$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa File: EED0B20C82EB11EEBE17CF64C4F9AE02.roa (raw, json) Hash identifier: SwBo+OcsaURt95JqH6PW/tQ/o8ENThL7XYVsUvLLJ9Y= Subject key identifier: 40:40:7E:AA:84:B2:0B:18:96:C6:99:64:42:47:05:6C:58:54:6E:C0 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0435 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa Signing time: Thu 11 Jan 2024 01:43:21 +0000 ROA not before: Thu 11 Jan 2024 01:43:21 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9009 IP address blocks: 43.226.228.0/24 maxlen: 24 43.226.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 11 01:43:21 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=659f47b8-f6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:3d:35:b6:cc:0c:fe:59:63:d7:20:c4:97: 9e:61:3a:35:67:02:bb:de:ad:2c:6d:30:50:f3:fa: 02:9d:86:0d:34:fd:16:5a:6d:f7:58:83:53:b9:75: 76:99:b9:b8:1a:d1:b8:87:ac:1b:df:7a:6c:b7:a4: 31:1b:c0:74:1d:31:a0:b8:b9:f8:56:3b:34:9c:b9: 9c:c7:ce:c8:cd:b6:5e:00:be:32:05:2c:4c:16:88: 95:4e:77:50:de:75:95:c0:ba:65:f4:0e:39:6c:04: 00:5c:dd:7a:0d:6a:4b:78:53:67:84:9a:4f:4f:22: 53:13:b7:4b:ca:ee:00:1e:1d:25:3d:eb:ea:5e:f1: 99:91:2f:da:48:0a:ae:1c:0e:71:1e:35:5e:90:49: 5e:72:f8:3d:a2:81:da:d5:13:18:08:00:7e:3e:e9: 2f:72:8f:3a:4e:70:a8:8c:fd:87:74:fd:0f:53:a4: 8b:d3:45:7b:1f:3e:56:d2:57:05:93:f1:c2:86:b5: b2:55:7e:9b:cd:2d:45:62:b8:69:39:5b:b8:3c:ca: 74:fd:a2:c0:a3:2b:f6:31:bd:d5:a5:c4:39:dc:3b: 8b:4f:19:ab:83:3b:a9:25:91:07:28:fb:83:16:d8: d2:ef:81:e6:30:4d:b1:a1:9b:5d:d1:67:b8:09:a0: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:7E:AA:84:B2:0B:18:96:C6:99:64:42:47:05:6C:58:54:6E:C0 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/EED0B20C82EB11EEBE17CF64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.228.0/24 43.226.230.0/24 Signature Algorithm: sha256WithRSAEncryption 86:84:f1:a8:a9:5d:95:49:a1:b4:50:38:31:f9:bf:07:65:49: 8f:4b:ed:e8:73:74:f5:c5:12:c9:b2:55:8c:01:e1:d0:46:ef: c8:48:7d:a1:ea:28:db:0a:37:8b:67:40:85:78:58:a3:7c:d7: f6:c6:1d:7c:9c:20:64:ce:8a:89:02:20:61:69:b6:e7:8d:30: 9b:c7:79:2b:88:4e:d3:44:b4:ea:da:6f:93:da:fa:de:89:07: c7:ec:c3:bc:c1:54:33:b7:b5:d1:9c:d7:72:9e:55:14:80:0b: 9c:4e:9d:b9:66:10:24:6a:69:dd:86:3a:95:2c:6a:a1:18:e4: 47:70:df:43:aa:d6:94:55:2a:11:72:f2:cc:41:47:64:00:91: 41:86:8c:dd:37:9e:3a:cc:c0:dd:0f:6a:f4:46:04:ae:1b:a4: 53:ee:b7:77:7a:7b:c2:6f:ed:c2:0f:e4:bc:94:35:dd:3e:4a: 75:2c:f2:d5:af:ed:ce:10:a1:66:af:16:fb:eb:ee:d3:68:a8: d3:1b:c3:f2:b6:61:9a:23:87:5e:3d:e7:d6:a8:cf:35:de:b0: b2:27:67:4c:8b:f2:75:cb:4a:08:f6:54:6b:e8:db:df:06:6a: b9:24:f9:7e:cd:81:fb:39:1a:b7:76:42:5e:ff:2f:c1:5f:e9: d0:7b:62:f0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjQwMTExMDE0MzIxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlmNDdiOC1mNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pk9NbbMDP5ZY9cgxJeeYTo1ZwK73q0sbTBQ8/oCnYYNNP0WWm33WINTuXV2 mbm4GtG4h6wb33pst6QxG8B0HTGguLn4Vjs0nLmcx87IzbZeAL4yBSxMFoiVTndQ 3nWVwLpl9A45bAQAXN16DWpLeFNnhJpPTyJTE7dLyu4AHh0lPevqXvGZkS/aSAqu HA5xHjVekElecvg9ooHa1RMYCAB+Pukvco86TnCojP2HdP0PU6SL00V7Hz5W0lcF k/HChrWyVX6bzS1FYrhpOVu4PMp0/aLAoyv2Mb3VpcQ53DuLTxmrgzupJZEHKPuD FtjS74HmME2xoZtd0We4CaCELQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEBAfqqE sgsYlsaZZEJHBWxYVG7AMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvRUVEMEIyMEM4 MkVCMTFFRUJFMTdDRjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4uQDBAAr4uYwDQYJKoZIhvcNAQELBQADggEBAIaE8aip XZVJobRQODH5vwdlSY9L7ehzdPXFEsmyVYwB4dBG78hIfaHqKNsKN4tnQIV4WKN8 1/bGHXycIGTOiokCIGFptueNMJvHeSuITtNEtOrab5Pa+t6JB8fsw7zBVDO3tdGc 13KeVRSAC5xOnblmECRqad2GOpUsaqEY5Edw30Oq1pRVKhFy8sxBR2QAkUGGjN03 njrMwN0PavRGBK4bpFPut3d6e8Jv7cIP5LyUNd0+SnUs8tWv7c4QoWavFvvr7tNo qNMbw/K2YZojh14959aozzXesLInZ0yL8nXLSgj2VGvo298Garkk+X7Ngfs5Grd2 Ql7/L8Ff6dB7YvA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:49 2024 by rpki-client on console-ams.rpki-client.org