$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa File: 55B355DCA60F11EF82E7691DC4F9AE02.roa (raw, json) Hash identifier: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o= Subject key identifier: 93:AB:45:21:6D:20:83:E0:2E:91:77:32:D4:98:1B:99:8E:46:FA:A7 Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 06 Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa Signing time: Thu 21 Nov 2024 05:16:58 +0000 ROA not before: Thu 21 Nov 2024 05:16:58 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 136784 IP address blocks: 103.96.4.0/22 maxlen: 22 103.96.4.0/24 maxlen: 24 103.96.5.0/24 maxlen: 24 103.96.6.0/24 maxlen: 24 103.96.7.0/24 maxlen: 24 113.212.92.0/22 maxlen: 22 113.212.92.0/24 maxlen: 24 113.212.93.0/24 maxlen: 24 113.212.94.0/24 maxlen: 24 113.212.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Nov 21 05:16:58 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=673ec249-25d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:49:98:5a:2f:2c:d7:0e:18:9d:1d:ed:96: 70:8c:85:9f:14:42:f7:47:d0:70:08:32:df:81:e0: bc:25:72:f9:cf:da:f1:f3:ff:b7:76:00:b4:26:ac: 84:07:b5:3b:8c:17:b0:4d:d5:73:7b:25:7f:15:06: 09:22:29:b9:25:4f:eb:e9:56:7b:a3:1f:ad:39:ec: 70:73:db:76:5f:c7:b4:5f:7e:b6:93:22:0e:45:53: b7:79:0e:6e:55:3e:11:48:e9:8b:6e:6f:5e:01:e7: 78:d9:d0:c5:b7:92:9a:0f:58:07:ed:39:74:88:94: ca:78:7e:b4:f9:95:df:31:07:76:20:a2:12:c4:94: 76:01:0a:b9:be:52:ac:84:27:4d:76:11:8e:2b:ec: f6:de:87:e8:2c:a5:fc:46:04:f2:b7:11:31:18:95: 9e:5b:dc:22:74:fd:a4:6b:03:a1:59:29:32:88:e7: 6d:35:2b:f4:bf:3c:2d:a9:6b:99:64:47:0a:0e:b1: 59:3c:05:30:02:0c:19:be:5e:ad:eb:0f:51:c4:cb: 40:64:2e:e0:cd:f2:25:df:6b:c2:1d:d6:ba:00:e7: 5f:d9:e3:dc:f3:b8:91:4a:8c:46:70:87:88:44:ae: e9:89:15:b9:b8:c0:23:b9:5b:1f:61:fa:f4:6f:43: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AB:45:21:6D:20:83:E0:2E:91:77:32:D4:98:1B:99:8E:46:FA:A7 X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.4.0/22 113.212.92.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:02:c2:69:28:ab:46:d1:38:b0:df:8f:2f:cd:36:9d:11:d3: e9:09:c1:af:15:29:83:3c:fe:03:f0:99:a5:0c:74:ca:f3:9b: 80:9b:0b:17:38:75:a2:b9:18:a5:aa:e0:54:e9:db:fe:7e:24: 3b:f5:9b:12:22:c5:b7:74:7f:f0:8f:1f:73:ca:c1:dc:4e:cf: d7:a1:b8:c9:8c:95:b5:0e:18:0e:56:ff:84:72:f3:6d:ef:aa: 3a:9f:58:7c:2e:53:62:7e:e4:fe:63:f3:7e:6d:9d:00:57:bf: f1:e5:16:43:2c:24:23:55:2f:3e:d0:1b:36:7f:5a:93:b0:2f: 15:49:82:57:d8:c1:3c:53:10:c3:76:70:94:59:72:e9:2d:8d: 8b:00:54:6b:2e:38:be:33:05:40:db:38:2e:9e:6e:15:6a:8e: 72:cd:ea:8a:56:05:1b:37:cf:56:dd:5f:89:62:fb:5d:c1:e3: 13:7a:26:71:3b:52:b3:41:c9:3d:f0:55:11:66:0d:aa:52:d3: cf:8e:36:e1:fe:ea:bb:e4:87:7a:05:34:60:21:6e:fc:c3:a7: 62:ee:85:b2:c2:10:81:b8:fd:0e:f1:78:48:c7:6e:4b:f0:c1: 6a:2b:1f:3d:06:4c:fd:82:77:83:00:49:a4:0d:64:1c:6b:26: 2e:cb:04:35 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTkyQzExMC8GA1UEBRMoNzkyNjgzODA2QzhCRTNBQzEzNjE0RDM3NUU5MDE5Mjc0 MDk5QkM3QjAeFw0yNDExMjEwNTE2NThaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2VjMjQ5LTI1ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv2UmYWi8s1w4YnR3tlnCMhZ8UQvdH0HAIMt+B4LwlcvnP2vHz/7d2ALQmrIQH tTuMF7BN1XN7JX8VBgkiKbklT+vpVnujH6057HBz23Zfx7RffraTIg5FU7d5Dm5V PhFI6Ytub14B53jZ0MW3kpoPWAftOXSIlMp4frT5ld8xB3YgohLElHYBCrm+UqyE J012EY4r7Pbeh+gspfxGBPK3ETEYlZ5b3CJ0/aRrA6FZKTKI5201K/S/PC2pa5lk RwoOsVk8BTACDBm+Xq3rD1HEy0BkLuDN8iXfa8Id1roA51/Z49zzuJFKjEZwh4hE rumJFbm4wCO5Wx9h+vRvQ/uLAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUk6tFIW0g g+AukXcy1JgbmY5G+qcwHwYDVR0jBBgwFoAUeSaDgGyL46wTYU03XpAZJ0CZvHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBOTJDL0E1MjgxNEQyQTYw RTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNhRGdHeUw0NndUWVUwM1hwQVpKMENadkhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTkyQy9BNTI4MTREMkE2MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi81NUIzNTVEQ0E2 MEYxMUVGODJFNzY5MURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmdgBAMEAnHUXDANBgkqhkiG9w0BAQsFAAOCAQEAmgLCaSir RtE4sN+PL802nRHT6QnBrxUpgzz+A/CZpQx0yvObgJsLFzh1orkYpargVOnb/n4k O/WbEiLFt3R/8I8fc8rB3E7P16G4yYyVtQ4YDlb/hHLzbe+qOp9YfC5TYn7k/mPz fm2dAFe/8eUWQywkI1UvPtAbNn9ak7AvFUmCV9jBPFMQw3ZwlFly6S2NiwBUay44 vjMFQNs4Lp5uFWqOcs3qilYFGzfPVt1fiWL7XcHjE3omcTtSs0HJPfBVEWYNqlLT z4424f7qu+SHegU0YCFu/MOnYu6FssIQgbj9DvF4SMduS/DBaisfPQZM/YJ3gwBJ pA1kHGsmLssENQ== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org