$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa File: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (raw, json) Hash identifier: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4= Subject key identifier: 62:4F:D5:BD:90:85:A0:A1:64:5F:92:31:C3:24:FA:5E:A9:9A:08:62 Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 06D1 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa Signing time: Fri 24 May 2024 23:33:07 +0000 ROA not before: Fri 24 May 2024 23:33:07 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55720 IP address blocks: 43.249.254.0/24 maxlen: 24 43.249.255.0/24 maxlen: 24 103.229.144.0/24 maxlen: 24 103.229.145.0/24 maxlen: 24 103.229.146.0/24 maxlen: 24 103.229.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: May 24 23:33:07 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=665123b2-ef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:6f:6d:82:ff:3d:cc:16:81:ab:ca:bb:a0: b8:35:18:7c:08:4c:53:aa:b0:3d:c0:7d:7d:c8:31: 72:7a:81:c4:86:2c:e8:24:4e:e8:3c:f6:a1:64:0e: 94:78:62:48:75:7a:a8:19:87:3c:ef:4c:6c:4c:7e: cb:15:6b:91:f8:44:c6:71:0b:e1:27:62:51:18:b4: 16:50:1e:59:c1:ef:25:16:8d:96:ab:d6:ac:4e:3f: 10:5b:96:73:b9:78:e2:c6:ca:3c:a2:7f:d3:be:6c: 7d:81:6d:4b:8d:a2:9c:7c:75:20:61:a6:08:a5:03: 46:fd:5d:91:89:cc:32:36:50:f1:7b:57:f2:29:5b: ee:f8:7b:51:ba:7b:a5:cc:a2:1c:b0:75:60:fe:6d: 48:a3:31:de:e5:fb:4e:bc:f8:65:56:8f:17:65:aa: cf:6d:2f:cc:54:fb:ff:91:0a:bf:4c:26:f7:22:6c: e8:c1:5a:66:43:b1:bf:63:88:85:7a:70:90:ec:37: 91:f5:f2:5c:04:43:19:d2:87:f5:ac:0d:f9:67:1a: 1f:e0:9b:9e:cb:af:b5:1e:22:19:41:c5:e2:34:a4: b7:45:db:4c:cd:a4:d9:ce:34:55:5c:d2:7b:6f:ea: f8:78:40:e1:ac:2f:18:3d:f5:60:92:a2:5e:9d:b7: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4F:D5:BD:90:85:A0:A1:64:5F:92:31:C3:24:FA:5E:A9:9A:08:62 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.254.0/23 103.229.144.0/22 Signature Algorithm: sha256WithRSAEncryption 43:81:54:4d:60:e6:d7:8d:13:8d:3a:a7:e6:ef:92:19:81:be: dd:b1:ac:c4:05:87:0b:f8:5f:95:04:a1:38:01:20:c1:e0:e5: 18:f2:c3:92:06:a1:0f:8c:01:f4:d8:c6:ea:b8:13:1a:72:dd: 95:06:21:5a:c9:b9:8f:25:b9:46:f2:41:cc:31:6f:03:7e:55: 99:52:a5:46:f2:6d:91:8b:2f:f2:3c:5e:d5:57:93:83:a4:c1: 84:af:29:35:c1:6c:38:e8:00:40:82:5c:e3:da:9f:42:f3:03: 4a:e4:9f:4b:92:a5:c9:f4:8e:ed:62:a6:ee:cb:64:b3:de:d8: e4:01:07:97:1b:90:b9:c2:ab:04:ab:49:c0:6b:1c:37:6a:c0: a8:cf:a4:b1:79:d8:be:29:e0:ed:f4:82:ae:f7:4f:65:12:4c: 79:3e:a7:05:1c:86:35:88:cc:da:e5:c5:26:e9:ee:5b:65:46: 8c:d1:11:84:2f:7d:a1:08:38:0d:a8:91:91:47:b4:54:5c:70: 30:ad:7d:be:90:c1:64:93:88:74:a6:a1:7e:07:d4:53:cb:a9: 74:05:49:16:d1:c6:14:8f:e2:3b:92:be:6b:69:db:94:3e:be: 8e:3e:97:5a:16:cb:60:ca:8f:af:9e:25:62:84:fb:03:3b:9b: 17:e3:ee:2e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjQwNTI0MjMzMzA3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUxMjNiMi1lZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQdvbYL/PcwWgavKu6C4NRh8CExTqrA9wH19yDFyeoHEhizoJE7oPPahZA6U eGJIdXqoGYc870xsTH7LFWuR+ETGcQvhJ2JRGLQWUB5Zwe8lFo2Wq9asTj8QW5Zz uXjixso8on/Tvmx9gW1LjaKcfHUgYaYIpQNG/V2RicwyNlDxe1fyKVvu+HtRunul zKIcsHVg/m1IozHe5ftOvPhlVo8XZarPbS/MVPv/kQq/TCb3ImzowVpmQ7G/Y4iF enCQ7DeR9fJcBEMZ0of1rA35Zxof4Juey6+1HiIZQcXiNKS3RdtMzaTZzjRVXNJ7 b+r4eEDhrC8YPfVgkqJenbd5qQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGJP1b2Q haChZF+SMcMk+l6pmghiMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvQkUzNUVERDgw Q0NBMTFFRjlBRURCOTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+f4DBAJn5ZAwDQYJKoZIhvcNAQELBQADggEBAEOBVE1g 5teNE406p+bvkhmBvt2xrMQFhwv4X5UEoTgBIMHg5Rjyw5IGoQ+MAfTYxuq4Expy 3ZUGIVrJuY8luUbyQcwxbwN+VZlSpUbybZGLL/I8XtVXk4OkwYSvKTXBbDjoAECC XOPan0LzA0rkn0uSpcn0ju1ipu7LZLPe2OQBB5cbkLnCqwSrScBrHDdqwKjPpLF5 2L4p4O30gq73T2USTHk+pwUchjWIzNrlxSbp7ltlRozREYQvfaEIOA2okZFHtFRc cDCtfb6QwWSTiHSmoX4H1FPLqXQFSRbRxhSP4juSvmtp25Q+vo4+l1oWy2DKj6+e JWKE+wM7mxfj7i4= -----END CERTIFICATE-----Generated at Sat Jun 1 00:32:58 2024 by rpki-client on console-fra.rpki-client.org