$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa File: 59212E58955D11EC97EC0461C4F9AE02.roa (raw, json) Hash identifier: 82bmKccqbBzTdNqrTXoGpBcJx8ypp4VeLlhE4Yo0df8= Subject key identifier: 85:8C:0D:C7:61:ED:18:B0:39:1A:12:DB:98:40:69:73:B0:09:8C:EA Certificate issuer: /CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Certificate serial: 0343 Authority key identifier: A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa Signing time: Sun 03 Nov 2024 00:34:25 +0000 ROA not before: Sun 03 Nov 2024 00:34:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 135334 IP address blocks: 103.172.214.0/23 maxlen: 23 103.172.214.0/24 maxlen: 24 103.172.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A4A1/serialNumber=A3D73A4E9F1043DE3ABF4F5ED10868AF6D335BF4 Validity Not Before: Nov 3 00:34:25 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726c510-2849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:08:2c:d1:52:84:fb:3b:51:88:c8:49:36: 34:d0:41:46:04:c4:52:44:ae:95:da:42:79:2e:d4: a1:10:c6:58:53:a6:f6:99:06:e5:f3:db:dd:84:b1: 58:49:f9:f4:61:63:ec:3a:1e:64:5d:a2:38:13:7d: dd:18:e9:bb:ed:30:62:dc:1e:34:97:a2:a8:b3:17: bc:2c:0f:eb:1e:df:27:bf:85:77:bd:fc:ff:e0:a7: aa:99:31:51:57:2a:81:2f:7a:de:ce:75:af:63:f9: 2d:09:ea:f1:62:38:65:6a:f3:5b:64:6d:ec:f1:95: 04:01:51:45:50:d5:1a:29:9f:39:14:de:22:6c:16: ba:45:b1:d3:32:27:3e:3d:7e:42:3c:4f:e7:f3:be: 71:c4:57:af:55:c1:5a:f5:66:70:cf:36:3a:50:a9: 84:fd:cb:89:5f:94:dc:65:7c:ed:db:12:ee:c5:5a: 7e:9a:74:70:8e:9a:a1:80:15:05:6e:56:aa:4b:6d: 78:11:a5:d6:36:e3:80:f1:e5:4a:94:74:8c:de:72: 84:8c:0e:a2:6f:c2:e3:54:06:8d:8e:ab:e7:79:9e: ee:23:ec:98:c0:47:e0:cf:b0:28:5a:f8:c8:88:b4: 61:dd:e5:4c:8f:19:96:68:f5:4b:e2:51:42:9b:fd: 0f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8C:0D:C7:61:ED:18:B0:39:1A:12:DB:98:40:69:73:B0:09:8C:EA X509v3 Authority Key Identifier: keyid:A3:D7:3A:4E:9F:10:43:DE:3A:BF:4F:5E:D1:08:68:AF:6D:33:5B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/o9c6Tp8QQ946v09e0Qhor20zW_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9c6Tp8QQ946v09e0Qhor20zW_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4A1/68CEC094955911EC84728736C4F9AE02/59212E58955D11EC97EC0461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.214.0/23 Signature Algorithm: sha256WithRSAEncryption ca:35:e0:c4:c6:e1:1a:24:40:96:36:c6:ed:ef:b6:e5:1a:af: 6a:8b:43:5b:ac:ab:2e:bb:59:df:63:76:40:35:78:1b:1a:b6: 0b:b9:f3:d6:23:76:50:f1:dd:bd:27:fe:ca:d8:26:c0:f2:e5: f9:32:e0:15:4a:b0:b2:28:a5:36:23:21:6c:ac:67:a1:e5:80: 95:48:1c:aa:91:2b:fc:90:d0:04:d6:49:57:bb:84:f3:2c:71: 78:60:8f:80:6f:73:7a:be:6f:63:4e:37:d9:2b:27:2b:a8:44: 01:07:8d:41:e4:0c:4b:d1:c5:ae:17:92:00:a3:21:74:26:bf: d2:b8:d8:9e:a8:98:85:d2:9e:5c:5d:c6:d9:74:56:4d:e3:1e: 14:a0:9b:9f:dc:df:80:08:62:d5:84:fe:a2:15:39:bc:3a:2d: fd:fb:2a:ee:26:81:22:29:c5:c5:4f:81:1b:c6:01:14:d5:72: 0c:18:d5:54:40:10:ec:cb:6d:f8:a1:8c:8c:8f:5e:05:e6:8b: 12:93:f0:09:67:ab:ea:91:73:4b:7a:cd:fb:b1:ad:b0:a0:bf: 25:9b:a7:2f:a6:5d:12:aa:45:71:ab:83:9d:06:f2:a9:2d:46: 11:59:4b:96:a3:f5:28:44:0f:86:f4:92:6f:71:c2:60:83:7d: 9b:f7:d2:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0QTExMTAvBgNVBAUTKEEzRDczQTRFOUYxMDQzREUzQUJGNEY1RUQxMDg2OEFG NkQzMzVCRjQwHhcNMjQxMTAzMDAzNDI1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2YzUxMC0yODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QQILNFShPs7UYjISTY00EFGBMRSRK6V2kJ5LtShEMZYU6b2mQbl89vdhLFY Sfn0YWPsOh5kXaI4E33dGOm77TBi3B40l6Kosxe8LA/rHt8nv4V3vfz/4KeqmTFR VyqBL3reznWvY/ktCerxYjhlavNbZG3s8ZUEAVFFUNUaKZ85FN4ibBa6RbHTMic+ PX5CPE/n875xxFevVcFa9WZwzzY6UKmE/cuJX5TcZXzt2xLuxVp+mnRwjpqhgBUF blaqS214EaXWNuOA8eVKlHSM3nKEjA6ib8LjVAaNjqvneZ7uI+yYwEfgz7AoWvjI iLRh3eVMjxmWaPVL4lFCm/0PXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIWMDcdh 7RiwORoS25hAaXOwCYzqMB8GA1UdIwQYMBaAFKPXOk6fEEPeOr9PXtEIaK9tM1v0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTRBMS82OENFQzA5NDk1 NTkxMUVDODQ3Mjg3MzZDNEY5QUUwMi9vOWM2VHA4UVE5NDZ2MDllMFFob3IyMHpX X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285YzZUcDhRUTk0NnYwOWUwUWhvcjIweldfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE0QTEvNjhDRUMwOTQ5NTU5MTFFQzg0NzI4NzM2QzRGOUFFMDIvNTkyMTJFNTg5 NTVEMTFFQzk3RUMwNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnrNYwDQYJKoZIhvcNAQELBQADggEBAMo14MTG4RokQJY2 xu3vtuUar2qLQ1usqy67Wd9jdkA1eBsatgu589YjdlDx3b0n/srYJsDy5fky4BVK sLIopTYjIWysZ6HlgJVIHKqRK/yQ0ATWSVe7hPMscXhgj4Bvc3q+b2NON9krJyuo RAEHjUHkDEvRxa4XkgCjIXQmv9K42J6omIXSnlxdxtl0Vk3jHhSgm5/c34AIYtWE /qIVObw6Lf37Ku4mgSIpxcVPgRvGARTVcgwY1VRAEOzLbfihjIyPXgXmixKT8Aln q+qRc0t6zfuxrbCgvyWbpy+mXRKqRXGrg50G8qktRhFZS5aj9ShED4b0km9xwmCD fZv30gY= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org