$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa File: FACAB78805DA11EB9E484F71C4F9AE02.roa (raw, json) Hash identifier: U97kR7RcsCigK2e8XjTe4vPaz//2MFlJM/gHaNAYSkw= Subject key identifier: B1:C7:00:70:1A:4F:F1:A2:D5:FB:53:E0:8E:52:29:6E:C0:CD:AC:1C Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Certificate serial: 0721 Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa Signing time: Wed 18 Sep 2024 21:40:47 +0000 ROA not before: Wed 18 Sep 2024 21:40:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55720 IP address blocks: 43.239.176.0/24 maxlen: 24 43.239.177.0/24 maxlen: 24 43.239.178.0/24 maxlen: 24 43.239.179.0/24 maxlen: 24 103.35.116.0/24 maxlen: 24 103.35.117.0/24 maxlen: 24 103.35.118.0/24 maxlen: 24 103.35.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Validity Not Before: Sep 18 21:40:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eb48de-68e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:c9:a5:25:f7:25:31:ca:a3:95:1e:be:82: 14:db:4b:99:07:34:6b:b9:b9:b1:79:c5:f3:f5:0b: a3:f9:51:a3:4c:c9:09:9b:44:a6:22:0c:20:b8:e4: d1:46:3e:79:89:4d:cf:d0:c3:73:ca:2d:a4:e4:cc: 96:03:61:ce:81:2e:c8:ea:4f:22:f6:fa:72:3f:8f: 8f:5e:80:d2:cc:b4:dc:07:fb:c7:ea:2e:dd:70:43: 2d:f8:65:c7:2d:95:14:ee:d3:32:3e:3c:f6:f3:e6: b7:93:e5:b2:57:c6:ae:75:1d:82:4c:b2:17:24:5a: c8:db:54:54:15:b5:8e:79:4b:7a:cb:19:5f:9a:dc: 76:70:79:a0:c0:48:45:51:3c:1b:4b:e4:08:93:67: 18:6a:ec:4d:a6:df:be:b9:83:0a:1d:47:97:4d:28: 11:e7:ac:19:19:3b:35:8f:40:74:1a:f7:f1:0b:0d: a8:09:e4:17:77:43:f1:2a:f7:0c:83:ef:5e:ba:d1: 3e:a8:bf:04:aa:98:38:33:55:d4:d2:45:96:ad:8d: df:10:75:57:28:85:64:31:2b:06:4d:0c:9a:ae:cb: 3e:65:d3:82:58:aa:a6:cc:bb:08:91:df:95:16:e3: 5a:34:53:d5:79:c9:29:1c:3e:a3:02:b9:b4:08:af: b2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C7:00:70:1A:4F:F1:A2:D5:FB:53:E0:8E:52:29:6E:C0:CD:AC:1C X509v3 Authority Key Identifier: keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.176.0/22 103.35.116.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:f5:ba:81:93:ec:02:d8:83:d5:4e:db:70:58:55:8f:cd:9e: 78:90:7c:11:88:a7:88:42:c0:60:0a:2a:25:72:91:0a:06:ea: 5c:25:b5:fc:8e:c5:a7:3c:5b:b2:a2:f7:8d:6c:00:93:b9:17: 3d:31:c0:12:df:9e:e9:c6:09:ff:0a:66:72:ca:d0:77:64:56: 1d:36:da:92:72:84:d4:c5:36:88:1b:8a:55:85:34:2d:f4:74: 9f:dd:fc:df:48:11:04:01:89:1f:a0:e0:33:ca:d0:16:52:8d: 15:44:77:ac:9b:1c:7c:0f:f9:bb:3b:41:4f:e9:ba:d8:40:d7: e5:94:73:eb:5a:c0:5d:bd:7d:82:af:d1:b9:95:d2:c8:0f:e8: 3b:d1:5c:44:d7:89:c1:50:d2:90:5d:1c:20:07:ba:2e:0e:71: 0c:91:70:c9:52:b9:03:b2:c1:86:c0:18:84:07:c0:ac:89:6c: fd:5b:20:d0:65:93:f6:b9:16:f7:b1:19:0e:68:0e:67:3a:fa: 26:84:7b:81:73:70:a1:fb:e1:62:ce:81:89:ee:17:37:5e:79: ec:25:42:96:77:0c:20:6e:95:d3:6f:74:bd:ad:36:c0:32:93: 70:33:9e:83:13:bb:c3:99:d2:3b:dd:06:57:cb:b6:0f:a7:7b: d7:50:4e:34 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1 MDdBM0Y5QzIwHhcNMjQwOTE4MjE0MDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmViNDhkZS02OGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6fJpSX3JTHKo5UevoIU20uZBzRrubmxecXz9Quj+VGjTMkJm0SmIgwguOTR Rj55iU3P0MNzyi2k5MyWA2HOgS7I6k8i9vpyP4+PXoDSzLTcB/vH6i7dcEMt+GXH LZUU7tMyPjz28+a3k+WyV8audR2CTLIXJFrI21RUFbWOeUt6yxlfmtx2cHmgwEhF UTwbS+QIk2cYauxNpt++uYMKHUeXTSgR56wZGTs1j0B0GvfxCw2oCeQXd0PxKvcM g+9eutE+qL8Eqpg4M1XU0kWWrY3fEHVXKIVkMSsGTQyarss+ZdOCWKqmzLsIkd+V FuNaNFPVeckpHD6jArm0CK+yUQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLHHAHAa T/Gi1ftT4I5SKW7AzawcMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1 RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBDRDMvOUY5MzBEQjIwNUQ5MTFFQkFGRjk0OTcwQzRGOUFFMDIvRkFDQUI3ODgw NURBMTFFQjlFNDg0RjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr77ADBAJnI3QwDQYJKoZIhvcNAQELBQADggEBAE31uoGT 7ALYg9VO23BYVY/NnniQfBGIp4hCwGAKKiVykQoG6lwltfyOxac8W7Ki941sAJO5 Fz0xwBLfnunGCf8KZnLK0HdkVh022pJyhNTFNogbilWFNC30dJ/d/N9IEQQBiR+g 4DPK0BZSjRVEd6ybHHwP+bs7QU/puthA1+WUc+tawF29fYKv0bmV0sgP6DvRXETX icFQ0pBdHCAHui4OcQyRcMlSuQOywYbAGIQHwKyJbP1bINBlk/a5FvexGQ5oDmc6 +iaEe4FzcKH74WLOgYnuFzdeeewlQpZ3DCBuldNvdL2tNsAyk3AznoMTu8OZ0jvd BlfLtg+ne9dQTjQ= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org