$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa File: 5D5E547669CE11EF88C50C0AC4F9AE02.roa (raw, json) Hash identifier: Tt3SDRIMSDdMQtIoDUGHAFxU4WWp6s+/JSa49IqDv1E= Subject key identifier: F6:E9:1C:FC:11:72:D4:8C:23:1F:71:A5:D0:0B:98:D5:22:D6:8C:D7 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 067D Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa Signing time: Tue 03 Sep 2024 08:27:32 +0000 ROA not before: Tue 03 Sep 2024 08:27:32 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 400619 IP address blocks: 43.229.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Sep 2024 21:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Sep 3 08:27:32 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=66d6c874-1122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:91:38:e7:12:16:4f:23:86:72:da:77:3b: 6a:c6:91:8d:83:f6:79:65:25:64:b6:7b:06:a7:c0: e2:85:07:16:b3:91:4c:e7:c6:1e:80:87:c7:92:fc: 79:97:73:3b:2b:99:a5:44:80:51:7a:8f:12:9b:40: 0a:3d:d2:00:06:c4:21:e7:31:b2:9f:54:93:dc:78: 85:bc:67:fb:f2:68:ff:16:72:74:1d:79:52:43:29: 95:d2:e8:ec:d7:0e:e4:f8:71:cd:99:82:f6:48:be: ed:b0:99:c5:49:4b:95:a1:c7:e2:01:d6:6f:5f:69: 49:1b:d4:68:27:27:c4:9c:6b:b5:a7:28:aa:57:27: 45:c1:18:25:3e:57:a6:67:a1:d2:9b:bd:ac:c4:f5: c6:3b:93:9c:03:03:bb:6d:9a:91:39:79:c0:ac:b8: 4b:75:b4:fc:18:f2:74:0f:34:98:7b:e2:bd:71:3a: 10:d3:5c:db:bd:48:54:72:7b:cd:c2:50:4d:6c:2a: 20:e0:88:7e:c2:ce:99:45:3c:61:1f:b3:65:02:4d: bf:84:3b:7e:f8:61:8c:8c:d0:f0:3b:18:95:a7:25: b0:f9:3a:da:29:f2:e8:08:20:d7:6e:05:7f:e7:93: 4a:44:7b:3e:53:2c:0d:08:0c:9c:59:77:b5:c9:08: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E9:1C:FC:11:72:D4:8C:23:1F:71:A5:D0:0B:98:D5:22:D6:8C:D7 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5D5E547669CE11EF88C50C0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.153.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ef:c0:fb:f2:62:62:ac:15:b6:04:e6:51:82:6a:c2:5a:ec: d8:9a:de:98:d7:55:64:e3:8c:00:fa:7d:93:82:63:8c:bf:d4: 34:2e:a8:cf:d2:68:02:76:bf:0b:6e:64:5f:d0:b6:6c:68:2c: 58:c6:cc:bc:da:6c:27:71:ac:9d:6e:61:a7:1f:44:4d:49:9d: 86:45:56:4e:f1:d9:ea:08:8c:e0:4d:a0:fd:52:5e:4c:03:81: cd:b5:55:e9:a0:b9:20:d4:20:ed:8f:e1:31:04:19:4b:a4:c5: fb:8e:2e:5a:ea:5f:3c:1b:d2:f1:9f:ab:a0:58:43:0b:b3:42: a9:e5:96:23:0c:d4:4c:a0:52:89:3e:a3:f3:03:c8:73:ea:c9: 71:fb:e4:39:3d:e3:5b:58:b2:ac:76:62:6e:e8:23:c2:aa:cc: d1:a6:d9:75:79:66:e2:28:56:56:f9:06:b2:67:ab:b1:59:40: a0:57:46:02:d2:90:eb:70:33:f8:71:44:12:2e:c3:d8:d0:c0: 25:6e:9f:f8:34:5f:2e:dd:7b:0f:63:ed:b5:4a:ff:d3:2c:de: 4c:75:74:ff:ce:30:85:cd:d0:61:e9:80:b3:48:3c:10:ea:c0: ed:6b:95:6c:d1:e3:69:20:51:97:fd:ff:13:df:4e:22:b2:5e: 4c:e6:93:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQwOTAzMDgyNzMyWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2Yzg3NC0xMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdiROOcSFk8jhnLadztqxpGNg/Z5ZSVktnsGp8DihQcWs5FM58YegIfHkvx5 l3M7K5mlRIBReo8Sm0AKPdIABsQh5zGyn1ST3HiFvGf78mj/FnJ0HXlSQymV0ujs 1w7k+HHNmYL2SL7tsJnFSUuVocfiAdZvX2lJG9RoJyfEnGu1pyiqVydFwRglPlem Z6HSm72sxPXGO5OcAwO7bZqROXnArLhLdbT8GPJ0DzSYe+K9cToQ01zbvUhUcnvN wlBNbCog4Ih+ws6ZRTxhH7NlAk2/hDt++GGMjNDwOxiVpyWw+TraKfLoCCDXbgV/ 55NKRHs+UywNCAycWXe1yQj7aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPbpHPwR ctSMIx9xpdALmNUi1ozXMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNUQ1RTU0NzY2 OUNFMTFFRjg4QzUwQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5ZkwDQYJKoZIhvcNAQELBQADggEBAAPvwPvyYmKsFbYE 5lGCasJa7Nia3pjXVWTjjAD6fZOCY4y/1DQuqM/SaAJ2vwtuZF/QtmxoLFjGzLza bCdxrJ1uYacfRE1JnYZFVk7x2eoIjOBNoP1SXkwDgc21VemguSDUIO2P4TEEGUuk xfuOLlrqXzwb0vGfq6BYQwuzQqnlliMM1EygUok+o/MDyHPqyXH75Dk941tYsqx2 Ym7oI8KqzNGm2XV5ZuIoVlb5BrJnq7FZQKBXRgLSkOtwM/hxRBIuw9jQwCVun/g0 Xy7dew9j7bVK/9Ms3kx1dP/OMIXN0GHpgLNIPBDqwO1rlWzR42kgUZf9/xPfTiKy Xkzmk4o= -----END CERTIFICATE-----Generated at Tue Sep 17 02:07:39 2024 by rpki-client on console-ams.rpki-client.org