$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa File: B1262C9810F811EF96FA272DC4F9AE02.roa (raw, json) Hash identifier: Xr2Z3gGybxDNnnBP0KJnMXxaraczB8aTyFg8EUHQcwg= Subject key identifier: 95:3E:D4:73:3A:11:6B:EC:13:42:D2:03:CB:F6:51:A1:8C:43:5D:B8 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 25 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa Signing time: Fri 17 May 2024 17:56:41 +0000 ROA not before: Fri 17 May 2024 17:56:41 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 151734 IP address blocks: 43.231.207.0/24 maxlen: 24 103.72.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: May 17 17:56:41 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66479a59-6b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:01:6a:17:49:69:b6:88:ba:da:34:01:8d: 5d:fb:c8:82:6d:56:e6:d9:0d:8a:3c:e0:60:55:79: f9:5a:ae:90:6f:f7:69:f4:af:cc:07:cb:fa:d0:08: 25:38:49:e9:04:6f:7e:19:9c:20:0b:7f:55:bf:b3: f7:6f:aa:2c:46:85:26:40:ff:dd:0b:ae:f7:13:9e: 2b:e5:f1:7c:33:fd:67:13:26:bf:05:be:c8:2f:2a: ce:c0:6f:2c:70:e1:b9:3f:97:d1:fd:5e:68:07:0b: c3:19:cb:ee:49:97:6a:ce:9f:6f:7b:93:78:35:68: 60:83:24:fa:bd:2d:27:a3:32:3f:ee:a1:63:6b:12: c6:d6:e6:f0:76:0a:12:2d:d1:e9:93:4a:8c:ca:ae: 8a:d7:8c:2a:74:47:4b:4d:a4:eb:cc:45:c7:06:a6: fe:5e:d6:f6:20:62:83:63:44:ae:07:ff:1a:8e:43: 5e:cf:27:e6:a9:ef:2d:3d:65:f6:b0:73:f7:d3:61: ef:52:24:47:e3:36:3c:2c:39:85:45:5c:4f:c0:fb: 42:82:3f:10:89:cc:9f:be:e1:32:74:30:0b:0b:49: 39:a4:49:1e:4f:02:5a:f9:05:d8:fd:6e:fa:8d:e9: 34:b1:65:eb:5f:fb:c7:1b:95:76:c5:c0:c3:4e:fe: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:D4:73:3A:11:6B:EC:13:42:D2:03:CB:F6:51:A1:8C:43:5D:B8 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/B1262C9810F811EF96FA272DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.207.0/24 103.72.195.0/24 Signature Algorithm: sha256WithRSAEncryption 10:35:7f:95:91:32:4e:32:ca:9a:f5:45:1f:5f:b3:8e:86:56: 7a:75:63:79:a6:50:f8:5f:72:19:44:38:96:5f:1d:a0:46:b5: 7c:49:9f:2c:a6:8d:2d:f2:c0:30:d4:b4:ed:cb:f9:d2:02:f8: 31:42:74:dc:c4:88:dc:69:42:36:8f:9b:be:f0:c5:c0:f1:b6: 40:6c:8f:33:23:22:de:01:66:bb:1c:da:54:a7:a8:ba:b3:94: 64:d6:42:27:08:7b:2a:2d:35:c7:34:5e:b3:20:b8:53:61:8e: b8:5d:31:07:3e:40:34:b5:6a:19:6b:9e:8e:81:9f:0e:cb:6e: c3:99:18:7d:c4:4e:26:d5:6e:39:97:d1:75:1d:cf:b8:4a:8f: bd:f9:69:60:4c:02:44:ef:27:f8:75:cd:60:c4:29:42:8a:fe: 4a:2c:27:de:af:0b:b6:8a:2e:11:7a:16:bd:a4:48:29:d6:1a: 77:2b:1c:84:8b:ad:ca:0e:c1:ea:6e:2f:1c:0d:32:93:4a:f7: 0a:d8:0d:f9:da:c5:55:d1:57:c4:3b:79:fd:08:d3:c0:8d:3b: 5b:d3:e0:86:a8:eb:1d:ef:e9:bb:90:88:7f:eb:70:b8:8b:3a: 54:d0:e6:70:37:8a:b2:91:c8:36:87:bd:86:39:2d:66:0a:66: d8:41:79:74 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTY0NzExMC8GA1UEBRMoQUQzNDQ1REI0MjAxMEIxMjE1QTQ5RTQyN0YxQUU3NDAw RDc4OEJGQjAeFw0yNDA1MTcxNzU2NDFaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDc5YTU5LTZiMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6EwFqF0lptoi62jQBjV37yIJtVubZDYo84GBVeflarpBv92n0r8wHy/rQCCU4 SekEb34ZnCALf1W/s/dvqixGhSZA/90LrvcTnivl8Xwz/WcTJr8FvsgvKs7Abyxw 4bk/l9H9XmgHC8MZy+5Jl2rOn297k3g1aGCDJPq9LSejMj/uoWNrEsbW5vB2ChIt 0emTSozKrorXjCp0R0tNpOvMRccGpv5e1vYgYoNjRK4H/xqOQ17PJ+ap7y09Zfaw c/fTYe9SJEfjNjwsOYVFXE/A+0KCPxCJzJ++4TJ0MAsLSTmkSR5PAlr5Bdj9bvqN 6TSxZetf+8cblXbFwMNO/qRdAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUlT7UczoR a+wTQtIDy/ZRoYxDXbgwHwYDVR0jBBgwFoAUrTRF20IBCxIVpJ5CfxrnQA14i/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NjQ3LzkwNUMxMDQ2RjM2 RjExRUU5OTcyRUI3OUM0RjlBRTAyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclRSRjIwSUJDeElWcEo1Q2Z4cm5RQTE0aV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9CMTI2MkM5ODEw RjgxMUVGOTZGQTI3MkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEACvnzwMEAGdIwzANBgkqhkiG9w0BAQsFAAOCAQEAEDV/lZEy TjLKmvVFH1+zjoZWenVjeaZQ+F9yGUQ4ll8doEa1fEmfLKaNLfLAMNS07cv50gL4 MUJ03MSI3GlCNo+bvvDFwPG2QGyPMyMi3gFmuxzaVKeourOUZNZCJwh7Ki01xzRe syC4U2GOuF0xBz5ANLVqGWuejoGfDstuw5kYfcROJtVuOZfRdR3PuEqPvflpYEwC RO8n+HXNYMQpQor+Siwn3q8LtoouEXoWvaRIKdYadyschIutyg7B6m4vHA0yk0r3 CtgN+drFVdFXxDt5/QjTwI07W9PghqjrHe/pu5CIf+twuIs6VNDmcDeKspHINoe9 hjktZgpm2EF5dA== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:27 2024 by rpki-client on console-fra.rpki-client.org