$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa File: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (raw, json) Hash identifier: d9qQUBDsbl/bpQcWnxsmBar5JCxzrVxivU6fh3fVZNI= Subject key identifier: D7:E0:6C:5D:54:E4:CF:B5:D5:27:02:A9:C7:D8:A2:F8:A8:F2:79:39 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0AFD Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa Signing time: Tue 26 Sep 2023 19:17:17 +0000 ROA not before: Tue 26 Sep 2023 19:17:17 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 132580 IP address blocks: 43.228.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Sep 26 19:17:17 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65132e3c-1d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:cd:47:0d:59:c2:29:50:89:84:c4:d6:3c: dd:be:7b:72:ef:c8:86:3a:c8:12:b7:d8:5f:32:69: 1f:47:4b:e2:97:e6:3c:6b:42:61:f7:b2:b0:a4:d3: 51:da:e3:af:fb:42:dc:99:8d:0d:62:e3:81:1e:7a: 7c:b3:c1:e7:34:a6:4a:c4:44:82:cf:33:2e:71:83: 87:52:43:e3:32:0c:4c:1f:3a:78:b5:fd:2e:9e:9b: 2f:09:6f:48:29:3e:c2:2a:37:a2:cc:ff:d0:2b:93: b9:08:36:19:3c:74:fa:ea:92:25:a7:f9:f1:92:60: eb:90:35:31:eb:92:aa:00:98:b5:bb:60:ea:17:b4: 55:78:b4:3a:96:8e:85:37:8d:5e:51:5d:54:93:b3: e9:82:f7:70:b1:55:f4:41:d6:3a:87:2e:a0:6c:d8: 67:64:cc:61:1f:8e:0d:d3:40:33:41:d1:99:45:99: 46:16:59:5b:f2:32:ca:de:14:b0:7e:4d:d7:c2:56: eb:4b:90:5f:86:48:2f:f7:a6:bd:9c:66:e9:19:64: 7c:a9:93:fc:4f:1c:09:da:70:10:f0:a7:a5:d7:a0: f6:b5:d6:d5:25:f2:80:48:fc:68:3e:b0:f3:a6:38: 63:7a:73:7b:96:36:b0:a7:5f:f9:c6:f2:99:50:2f: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E0:6C:5D:54:E4:CF:B5:D5:27:02:A9:C7:D8:A2:F8:A8:F2:79:39 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.211.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:49:b6:5f:14:67:56:43:04:5d:f2:63:92:96:05:fd:0f:dc: fd:3c:b3:1f:34:22:16:a0:61:fa:41:34:c4:9e:a9:eb:41:b2: 92:ea:74:f4:ca:a3:92:20:be:d8:33:d9:1f:47:72:f3:4b:9c: 2b:ae:ce:96:60:1e:a2:7e:1e:9a:8b:0d:ae:37:45:bc:8e:b4: 56:24:9f:cd:46:9e:81:f5:ee:23:f7:9f:7b:b4:54:3c:ae:75: e2:28:fa:d0:24:8e:c7:92:1a:f3:e8:31:8d:62:77:91:a2:21: dd:ab:52:c3:c8:09:54:9d:2c:25:96:0c:88:c1:66:a2:89:62: 92:28:1a:5d:21:28:f3:6c:ec:27:0c:96:70:38:99:13:9b:bf: cf:4a:92:ce:d5:4c:e1:15:af:fc:e5:3b:30:a1:ed:7c:ca:53: c7:b0:bd:f3:cb:f6:6c:f2:f3:d5:2e:86:58:92:00:04:30:89: 42:83:b5:92:03:92:a9:69:68:9b:d4:74:10:58:d9:ce:7c:27: 65:7a:53:a8:69:e0:e3:bb:16:ad:7d:74:a9:90:4a:70:d6:47: 29:86:cc:4b:a1:d9:18:fd:e4:81:88:ee:95:83:5b:6d:51:e9: f2:de:2b:f2:25:3b:92:89:15:81:dd:b9:c0:31:86:81:0d:97: a7:21:65:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjMwOTI2MTkxNzE3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzMmUzYy0xZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoObNRw1ZwilQiYTE1jzdvnty78iGOsgSt9hfMmkfR0vil+Y8a0Jh97KwpNNR 2uOv+0LcmY0NYuOBHnp8s8HnNKZKxESCzzMucYOHUkPjMgxMHzp4tf0unpsvCW9I KT7CKjeizP/QK5O5CDYZPHT66pIlp/nxkmDrkDUx65KqAJi1u2DqF7RVeLQ6lo6F N41eUV1Uk7PpgvdwsVX0QdY6hy6gbNhnZMxhH44N00AzQdGZRZlGFllb8jLK3hSw fk3XwlbrS5Bfhkgv96a9nGbpGWR8qZP8TxwJ2nAQ8Kel16D2tdbVJfKASPxoPrDz pjhjenN7ljawp1/5xvKZUC9D9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNfgbF1U 5M+11ScCqcfYovio8nk5MB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDOTIvMEY0RDdCNDYwOUQ4MTFFQTlGRThEQjFFQzRGOUFFMDIvQ0NFNUJBQUEw OUQ5MTFFQTgwRTU2RTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5NMwDQYJKoZIhvcNAQELBQADggEBAG5Jtl8UZ1ZDBF3y Y5KWBf0P3P08sx80IhagYfpBNMSeqetBspLqdPTKo5Igvtgz2R9HcvNLnCuuzpZg HqJ+HpqLDa43RbyOtFYkn81GnoH17iP3n3u0VDyudeIo+tAkjseSGvPoMY1id5Gi Id2rUsPICVSdLCWWDIjBZqKJYpIoGl0hKPNs7CcMlnA4mRObv89Kks7VTOEVr/zl OzCh7XzKU8ewvfPL9mzy89UuhliSAAQwiUKDtZIDkqlpaJvUdBBY2c58J2V6U6hp 4OO7Fq19dKmQSnDWRymGzEuh2Rj95IGI7pWDW21R6fLeK/IlO5KJFYHducAxhoEN l6chZcI= -----END CERTIFICATE-----Generated at Fri May 31 22:13:06 2024 by rpki-client on console-fra.rpki-client.org