$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa File: 93767630B9B511EDBBD63E47C4F9AE02.roa (raw, json) Hash identifier: bjUEpISud0lt4+eDsWf7McrjEP7fShoj4If/QIXOt2M= Subject key identifier: 6B:0D:FA:50:D9:36:A6:0F:28:A1:44:6F:1B:F8:40:90:69:8A:14:B9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 95B8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa Signing time: Wed 31 Jul 2024 15:48:54 +0000 ROA not before: Wed 31 Jul 2024 15:48:54 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137409 IP address blocks: 139.5.232.0/24 maxlen: 24 139.5.233.0/24 maxlen: 24 139.5.234.0/24 maxlen: 24 139.5.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38328 (0x95b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 31 15:48:54 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66aa5ce6-b1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:fe:3b:e4:78:b7:dd:f2:08:35:e4:42:9b: 26:42:1a:89:39:59:35:87:09:77:84:1c:1a:25:2c: df:26:e1:ec:fc:bb:fc:73:93:fb:f9:65:23:cc:76: 6b:90:07:1a:7d:b5:1d:7c:9a:9a:9a:3c:a3:6e:27: 58:d4:64:51:5d:0c:5e:a0:9e:67:59:ae:c0:16:34: 6c:5b:5f:93:a5:2a:57:cb:ea:13:83:95:d1:a2:44: 0b:e0:80:86:32:77:f1:6e:a4:14:b5:59:5e:0e:0d: 06:e9:90:4c:00:41:65:b0:41:09:8f:5a:95:08:c4: 85:26:8d:5c:4d:60:76:73:7a:f9:fb:1a:cb:07:52: 5d:9c:3f:fe:ed:35:c7:c8:3c:e5:94:9a:59:e4:0b: 5b:d3:80:4e:59:c6:f5:43:6a:83:9e:d0:ce:ff:01: 1b:6c:88:5e:53:98:a6:38:d6:c3:8f:f7:dc:fc:40: c0:15:22:7b:61:ea:3f:91:3c:ae:89:cf:4f:e0:f3: bd:36:d8:4d:b8:18:40:91:fc:22:7c:53:c4:09:32: b1:7d:e3:ff:42:f9:6d:86:67:4d:0c:56:e5:a0:c4: 82:53:c6:1d:d6:16:e6:bf:5f:01:68:4c:39:ef:fa: 1b:c5:ab:a5:7f:78:fd:68:42:6c:0d:52:c7:50:e9: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0D:FA:50:D9:36:A6:0F:28:A1:44:6F:1B:F8:40:90:69:8A:14:B9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93767630B9B511EDBBD63E47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:1d:8c:21:b2:d8:62:0e:72:e0:18:93:7d:9c:dd:e5:4e:5f: 0e:7e:0a:5d:cd:a7:b5:f2:fc:54:f1:ff:18:42:fa:97:ec:6f: a7:9e:64:40:54:ae:51:ac:ed:5f:58:75:b2:45:3c:54:ed:11: 58:94:1d:a6:4a:b7:0c:4e:8e:6b:af:4b:1e:5c:fb:8d:91:e9: f3:e2:28:c8:46:f7:ab:0e:8e:28:ac:58:19:04:5d:18:28:10: 89:1a:32:2c:0e:c1:da:16:9b:cc:c3:10:9a:7c:31:af:f8:de: 15:5e:bb:e4:9a:ae:b5:ae:b6:d9:99:93:a1:ce:e9:05:e2:34: 6b:bf:3a:6f:26:10:73:2d:1a:50:79:8c:ec:43:6e:b2:2b:c8: 9f:b7:35:16:3d:49:16:6d:6d:a9:cd:40:c3:b2:36:b0:fa:96: 0a:a1:60:35:b0:c8:e0:36:1c:c9:ca:ce:1e:39:e6:11:e1:fb: 8b:f8:f0:32:5a:3c:d6:3a:3a:27:6a:df:09:e1:1a:39:73:7e: 58:fd:52:78:96:df:d5:54:a4:d5:cc:18:16:85:88:d1:61:25: 0b:b4:af:2c:1a:6e:f8:5d:b0:2d:7e:83:52:b0:94:a0:c0:e6: 7e:24:06:7e:9f:83:6d:8c:55:b5:ab:d0:3e:b1:a8:2a:dd:ca: 19:b1:c2:b3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJW4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDczMTE1NDg1NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjZhYTVjZTYtYjFhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKo4/jvkeLfd8gg15EKbJkIaiTlZNYcJd4QcGiUs3ybh7Py7/HOT+/llI8x2 a5AHGn21HXyampo8o24nWNRkUV0MXqCeZ1muwBY0bFtfk6UqV8vqE4OV0aJEC+CA hjJ38W6kFLVZXg4NBumQTABBZbBBCY9alQjEhSaNXE1gdnN6+fsaywdSXZw//u01 x8g85ZSaWeQLW9OATlnG9UNqg57Qzv8BG2yIXlOYpjjWw4/33PxAwBUie2HqP5E8 ronPT+DzvTbYTbgYQJH8InxTxAkysX3j/0L5bYZnTQxW5aDEglPGHdYW5r9fAWhM Oe/6G8WrpX94/WhCbA1Sx1DpqkUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRrDfpQ 2TamDyihRG8b+ECQaYoUuTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzNzY3NjMw QjlCNTExRURCQkQ2M0U0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCiwXoMA0GCSqGSIb3DQEBCwUAA4IBAQB/HYwhsthiDnLg GJN9nN3lTl8Ofgpdzae18vxU8f8YQvqX7G+nnmRAVK5RrO1fWHWyRTxU7RFYlB2m SrcMTo5rr0seXPuNkenz4ijIRverDo4orFgZBF0YKBCJGjIsDsHaFpvMwxCafDGv +N4VXrvkmq61rrbZmZOhzukF4jRrvzpvJhBzLRpQeYzsQ26yK8iftzUWPUkWbW2p zUDDsjaw+pYKoWA1sMjgNhzJys4eOeYR4fuL+PAyWjzWOjonat8J4Ro5c35Y/VJ4 lt/VVKTVzBgWhYjRYSULtK8sGm74XbAtfoNSsJSgwOZ+JAZ+n4NtjFW1q9A+sagq 3coZscKz -----END CERTIFICATE-----Generated at Fri Nov 22 08:02:17 2024 by rpki-client on console-ams.rpki-client.org