$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa File: 84DBC93004CF11E9BA917C34C4F9AE02.roa (raw, json) Hash identifier: zyMk6AWyE6lO87mAudHQsc/HNsX71NVjiloWRnQYhfA= Subject key identifier: 8D:A8:A9:E1:AA:4F:4F:80:7A:E2:01:81:AA:2E:D2:55:40:FA:7A:18 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1E13 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa Signing time: Fri 20 Sep 2024 16:34:38 +0000 ROA not before: Fri 20 Sep 2024 16:34:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134763 IP address blocks: 121.12.104.0/21 maxlen: 21 121.12.112.0/20 maxlen: 20 121.12.168.0/21 maxlen: 21 121.14.128.0/21 maxlen: 21 121.14.136.0/22 maxlen: 22 121.14.140.0/22 maxlen: 22 121.14.144.0/22 maxlen: 22 121.14.148.0/22 maxlen: 22 121.14.152.0/21 maxlen: 21 218.16.117.0/24 maxlen: 24 218.16.118.0/23 maxlen: 23 218.16.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7699 (0x1e13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 20 16:34:38 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eda41e-8340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:9b:47:42:36:9a:f2:fc:ee:1b:61:0d:d8: 86:8b:4b:24:54:4a:d6:4a:58:f8:04:c0:d9:75:a5: b5:7a:d3:d1:f1:80:f5:c1:bd:7e:27:13:18:c6:1c: df:28:29:e5:6b:2e:f8:1e:eb:d2:e1:be:db:32:3c: 03:4d:9a:33:3d:1b:58:60:62:02:59:1c:e1:f3:e0: 0c:01:da:4e:2e:7a:06:08:34:d5:2d:05:fa:7d:76: ac:bc:d1:1e:0a:d3:9a:e3:ba:ee:0f:29:03:b8:b5: 3d:a7:b2:c2:17:61:c0:a4:d9:af:c6:5a:31:e2:09: a6:72:85:2c:8a:c4:1d:10:44:6b:66:1e:46:a1:49: e2:ec:0a:7b:fe:1d:e2:b4:16:db:8b:ea:65:9a:67: 0b:c6:43:eb:35:13:39:53:91:b5:d5:08:53:ec:b6: c5:25:16:5e:43:5f:d8:82:40:c3:f1:28:63:c6:52: e5:75:b8:55:31:6d:51:5a:ad:67:e2:a2:e2:29:fc: 4d:67:bc:d9:2d:71:a7:80:79:cb:1e:88:40:12:fd: 2e:85:81:78:d5:db:d0:2f:08:9b:2b:05:df:04:c0: c9:77:8d:90:c2:f8:c3:20:d7:df:96:81:63:95:37: 29:5f:ba:6c:c8:9a:5a:cf:f4:7f:32:f5:a8:d6:6d: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A8:A9:E1:AA:4F:4F:80:7A:E2:01:81:AA:2E:D2:55:40:FA:7A:18 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.12.104.0-121.12.127.255 121.12.168.0/21 121.14.128.0/19 218.16.117.0-218.16.127.255 Signature Algorithm: sha256WithRSAEncryption 31:26:6f:29:1c:b2:cd:f2:ed:35:eb:44:68:9b:13:7f:ea:39: a9:91:83:34:38:56:16:02:51:b2:2b:e2:97:d5:37:f2:66:70: ce:ca:25:97:27:43:00:78:82:c7:a9:97:0c:b4:93:19:34:29: 22:4d:ef:05:6c:6a:7b:fc:3a:52:33:19:03:99:77:88:94:9b: 81:9d:cf:5a:fa:20:f0:9d:1e:74:0e:cb:5e:8b:7c:ef:15:32: 8d:63:11:2f:07:27:25:45:80:cd:08:91:8f:e1:92:80:fc:ea: 5c:eb:4b:90:dd:05:4f:5a:8d:ba:a1:ea:13:f0:4c:04:6a:a2: 1f:45:b0:6f:b7:6c:0d:67:08:ea:9a:de:13:86:ac:ec:20:7e: b7:1e:4f:8b:ea:b2:00:57:1a:5e:33:4c:07:05:02:73:75:b2: 83:16:76:ab:da:26:09:63:b8:ba:e2:98:f7:eb:71:66:81:d8: 75:ab:18:0b:50:da:52:0f:71:54:8c:9a:a2:9a:76:fd:88:c9: 2e:4e:38:0c:66:88:6f:d5:ac:64:70:b7:7c:dc:bc:64:98:bf: 91:82:fa:60:2f:24:a1:37:41:f0:61:26:17:cb:78:20:71:98: cf:9c:37:f0:7b:78:75:1e:a9:62:67:1f:88:e7:70:f6:0b:22: ab:d1:40:86 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICHhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwOTIwMTYzNDM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkYTQxZS04MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrybR0I2mvL87hthDdiGi0skVErWSlj4BMDZdaW1etPR8YD1wb1+JxMYxhzf KCnlay74HuvS4b7bMjwDTZozPRtYYGICWRzh8+AMAdpOLnoGCDTVLQX6fXasvNEe CtOa47ruDykDuLU9p7LCF2HApNmvxlox4gmmcoUsisQdEERrZh5GoUni7Ap7/h3i tBbbi+plmmcLxkPrNRM5U5G11QhT7LbFJRZeQ1/YgkDD8ShjxlLldbhVMW1RWq1n 4qLiKfxNZ7zZLXGngHnLHohAEv0uhYF41dvQLwibKwXfBMDJd42QwvjDINffloFj lTcpX7psyJpaz/R/MvWo1m1X1QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFI2oqeGq T0+AeuIBgaou0lVA+noYMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODREQkM5MzAw NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEA3kMaAMEB3kMAAMEA3kMqAMEBXkOgDAMAwQA2hB1AwQH 2hAAMA0GCSqGSIb3DQEBCwUAA4IBAQAxJm8pHLLN8u0160RomxN/6jmpkYM0OFYW AlGyK+KX1TfyZnDOyiWXJ0MAeILHqZcMtJMZNCkiTe8FbGp7/DpSMxkDmXeIlJuB nc9a+iDwnR50Dstei3zvFTKNYxEvByclRYDNCJGP4ZKA/Opc60uQ3QVPWo26oeoT 8EwEaqIfRbBvt2wNZwjqmt4ThqzsIH63Hk+L6rIAVxpeM0wHBQJzdbKDFnar2iYJ Y7i64pj363Fmgdh1qxgLUNpSD3FUjJqimnb9iMkuTjgMZohv1axkcLd83LxkmL+R gvpgLyShN0HwYSYXy3ggcZjPnDfwe3h1HqliZx+I53D2CyKr0UCG -----END CERTIFICATE-----Generated at Fri Nov 22 09:41:15 2024 by rpki-client on console-ams.rpki-client.org