d1:10:cb:c8:e8: 41:5b:bf:4d:cf:77:c8:f8:5d:ee:db:e6:4f:11:a2: 80:7e:5c:ce:56:4a:7d:eb:3c:f2:70:36:2d:6a:a1: 99:1a:f3:ef:46:6a:1b:21:23:3e:3e:09:ab:85:24: df:78:fb:b6:18:12:6d:b0:6e:d5:c0:c3:14:08:64: 79:a1:82:b3:3b:de:4b:7d:f4:a9:63:59:07:b4:48: 4b:ed:79:d9:c8:1a:2f:03:4e:dc:75:2d:fc:c7:6f: 02:0b:76:0c:cc:32:d9:cf:5e:f5:dc:96:1d:59:e0: 55:ca:54:fa:c7:6c:fa:29:a7:7c:97:1a:2b:d0:1a: 42:23:1f:03:60:c0:df:4b:7f:e3:14:83:dd:63:bc: 65:96:8f:f0:00:34:0d:cc:87:e6:e8:9e:9b:5f:0e: 0b:c2:e2:49:bb:a8:37:92:9f:f0:5a:75:2e:99:c7: f3:41:71:69:80:eb:2e:f3:d1:04:91:8e:f9:ef:98: 4a:99:4c:91:0c:ee:7e:6a:d0:07:59:de:be:87:1f: 6b:3a:ae:bb:17:f9:57:1e:29:3b:0d:3d:de:08:75: 4f:27:d7:4c:31:49:5a:d9:17:49:93:7b:ec:86:a7: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8A:18:2C:E7:DD:10:8E:24:03:6C:50:4A:9C:0B:29:7B:27:B3:79 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 51.162.48.0/22 51.162.71.0/24 Signature Algorithm: sha256WithRSAEncryption 97:32:2d:8e:0d:ea:27:b6:84:5b:bc:80:32:fb:97:85:3c:6d: eb:5d:34:71:e7:1b:70:7b:85:7b:8a:86:db:c7:9d:7e:13:45: 61:82:b8:9e:31:45:ba:1c:37:fa:23:7a:dd:f6:78:4f:d6:dd: fa:ce:10:83:4e:26:f7:42:d0:cd:92:9c:9c:37:ae:fe:59:a7: f3:20:08:f9:89:be:4b:ad:77:a9:c4:c8:95:21:b3:c2:57:6f: ba:da:d5:ce:11:49:15:a4:30:97:5c:a7:10:d8:1c:63:b8:c0: bc:31:69:5d:56:98:1a:0e:17:9e:8d:5d:18:95:c0:8f:66:03: 0d:63:a8:42:e9:f5:80:bc:63:38:99:b4:57:38:9d:2c:37:49: e5:de:2b:1f:ac:d3:ec:29:2e:35:d6:bb:8d:5e:a2:58:19:89: aa:4d:7c:24:17:9b:91:83:f2:1c:0f:85:61:40:1c:7a:bd:f2: db:a1:61:a1:e1:e5:ab:f0:d1:a9:69:c4:c3:64:b0:d3:a1:e7: ce:ed:9b:9a:fb:9d:c5:5b:69:14:ae:f8:d9:85:8e:a7:9d:6e: 22:32:78:c4:73:12:08:8d:a0:73:b4:fc:c9:b9:5a:4d:04:40: 3a:08:6b:9e:02:75:58:b3:28:d9:3e:cd:e3:56:e1:c8:15:67: 1c:bb:a6:8e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjQxMTA1MDcwNDE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI5YzM2ZS1kNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XW1vuhULYnyJTQxEWaAaNEz3ImLLywj0RDLyOhBW79Nz3fI+F3u2+ZPEaKA flzOVkp96zzycDYtaqGZGvPvRmobISM+PgmrhSTfePu2GBJtsG7VwMMUCGR5oYKz O95LffSpY1kHtEhL7XnZyBovA07cdS38x28CC3YMzDLZz1713JYdWeBVylT6x2z6 Kad8lxor0BpCIx8DYMDfS3/jFIPdY7xllo/wADQNzIfm6J6bXw4LwuJJu6g3kp/w WnUumcfzQXFpgOsu89EEkY7575hKmUyRDO5+atAHWd6+hx9rOq67F/lXHik7DT3e CHVPJ9dMMUla2RdJk3vshqeNYwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA2KGCzn 3RCOJANsUEqcCyl7J7N5MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvMkE2NzcwMEE5 QjQ0MTFFRkExNzcyMTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIzojADBAAzokcwDQYJKoZIhvcNAQELBQADggEBAJcyLY4N 6ie2hFu8gDL7l4U8betdNHHnG3B7hXuKhtvHnX4TRWGCuJ4xRbocN/ojet32eE/W 3frOEINOJvdC0M2SnJw3rv5Zp/MgCPmJvkutd6nEyJUhs8JXb7ra1c4RSRWkMJdc pxDYHGO4wLwxaV1WmBoOF56NXRiVwI9mAw1jqELp9YC8YziZtFc4nSw3SeXeKx+s 0+wpLjXWu41eolgZiapNfCQXm5GD8hwPhWFAHHq98tuhYaHh5avw0alpxMNksNOh 587tm5r7ncVbaRSu+NmFjqedbiIyeMRzEgiNoHO0/Mm5Wk0EQDoIa54CdVizKNk+ zeNW4cgVZxy7po4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org