$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/263DB02C4BB611EE9B959267C4F9AE02.roa File: 263DB02C4BB611EE9B959267C4F9AE02.roa (raw, json) Hash identifier: RxsigwXf3vdFsbVuo92fXqXZ9sZputEMz7xQxcIfrzM= Subject key identifier: 0F:F5:5E:D9:A9:C4:BA:FC:D1:59:63:FF:FE:95:52:C9:0B:00:FA:89 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 07DD Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/263DB02C4BB611EE9B959267C4F9AE02.roa Signing time: Tue 05 Sep 2023 06:34:15 +0000 ROA not before: Tue 05 Sep 2023 06:34:15 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 138915 IP address blocks: 43.152.163.0/24 maxlen: 24 240d:c010:102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 00:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 5 06:34:15 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64f6cbe7-3b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4b:99:f4:ab:6a:83:ac:d9:a6:8f:b3:66:7b: ea:85:f2:68:4b:9a:27:dd:3d:25:0c:9a:e2:f8:e1: 75:e8:4f:d7:43:70:b7:78:a6:8a:bb:72:b9:a9:fc: cc:d0:6b:1c:1a:85:c4:ec:77:cc:2f:82:d8:6b:be: 12:57:5f:41:61:e8:ae:83:49:a8:82:80:1a:ef:c1: 23:7f:43:7f:d7:15:51:d6:5f:ed:9b:04:68:2f:86: 85:57:2f:79:7a:76:91:c5:9c:ec:52:df:ce:66:89: b2:58:da:af:20:3a:e3:ab:77:4c:4d:41:ba:02:84: 5e:24:75:f8:30:3f:fb:17:d4:85:2a:1a:95:e5:ee: 15:f7:f9:1c:7a:6d:f2:1b:29:50:1d:b7:f7:a8:53: 44:ae:e7:49:e1:1d:9e:7f:34:38:f4:e2:19:9b:0d: bc:c7:11:6e:2d:b5:3e:26:91:33:48:99:92:b1:7f: bb:90:d4:04:a7:e0:24:ee:35:e1:2e:1d:21:39:1b: 2c:d4:e3:13:5a:09:46:bb:8c:fb:f4:b6:4e:67:68: a6:91:55:cf:1a:4a:54:d1:2b:26:96:9d:36:d9:e2: 75:4f:be:23:46:f0:34:32:a5:52:c5:6e:74:31:56: 42:91:50:cd:b5:97:60:c1:c3:80:89:d7:93:ca:de: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:5E:D9:A9:C4:BA:FC:D1:59:63:FF:FE:95:52:C9:0B:00:FA:89 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/263DB02C4BB611EE9B959267C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.152.163.0/24 IPv6: 240d:c010:102::/48 Signature Algorithm: sha256WithRSAEncryption 70:23:55:b2:e6:66:a9:3d:4d:29:ca:6c:24:fc:ef:bd:ae:5b: 74:fb:15:85:37:c7:7f:f6:90:78:ff:5d:d2:6c:03:40:28:d5: 7b:68:7b:4a:e6:50:ef:2e:e0:8a:07:36:3a:57:7e:34:46:7c: ae:96:87:cd:04:de:2b:f8:ef:82:ee:18:3c:d5:7c:af:29:9d: 89:71:58:4c:21:30:e9:f2:98:1e:6c:3f:96:99:9e:b3:13:cd: 26:b6:68:05:81:e1:21:ee:cc:dd:85:bb:45:db:2d:87:1b:7d: dd:44:2e:26:1e:cc:2e:0d:0a:14:78:57:bb:4a:ea:ef:77:ac: 77:c3:56:17:6f:27:7d:0b:c1:bc:7a:76:12:6e:06:4a:ee:d3: a7:5e:7d:46:ca:31:91:a7:e5:b4:fc:fe:a0:9f:db:3d:82:67: ac:ba:79:7f:80:d0:eb:ed:90:fa:6f:51:f0:3f:4e:b1:7e:30: 36:e4:d7:a1:42:dc:38:81:5f:58:a6:d1:92:bd:85:ea:18:56: 51:f2:73:ee:0e:67:6e:c1:c4:6d:03:bc:58:b4:f8:8d:ba:02: 95:27:5a:3f:95:c4:b5:a1:d1:9c:78:e2:d2:5f:75:d7:0b:71: ed:9c:ad:2c:a3:fd:86:44:66:62:04:52:e2:5a:bc:52:3f:04: be:66:c5:58 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjMwOTA1MDYzNDE1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGY2Y2JlNy0zYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9UuZ9Ktqg6zZpo+zZnvqhfJoS5on3T0lDJri+OF16E/XQ3C3eKaKu3K5qfzM 0GscGoXE7HfML4LYa74SV19BYeiug0mogoAa78Ejf0N/1xVR1l/tmwRoL4aFVy95 enaRxZzsUt/OZomyWNqvIDrjq3dMTUG6AoReJHX4MD/7F9SFKhqV5e4V9/kcem3y GylQHbf3qFNErudJ4R2efzQ49OIZmw28xxFuLbU+JpEzSJmSsX+7kNQEp+Ak7jXh Lh0hORss1OMTWglGu4z79LZOZ2imkVXPGkpU0Ssmlp022eJ1T74jRvA0MqVSxW50 MVZCkVDNtZdgwcOAideTyt7vwQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA/1Xtmp xLr80Vlj//6VUskLAPqJMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMjYzREIwMkM0 QkI2MTFFRTlCOTU5MjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAArmKMwDwQCAAIwCQMHACQNwBABAjANBgkqhkiG9w0BAQsF AAOCAQEAcCNVsuZmqT1NKcpsJPzvva5bdPsVhTfHf/aQeP9d0mwDQCjVe2h7SuZQ 7y7gigc2Old+NEZ8rpaHzQTeK/jvgu4YPNV8rymdiXFYTCEw6fKYHmw/lpmesxPN JrZoBYHhIe7M3YW7Rdsthxt93UQuJh7MLg0KFHhXu0rq73esd8NWF28nfQvBvHp2 Em4GSu7Tp159RsoxkafltPz+oJ/bPYJnrLp5f4DQ6+2Q+m9R8D9OsX4wNuTXoULc OIFfWKbRkr2F6hhWUfJz7g5nbsHEbQO8WLT4jboClSdaP5XEtaHRnHji0l911wtx 7ZytLKP9hkRmYgRS4lq8Uj8EvmbFWA== -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org