$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa File: 39E76DD0589311EF88BF4665C4F9AE02.roa (raw, json) Hash identifier: PmKB7v6narbsfvRh5TaIR4bk0nlj1W0GlQb30nMXpbE= Subject key identifier: C9:59:5A:75:A6:BE:3E:AC:64:F6:3A:55:30:EA:7A:04:0B:CC:67:00 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: 04 Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa Signing time: Tue 13 Aug 2024 02:12:15 +0000 ROA not before: Tue 13 Aug 2024 02:12:15 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133952 IP address blocks: 43.230.136.0/22 maxlen: 24 103.49.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: Aug 13 02:12:15 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66bac0ff-58f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:80:ef:5a:1a:13:db:ea:38:f7:ee:4b:8b: 8e:26:85:88:75:1b:ba:bf:5d:43:27:27:da:44:0d: 0a:86:8f:df:5e:e6:36:44:e6:90:df:67:81:f9:f3: 29:26:67:69:22:8d:65:b9:04:81:f5:2b:20:3a:b0: 5b:49:e9:b0:3c:48:fc:56:9b:c5:65:eb:12:34:15: 97:80:4b:d6:a4:b1:21:a7:fa:1a:20:04:7b:81:c6: b8:1b:8b:db:a8:36:72:11:9e:72:33:e3:e5:79:e0: b1:72:7e:47:fc:7e:a3:2d:13:9c:70:db:de:a1:1d: db:33:dd:16:ff:a3:d2:3a:07:da:54:8c:b8:81:63: 2b:e1:1d:d3:24:c0:a8:18:a3:cc:d9:80:71:75:a2: af:59:3d:f8:88:93:60:e5:29:ff:4f:47:4a:1b:11: 3d:2d:9c:ff:09:ec:fb:c2:d1:c8:96:33:3a:96:73: 0d:6e:1a:b2:5d:6a:fc:45:4a:5d:cc:c0:e0:95:ca: be:09:49:a4:79:61:ca:51:7e:ff:d4:ee:24:d9:95: 85:a3:06:c0:ef:3f:6a:40:df:6c:6b:5b:34:d2:c7: d4:94:03:aa:59:28:b2:93:50:a4:30:9a:0f:3d:38: ff:0f:69:15:b1:5a:2c:a5:69:03:e7:e5:ef:37:29: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:59:5A:75:A6:BE:3E:AC:64:F6:3A:55:30:EA:7A:04:0B:CC:67:00 X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/39E76DD0589311EF88BF4665C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.136.0/22 103.49.196.0/22 Signature Algorithm: sha256WithRSAEncryption 72:94:d6:fd:88:44:51:96:c2:26:d9:01:52:82:c7:6e:87:96: 32:6e:b0:49:b6:4b:c4:97:6c:73:c7:39:b2:39:d2:32:c7:d7: c4:ce:94:70:29:83:f1:80:6d:da:43:d6:5f:69:46:3a:3e:93: 7e:76:60:1e:0c:55:c0:ae:41:86:4b:6e:93:74:90:02:f2:92: d2:62:39:ae:df:37:7b:be:1a:58:b5:7f:f6:c9:6e:a6:59:cd: 7c:eb:de:95:a0:b4:23:25:b4:a3:6b:9e:ba:fc:fd:5d:23:20: 08:ea:20:e3:ba:d1:79:fa:4a:a7:4d:fd:6b:6b:93:eb:4a:66: b6:68:44:48:75:d1:ac:72:45:87:92:0f:3c:0a:10:76:ca:79: 81:35:ab:80:74:f5:da:5a:76:63:2c:8c:d4:ff:da:37:2d:d7: f2:31:93:ea:68:b8:6d:42:af:25:80:ad:70:29:b2:89:66:9a: b0:41:21:07:52:39:f5:1a:c5:27:59:cd:51:f1:9d:b8:4f:c5: b6:0e:35:db:20:96:81:c9:1b:cf:72:72:82:18:55:f7:14:3f: 2c:b1:46:a5:ba:f1:de:74:de:fb:15:23:a9:c1:5d:b9:e3:74: 6f:2e:82:75:81:4b:9f:a2:6e:d2:7a:78:d1:4b:50:4d:3a:8d: 68:26:54:7e -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTY5QTExMC8GA1UEBRMoQUU2NThFQTM3N0VBMTE4NDBCMDhFQTZDODhEOTA5MEU4 QjZDNTIwNDAeFw0yNDA4MTMwMjEyMTVaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmFjMGZmLTU4ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2r4DvWhoT2+o49+5Li44mhYh1G7q/XUMnJ9pEDQqGj99e5jZE5pDfZ4H58ykm Z2kijWW5BIH1KyA6sFtJ6bA8SPxWm8Vl6xI0FZeAS9aksSGn+hogBHuBxrgbi9uo NnIRnnIz4+V54LFyfkf8fqMtE5xw296hHdsz3Rb/o9I6B9pUjLiBYyvhHdMkwKgY o8zZgHF1oq9ZPfiIk2DlKf9PR0obET0tnP8J7PvC0ciWMzqWcw1uGrJdavxFSl3M wOCVyr4JSaR5YcpRfv/U7iTZlYWjBsDvP2pA32xrWzTSx9SUA6pZKLKTUKQwmg89 OP8PaRWxWiylaQPn5e83KfkrAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUyVladaa+ Pqxk9jpVMOp6BAvMZwAwHwYDVR0jBBgwFoAUrmWOo3fqEYQLCOpsiNkJDotsUgQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNjlBLzhCMEU3MzgwNTg5 MjExRUY4NkIxMjU2NEM0RjlBRTAyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1Vn US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcm1XT28zZnFFWVFMQ09wc2lOa0pEb3RzVWdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi8zOUU3NkREMDU4 OTMxMUVGODhCRjQ2NjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAivmiAMEAmcxxDANBgkqhkiG9w0BAQsFAAOCAQEAcpTW/YhE UZbCJtkBUoLHboeWMm6wSbZLxJdsc8c5sjnSMsfXxM6UcCmD8YBt2kPWX2lGOj6T fnZgHgxVwK5Bhktuk3SQAvKS0mI5rt83e74aWLV/9sluplnNfOvelaC0IyW0o2ue uvz9XSMgCOog47rRefpKp039a2uT60pmtmhESHXRrHJFh5IPPAoQdsp5gTWrgHT1 2lp2YyyM1P/aNy3X8jGT6mi4bUKvJYCtcCmyiWaasEEhB1I59RrFJ1nNUfGduE/F tg412yCWgckbz3JyghhV9xQ/LLFGpbrx3nTe+xUjqcFdueN0by6CdYFLn6Ju0np4 0UtQTTqNaCZUfg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:50 2024 by rpki-client on console-ams.rpki-client.org