$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/824DA5B0AD8B11EFBBEBED75C4F9AE02.roa File: 824DA5B0AD8B11EFBBEBED75C4F9AE02.roa (raw, json) Hash identifier: /MwgL2f0RA04OFswOSQJKZbPsBZtozU5l1lk2xnsGkw= Subject key identifier: 92:09:E9:11:7F:6A:23:66:38:5E:74:CE:8F:5F:A6:F6:14:A8:BF:2C Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1DEF Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/824DA5B0AD8B11EFBBEBED75C4F9AE02.roa Signing time: Thu 28 Nov 2024 13:20:17 +0000 ROA not before: Thu 28 Nov 2024 13:20:17 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 9387 IP address blocks: 103.11.60.0/24 maxlen: 24 113.203.234.0/24 maxlen: 24 113.203.235.0/24 maxlen: 24 113.203.236.0/24 maxlen: 24 113.203.237.0/24 maxlen: 24 113.203.238.0/24 maxlen: 24 113.203.239.0/24 maxlen: 24 113.203.240.0/24 maxlen: 24 180.178.128.0/24 maxlen: 24 180.178.129.0/24 maxlen: 24 180.178.132.0/24 maxlen: 24 180.178.133.0/24 maxlen: 24 180.178.134.0/24 maxlen: 24 180.178.135.0/24 maxlen: 24 180.178.136.0/24 maxlen: 24 180.178.137.0/24 maxlen: 24 180.178.138.0/24 maxlen: 24 180.178.139.0/24 maxlen: 24 180.178.172.0/24 maxlen: 24 180.178.174.0/24 maxlen: 24 180.178.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7663 (0x1def) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Nov 28 13:20:17 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67486e11-02c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:59:dc:fe:ba:76:18:2a:f8:1b:7a:87:0c: 45:81:97:ba:7b:cd:6c:3b:28:05:91:92:5f:41:5c: 17:f0:4d:53:e6:a9:d3:22:d6:20:f3:11:84:9e:ef: c6:05:d6:6b:6a:f9:47:23:b8:0a:de:27:1c:96:d9: 2a:4e:6b:29:5f:8f:10:3d:8b:8a:e5:d6:6b:b5:44: 02:dc:77:b2:12:d4:ba:09:99:85:a2:6c:5a:ac:25: a7:68:73:17:ba:17:84:62:7a:d3:f6:85:7d:50:6a: 00:e6:2e:e8:7f:8e:f4:f1:46:55:fc:69:a8:c8:8c: 60:7f:5c:5b:ed:27:ff:09:b9:20:0f:c2:06:d7:48: ee:87:5e:de:8a:d9:da:b5:59:49:a9:82:4d:eb:57: 58:c4:72:df:60:a6:c1:ec:ad:a7:3f:67:9d:5a:50: f5:94:ea:58:b1:b4:d7:98:d6:c3:4e:7e:ff:18:ba: 3e:10:2a:8e:ae:c5:70:f5:7f:95:73:f6:88:95:2d: c8:b1:7a:bb:d4:4f:30:d9:75:d4:c7:ec:76:26:91: 93:2e:cd:23:54:90:1c:38:40:0d:85:46:4c:a6:fe: 32:ad:03:bc:d3:a1:d5:2a:9f:2d:09:0b:ad:67:f0: 44:7e:81:1a:d8:4a:b3:c7:00:4b:15:13:2a:ad:e3: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:E9:11:7F:6A:23:66:38:5E:74:CE:8F:5F:A6:F6:14:A8:BF:2C X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/824DA5B0AD8B11EFBBEBED75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.60.0/24 113.203.234.0-113.203.240.255 180.178.128.0/23 180.178.132.0-180.178.139.255 180.178.172.0/24 180.178.174.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:a0:e9:b3:52:5c:bb:bc:4d:12:17:1b:8e:42:a0:a0:d3:9e: 6e:81:84:66:61:01:eb:46:ca:44:ef:3d:e4:bc:e0:0b:a6:f5: 02:26:00:1c:53:7b:4e:71:f0:6c:fe:3c:55:60:07:59:b7:59: 0e:60:9f:9c:1d:80:f4:f3:d9:e7:0f:da:d7:ef:a9:c0:b6:b4: 8a:93:c7:39:6a:f6:78:02:e0:97:82:b6:a3:c4:63:df:fe:7d: 16:4f:b0:4c:f6:6b:35:47:0e:cf:34:a7:86:d2:ae:c3:a3:e2: 95:26:b7:af:62:24:04:89:d8:85:73:66:7c:c0:00:f3:30:df: 65:0c:9a:5a:29:06:0c:e9:af:88:15:13:36:84:18:6c:db:63: 69:69:46:06:99:34:0d:1f:32:85:df:8c:ab:99:f7:68:6d:a4: e9:53:2b:81:08:c9:cb:15:4e:84:bf:46:6c:af:ae:2a:eb:8c: 73:45:8a:05:36:e8:7e:a1:10:3c:f1:e6:e7:db:35:0d:ac:ac: 11:ac:de:b6:67:7d:f3:10:a9:44:20:41:9a:4f:0b:40:86:6f: 2d:bf:90:1b:e8:3b:27:3d:68:8d:31:0f:b9:5c:d9:1f:53:2c: 00:12:d8:40:25:f6:cf:31:b0:93:bc:d5:da:e8:ea:09:7c:07: 4e:57:a0:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICHe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQxMTI4MTMyMDE3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4NmUxMS0wMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3R9Z3P66dhgq+Bt6hwxFgZe6e81sOygFkZJfQVwX8E1T5qnTItYg8xGEnu/G BdZravlHI7gK3iccltkqTmspX48QPYuK5dZrtUQC3HeyEtS6CZmFomxarCWnaHMX uheEYnrT9oV9UGoA5i7of4708UZV/GmoyIxgf1xb7Sf/CbkgD8IG10juh17eitna tVlJqYJN61dYxHLfYKbB7K2nP2edWlD1lOpYsbTXmNbDTn7/GLo+ECqOrsVw9X+V c/aIlS3IsXq71E8w2XXUx+x2JpGTLs0jVJAcOEANhUZMpv4yrQO806HVKp8tCQut Z/BEfoEa2EqzxwBLFRMqreMTOwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFJIJ6RF/ aiNmOF50zo9fpvYUqL8sMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvODI0REE1QjBB RDhCMTFFRkJCRUJFRDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgABMDQDBABnCzwwDAMEAXHL6gMEAHHL8AMEAbSygDAMAwQCtLKEAwQC tLKIAwQAtLKsAwQBtLKuMA0GCSqGSIb3DQEBCwUAA4IBAQB6oOmzUly7vE0SFxuO QqCg055ugYRmYQHrRspE7z3kvOALpvUCJgAcU3tOcfBs/jxVYAdZt1kOYJ+cHYD0 89nnD9rX76nAtrSKk8c5avZ4AuCXgrajxGPf/n0WT7BM9ms1Rw7PNKeG0q7Do+KV JrevYiQEidiFc2Z8wADzMN9lDJpaKQYM6a+IFRM2hBhs22NpaUYGmTQNHzKF34yr mfdobaTpUyuBCMnLFU6Ev0Zsr64q64xzRYoFNuh+oRA88ebn2zUNrKwRrN62Z33z EKlEIEGaTwtAhm8tv5Ab6DsnPWiNMQ+5XNkfUywAEthAJfbPMbCTvNXa6OoJfAdO V6AD -----END CERTIFICATE-----Generated at Sun Apr 6 06:32:32 2025 by rpki-client