$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa File: B43DA4A87A0511EFBB046B51C4F9AE02.roa (raw, json) Hash identifier: uyyP5h+kPRaV2Sm/G8u1e0ho1ILi36twOY4MuidYg80= Subject key identifier: 6C:CD:15:78:2B:A9:81:8F:8E:81:25:80:33:22:62:32:F2:D3:FE:E8 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 06AE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa Signing time: Thu 24 Oct 2024 23:42:55 +0000 ROA not before: Thu 24 Oct 2024 23:42:55 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 137451 IP address blocks: 43.252.209.0/24 maxlen: 24 43.252.210.0/24 maxlen: 24 103.228.64.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.1.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 150.107.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 24 23:42:55 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671adb7f-4081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:a0:85:38:9c:87:66:5f:39:a4:82:cf:62: 5c:cc:25:6f:f1:32:61:cd:f5:a2:10:34:56:ac:a0: e4:da:bb:51:22:69:fa:96:1e:04:12:f6:39:0a:e6: 0f:97:55:af:03:b5:10:7d:6b:82:bd:1a:18:68:06: 92:b9:0b:8b:1f:b5:34:96:a0:31:c9:e4:d5:d7:ca: 0e:8a:66:e8:c7:b4:9d:c3:d9:60:46:7a:05:6e:66: 08:fb:39:08:83:c4:e9:b8:9d:6a:f7:d1:a3:f7:ab: 9b:2a:fa:3e:d2:5c:f1:5a:20:0b:cb:9a:95:e3:46: 8f:45:f7:29:d8:97:dd:ad:62:33:0a:0d:af:80:f6: ac:48:21:f6:1d:ce:6d:71:8f:c7:59:2b:e2:bd:2c: 66:a2:01:e6:e7:bc:37:31:59:9f:fd:7c:88:67:07: 01:50:f9:a2:71:7c:01:0e:ac:0f:4c:d3:21:93:86: c6:ac:ad:97:fa:b9:72:e4:58:11:03:e5:95:85:a1: 7b:18:f6:85:9c:f9:00:5f:07:d3:63:26:b5:c0:a3: 47:a8:35:36:c9:56:56:d1:1f:c8:75:a4:0a:da:57: 59:bb:51:81:22:c4:01:5f:e2:33:b5:16:b7:67:df: 60:cc:2b:78:a1:63:34:81:78:80:8f:18:48:88:a7: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CD:15:78:2B:A9:81:8F:8E:81:25:80:33:22:62:32:F2:D3:FE:E8 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/B43DA4A87A0511EFBB046B51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.209.0-43.252.210.255 103.228.64.0/24 103.234.54.0/24 150.107.1.0-150.107.3.255 Signature Algorithm: sha256WithRSAEncryption 37:a2:d9:33:55:7b:5a:f3:f5:6d:6a:c6:8b:04:d6:cf:ab:f5: 26:66:21:34:80:f6:6f:9e:59:08:4f:53:dd:78:0e:03:5d:ec: 7d:ba:25:2a:ef:94:bf:21:f6:7c:a3:ad:aa:22:42:47:3f:9f: 2f:42:92:04:03:51:b8:5b:e2:65:36:cd:c8:1e:4c:ab:fd:4d: a0:18:21:ea:9c:af:08:45:0b:d4:da:61:2a:90:3c:a4:c9:0f: 5a:8a:e5:e5:01:79:8a:79:1b:22:b9:e2:d0:66:18:87:91:b1: f6:a7:7a:45:42:98:dc:34:fb:d9:2d:c7:73:c6:31:84:2e:83: 18:d6:01:55:b9:0b:54:86:4b:95:91:9d:6f:60:53:fd:53:04: 78:0f:50:c3:6e:1d:cf:aa:2e:9c:15:dc:89:1a:6c:99:2e:90: 43:3f:53:ba:36:70:40:3a:fe:c9:42:33:e9:88:38:dc:bb:d8: 06:09:a1:f7:f8:13:54:5d:b0:c0:28:16:21:e9:5e:de:cc:01: 3a:6c:20:dd:38:29:41:58:bb:9d:af:32:ed:e5:b2:c8:38:57: 27:64:83:42:a8:70:3f:48:b7:ea:40:29:ab:05:85:96:ec:e6: fa:74:2b:89:c4:14:69:f2:c2:4f:1a:7f:ad:1d:41:e4:80:f0: 77:31:c2:e5 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQxMDI0MjM0MjU1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZGI3Zi00MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbughTich2ZfOaSCz2JczCVv8TJhzfWiEDRWrKDk2rtRImn6lh4EEvY5CuYP l1WvA7UQfWuCvRoYaAaSuQuLH7U0lqAxyeTV18oOimbox7Sdw9lgRnoFbmYI+zkI g8TpuJ1q99Gj96ubKvo+0lzxWiALy5qV40aPRfcp2JfdrWIzCg2vgPasSCH2Hc5t cY/HWSvivSxmogHm57w3MVmf/XyIZwcBUPmicXwBDqwPTNMhk4bGrK2X+rly5FgR A+WVhaF7GPaFnPkAXwfTYya1wKNHqDU2yVZW0R/IdaQK2ldZu1GBIsQBX+IztRa3 Z99gzCt4oWM0gXiAjxhIiKe6vQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFGzNFXgr qYGPjoElgDMiYjLy0/7oMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQjQzREE0QTg3 QTA1MTFFRkJCMDQ2QjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEACv80QMEACv80gMEAGfkQAMEAGfqNjAMAwQAlmsBAwQC lmsAMA0GCSqGSIb3DQEBCwUAA4IBAQA3otkzVXta8/VtasaLBNbPq/UmZiE0gPZv nlkIT1PdeA4DXex9uiUq75S/IfZ8o62qIkJHP58vQpIEA1G4W+JlNs3IHkyr/U2g GCHqnK8IRQvU2mEqkDykyQ9aiuXlAXmKeRsiueLQZhiHkbH2p3pFQpjcNPvZLcdz xjGELoMY1gFVuQtUhkuVkZ1vYFP9UwR4D1DDbh3Pqi6cFdyJGmyZLpBDP1O6NnBA Ov7JQjPpiDjcu9gGCaH3+BNUXbDAKBYh6V7ezAE6bCDdOClBWLudrzLt5bLIOFcn ZINCqHA/SLfqQCmrBYWW7Ob6dCuJxBRp8sJPGn+tHUHkgPB3McLl -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:18 2024 by rpki-client on console-fra.rpki-client.org