$ rpki-client -vvf rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa File: 55EF0CDEBDC911E7BBC5D915C4F9AE02.roa (raw, json) Hash identifier: 36rWuz1KoJD+WddPadZMXdsRXp4o5nIP1L/JNSkmPDk= Subject key identifier: B8:A9:1E:80:40:1E:03:5F:8C:75:E7:16:DE:A8:D8:B1:ED:5A:4E:0F Certificate issuer: /CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3 Certificate serial: 1769 Authority key identifier: 6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa Signing time: Wed 02 Oct 2024 16:54:48 +0000 ROA not before: Wed 02 Oct 2024 16:54:48 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 49544 IP address blocks: 45.124.132.0/22 maxlen: 22 2402:b180:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5993 (0x1769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911344E/serialNumber=6C563ADA47CAC374D313199F7DB963FB0A899DB3 Validity Not Before: Oct 2 16:54:48 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66fd7ad8-028d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:59:f9:c0:05:83:c1:d3:75:c9:5a:78:d7:77: c2:55:e4:03:dd:63:99:45:d5:70:dc:06:98:d5:8f: 3d:76:34:f5:9d:a7:70:19:7e:24:6f:66:73:bb:f0: 0e:13:a5:06:e8:2c:40:bb:50:9a:3a:ca:09:bf:b1: ef:e9:95:95:22:24:ea:b0:ba:2b:b5:6b:cb:be:80: 4a:d5:5d:24:35:82:f8:53:bf:58:e5:b0:82:a5:ba: 66:fb:19:4c:d3:32:76:1d:de:8e:69:fa:d7:a3:b7: bc:96:28:45:bb:21:18:b1:15:c4:cc:7c:43:b5:2c: 5a:9e:14:80:bb:6a:aa:c3:2d:6e:2a:50:3e:7e:74: 76:b4:28:c1:4b:87:14:01:c6:ed:ef:46:bd:f1:24: b1:21:59:b5:17:d6:04:f2:b3:3c:60:a9:3d:89:61: ee:80:7d:95:1a:67:cb:a8:c4:a0:23:5e:22:57:eb: 46:ed:4b:dd:26:19:d5:86:c9:7d:fc:0c:c5:c2:93: bb:fa:99:6f:8d:cd:39:7d:5e:56:b2:ca:16:56:35: c6:1b:02:d1:c5:a2:d7:26:09:08:65:9b:4e:1d:cc: 1c:6a:d5:1d:5a:6a:c6:7c:66:c3:a9:dd:46:48:e0: cc:14:78:58:4d:b7:96:d3:64:de:01:6c:f6:0e:66: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A9:1E:80:40:1E:03:5F:8C:75:E7:16:DE:A8:D8:B1:ED:5A:4E:0F X509v3 Authority Key Identifier: keyid:6C:56:3A:DA:47:CA:C3:74:D3:13:19:9F:7D:B9:63:FB:0A:89:9D:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/bFY62kfKw3TTExmffblj-wqJnbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFY62kfKw3TTExmffblj-wqJnbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911344E/D01A7572BDC711E79BD12912C4F9AE02/55EF0CDEBDC911E7BBC5D915C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.132.0/22 IPv6: 2402:b180:9000::/36 Signature Algorithm: sha256WithRSAEncryption 3f:55:3f:d6:03:a8:7a:dd:d4:ea:b6:8e:d1:08:9f:52:39:34: 1b:ee:6e:62:00:57:6b:8b:05:61:de:cd:1c:74:b1:47:72:ee: 3b:66:fe:27:56:69:30:33:4b:f6:72:71:80:9e:72:d3:17:b7: aa:99:7b:9d:75:ff:f5:43:ef:46:33:86:e3:4c:a9:b5:20:14: aa:bf:77:01:cd:2f:09:89:7c:af:ad:2e:4d:60:da:a9:ef:de: 52:86:d3:56:c3:5a:99:6a:15:fc:cb:5c:35:86:a0:4f:e9:0d: d9:3e:25:7e:43:57:dd:9b:95:fc:79:13:45:1c:f2:7e:64:5a: 47:21:d7:c1:66:15:d0:84:cc:77:79:70:2e:eb:8e:ba:a0:f9: bd:d1:e0:f3:2d:9e:77:6f:0e:d1:22:73:38:25:5b:f0:5b:32: 85:18:69:d3:67:c4:c6:44:78:4a:22:c5:66:e5:ea:99:3b:93: 04:7c:dd:43:ca:27:9d:7d:4a:c6:bf:61:3b:12:02:bc:93:43: 6d:f0:0e:6d:1e:55:1b:79:19:38:f5:74:70:06:82:06:1a:a0: 77:81:02:4a:75:e0:6b:f6:06:69:ea:4d:d0:22:9d:37:90:63: 96:c4:aa:23:a7:4d:88:f8:e2:05:93:a8:10:f9:96:b2:24:53: 91:a5:2e:aa -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICF2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM0NEUxMTAvBgNVBAUTKDZDNTYzQURBNDdDQUMzNzREMzEzMTk5RjdEQjk2M0ZC MEE4OTlEQjMwHhcNMjQxMDAyMTY1NDQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkN2FkOC0wMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ln5wAWDwdN1yVp413fCVeQD3WOZRdVw3AaY1Y89djT1nadwGX4kb2Zzu/AO E6UG6CxAu1CaOsoJv7Hv6ZWVIiTqsLortWvLvoBK1V0kNYL4U79Y5bCCpbpm+xlM 0zJ2Hd6OafrXo7e8lihFuyEYsRXEzHxDtSxanhSAu2qqwy1uKlA+fnR2tCjBS4cU Acbt70a98SSxIVm1F9YE8rM8YKk9iWHugH2VGmfLqMSgI14iV+tG7UvdJhnVhsl9 /AzFwpO7+plvjc05fV5WssoWVjXGGwLRxaLXJgkIZZtOHcwcatUdWmrGfGbDqd1G SODMFHhYTbeW02TeAWz2DmY06QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLipHoBA HgNfjHXnFt6o2LHtWk4PMB8GA1UdIwQYMBaAFGxWOtpHysN00xMZn325Y/sKiZ2z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ0RS9EMDFBNzU3MkJE QzcxMUU3OUJEMTI5MTJDNEY5QUUwMi9iRlk2MmtmS3czVFRFeG1mZmJsai13cUpu Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGWTYya2ZLdzNUVEV4bWZmYmxqLXdxSm5iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTM0NEUvRDAxQTc1NzJCREM3MTFFNzlCRDEyOTEyQzRGOUFFMDIvNTVFRjBDREVC REM5MTFFN0JCQzVEOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAItfIQwDgQCAAIwCAMGBCQCsYCQMA0GCSqGSIb3DQEBCwUA A4IBAQA/VT/WA6h63dTqto7RCJ9SOTQb7m5iAFdriwVh3s0cdLFHcu47Zv4nVmkw M0v2cnGAnnLTF7eqmXuddf/1Q+9GM4bjTKm1IBSqv3cBzS8JiXyvrS5NYNqp795S htNWw1qZahX8y1w1hqBP6Q3ZPiV+Q1fdm5X8eRNFHPJ+ZFpHIdfBZhXQhMx3eXAu 6466oPm90eDzLZ53bw7RInM4JVvwWzKFGGnTZ8TGRHhKIsVm5eqZO5MEfN1Dyied fUrGv2E7EgK8k0Nt8A5tHlUbeRk49XRwBoIGGqB3gQJKdeBr9gZp6k3QIp03kGOW xKojp02I+OIFk6gQ+ZayJFORpS6q -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org