$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa File: 5D5E547669CE11EF88C50C0AC4F9AE02.roa (raw, json) Hash identifier: fc9auTKG+hIlrFarx8Wkv+pBuhw4Xp05RpT7At8qEfk= Subject key identifier: B5:C9:47:69:EE:60:37:EA:E6:0C:4F:74:62:A3:AD:12:49:D9:78:33 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 06BB Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa Signing time: Thu 24 Oct 2024 23:43:09 +0000 ROA not before: Thu 24 Oct 2024 23:43:09 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 400619 IP address blocks: 43.229.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 24 23:43:09 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671adb8d-9662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:53:6e:fa:51:11:48:8e:8b:e8:af:34:87: db:ee:89:17:bf:cf:d2:78:32:90:6b:b1:dd:65:d3: 86:81:58:d0:a3:8f:c9:44:43:5c:47:7a:4c:e7:3d: 1b:23:73:94:0a:14:9c:ac:8f:0c:85:0e:4d:1e:4f: fa:fa:00:8f:52:65:55:f2:42:ec:9f:f7:51:3a:dd: 77:47:cd:0f:2a:9f:6d:96:a6:22:b5:9a:36:42:9b: 84:ab:bd:62:85:61:d1:14:e5:ea:88:e9:7e:db:30: c2:bb:cd:44:93:c9:7a:f4:40:09:95:29:2e:fc:7c: 05:01:31:de:e3:12:d3:b7:a1:71:93:17:1a:2d:4b: a3:e4:7c:0a:33:81:ad:74:8e:77:dd:92:b6:12:bc: 54:ed:c0:93:2a:d5:a0:af:41:bc:1a:df:7e:5f:0a: 5a:09:f0:3b:fd:01:09:ca:2e:06:0d:dd:43:d6:5f: 77:88:62:09:ab:e6:7d:7a:3a:af:20:c0:9a:ba:d9: da:67:b4:96:63:e4:d3:74:ce:e7:9e:1a:ca:9a:a0: 64:ff:dd:4f:7a:7f:75:65:3e:19:a3:33:51:71:c4: ec:ba:5d:b8:46:93:81:91:0c:40:42:19:64:15:35: b8:fa:98:ab:28:78:df:fa:4f:c1:3b:36:30:7f:7f: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C9:47:69:EE:60:37:EA:E6:0C:4F:74:62:A3:AD:12:49:D9:78:33 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.153.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d6:e5:a2:d5:db:9a:17:b1:65:8b:98:92:60:a7:7c:5d:0d: e7:f9:c5:fd:b1:dc:f4:39:fd:dc:05:55:57:63:6c:93:d8:93: ae:c7:2f:9d:20:df:da:1a:14:b2:2d:63:d9:af:d2:9d:aa:80: 1e:10:74:41:76:5d:86:61:a1:68:de:d9:02:b4:fa:18:94:bc: 8b:b8:57:8a:a2:3a:c8:09:a7:fc:07:c7:21:8a:d8:46:95:4b: 91:57:00:4c:e7:28:ec:2d:a4:e2:ac:6d:e3:68:7a:3d:39:7b: 0d:de:7d:b7:8a:3b:ab:94:b2:eb:12:18:7f:b1:8f:e6:27:86: 7d:f5:17:9a:6f:9a:51:28:6e:2b:4f:76:79:f5:e1:b0:ac:53: 5a:e6:fe:79:33:17:db:b6:fc:b1:f5:9f:f6:b0:99:26:be:8a: 7e:88:93:a2:39:5f:57:e4:8c:6f:12:7a:49:ec:20:2c:3e:10: 27:9d:52:86:81:0c:ec:27:6a:bc:4e:8c:6e:8d:69:26:25:4b: f9:e9:df:d6:4f:9f:b7:63:73:46:e4:65:01:7f:d6:75:5e:cf: a8:dc:a3:05:df:6f:d8:66:3c:aa:13:0f:6a:20:74:01:aa:37: 9a:77:8f:be:19:bf:16:15:a2:76:c2:41:a8:0d:05:85:e5:d8: a4:b3:96:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQxMDI0MjM0MzA5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZGI4ZC05NjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fNTbvpREUiOi+ivNIfb7okXv8/SeDKQa7HdZdOGgVjQo4/JRENcR3pM5z0b I3OUChScrI8MhQ5NHk/6+gCPUmVV8kLsn/dROt13R80PKp9tlqYitZo2QpuEq71i hWHRFOXqiOl+2zDCu81Ek8l69EAJlSku/HwFATHe4xLTt6FxkxcaLUuj5HwKM4Gt dI533ZK2ErxU7cCTKtWgr0G8Gt9+XwpaCfA7/QEJyi4GDd1D1l93iGIJq+Z9ejqv IMCautnaZ7SWY+TTdM7nnhrKmqBk/91Pen91ZT4ZozNRccTsul24RpOBkQxAQhlk FTW4+pirKHjf+k/BOzYwf38qewIDAQABo4IClTCCApEwHQYDVR0OBBYEFLXJR2nu YDfq5gxPdGKjrRJJ2XgzMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNUQ1RTU0NzY2 OUNFMTFFRjg4QzUwQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5ZkwDQYJKoZIhvcNAQELBQADggEBACfW5aLV25oXsWWL mJJgp3xdDef5xf2x3PQ5/dwFVVdjbJPYk67HL50g39oaFLItY9mv0p2qgB4QdEF2 XYZhoWje2QK0+hiUvIu4V4qiOsgJp/wHxyGK2EaVS5FXAEznKOwtpOKsbeNoej05 ew3efbeKO6uUsusSGH+xj+Ynhn31F5pvmlEobitPdnn14bCsU1rm/nkzF9u2/LH1 n/awmSa+in6Ik6I5X1fkjG8SeknsICw+ECedUoaBDOwnarxOjG6NaSYlS/np39ZP n7djc0bkZQF/1nVez6jcowXfb9hmPKoTD2ogdAGqN5p3j74ZvxYVonbCQagNBYXl 2KSzllM= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org