$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa File: FACAB78805DA11EB9E484F71C4F9AE02.roa (raw, json) Hash identifier: 0c4oRd9DQ+yEUO8nCU4UYf57mFm08+GFhyF3dnO3s/I= Subject key identifier: 31:C7:14:11:5E:47:8C:2B:3D:9D:8D:F5:EE:42:0C:20:46:CE:E3:1A Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Certificate serial: 066D Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa Signing time: Fri 06 Oct 2023 22:19:39 +0000 ROA not before: Fri 06 Oct 2023 22:19:39 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 55720 IP address blocks: 43.239.176.0/24 maxlen: 24 43.239.177.0/24 maxlen: 24 43.239.178.0/24 maxlen: 24 43.239.179.0/24 maxlen: 24 103.35.116.0/24 maxlen: 24 103.35.117.0/24 maxlen: 24 103.35.118.0/24 maxlen: 24 103.35.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2 Validity Not Before: Oct 6 22:19:39 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652087fb-4526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:f7:bf:cd:32:43:99:09:96:aa:be:43:b4: 61:e9:cd:30:fb:a7:9d:f6:d5:71:75:21:db:2a:f3: 33:19:d4:b1:76:1a:53:f4:41:3d:60:2b:19:90:17: 77:88:ef:7d:19:95:06:a7:cd:34:3e:bb:8e:73:ac: 52:11:25:ae:9a:6b:0c:42:b5:e3:71:17:bd:63:31: 9d:e8:88:55:7d:9d:48:9d:a7:05:b1:d9:b6:41:78: be:33:f4:14:7e:80:42:16:bb:c4:3a:7b:6b:34:2c: 9c:94:71:94:bb:54:f4:d3:de:e8:75:40:52:c0:80: 2f:f5:60:e0:7e:7b:00:f0:4d:e7:ab:8c:d6:b7:e6: c4:6a:ba:ba:83:71:01:87:1c:48:25:73:48:58:56: 31:02:5c:c5:d9:4c:de:06:80:99:9b:9d:6f:ac:a8: b7:49:78:f1:63:27:f3:be:df:74:de:05:ef:95:14: a0:63:76:1e:cc:2e:3d:88:a5:15:27:4e:c4:af:8e: 27:00:91:d5:c8:9a:e3:ef:c2:4f:ad:8f:82:fe:6a: 55:86:c9:dc:5a:5b:22:eb:88:17:16:d0:e1:62:8c: ca:79:83:09:43:8a:c0:37:c0:61:a1:25:f5:48:c2: 17:f4:24:a5:3d:21:63:a6:76:ef:d4:37:b3:9e:42: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C7:14:11:5E:47:8C:2B:3D:9D:8D:F5:EE:42:0C:20:46:CE:E3:1A X509v3 Authority Key Identifier: keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/FACAB78805DA11EB9E484F71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.176.0/22 103.35.116.0/22 Signature Algorithm: sha256WithRSAEncryption 40:21:a7:81:83:af:6b:fe:25:af:97:cb:e4:13:0b:3a:58:cd: d1:bc:77:b7:ce:b1:9e:9b:30:46:a8:22:e7:94:df:88:9e:8d: 2e:21:23:ab:69:f8:a7:6f:40:ea:10:08:75:f0:5b:f0:57:b2: 8c:bf:3e:7c:65:24:a8:fc:22:63:15:09:93:cf:ca:58:92:d3: 7a:f3:6a:e2:32:60:2e:57:3d:6a:05:be:c3:32:f4:1f:b0:5a: 96:59:34:d3:d2:da:e8:67:94:1e:f7:3e:c2:17:25:b6:f7:bd: 08:2f:c4:64:18:35:86:8e:40:9b:80:0c:4d:33:36:35:39:c9: b6:90:b3:62:2a:ea:41:b5:ee:c4:ad:05:08:46:be:62:f8:83: d4:96:87:d0:cd:09:c2:f0:41:74:4b:45:ac:b6:a5:c3:dc:0f: 41:09:3a:11:67:16:04:e1:b4:6e:29:2a:e7:77:14:01:b8:38: 80:4b:3f:e6:d0:fd:37:94:d9:58:da:ef:9f:85:88:f5:f0:dd: 6c:d8:e6:44:59:09:f9:42:45:cb:56:14:79:6b:77:7a:f1:af: 0d:d5:d1:13:cb:6f:97:0b:75:72:3a:82:ae:65:45:1a:7b:bc: 2e:b9:26:4b:f9:f2:38:57:d1:55:94:ac:98:d0:aa:e3:3a:2d: 3b:d8:7e:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1 MDdBM0Y5QzIwHhcNMjMxMDA2MjIxOTM5WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwODdmYi00NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cL3v80yQ5kJlqq+Q7Rh6c0w+6ed9tVxdSHbKvMzGdSxdhpT9EE9YCsZkBd3 iO99GZUGp800PruOc6xSESWummsMQrXjcRe9YzGd6IhVfZ1InacFsdm2QXi+M/QU foBCFrvEOntrNCyclHGUu1T0097odUBSwIAv9WDgfnsA8E3nq4zWt+bEarq6g3EB hxxIJXNIWFYxAlzF2UzeBoCZm51vrKi3SXjxYyfzvt903gXvlRSgY3YezC49iKUV J07Er44nAJHVyJrj78JPrY+C/mpVhsncWlsi64gXFtDhYozKeYMJQ4rAN8BhoSX1 SMIX9CSlPSFjpnbv1DeznkJ2vQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDHHFBFe R4wrPZ2N9e5CDCBGzuMaMB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1 RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBDRDMvOUY5MzBEQjIwNUQ5MTFFQkFGRjk0OTcwQzRGOUFFMDIvRkFDQUI3ODgw NURBMTFFQjlFNDg0RjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr77ADBAJnI3QwDQYJKoZIhvcNAQELBQADggEBAEAhp4GD r2v+Ja+Xy+QTCzpYzdG8d7fOsZ6bMEaoIueU34iejS4hI6tp+KdvQOoQCHXwW/BX soy/PnxlJKj8ImMVCZPPyliS03rzauIyYC5XPWoFvsMy9B+wWpZZNNPS2uhnlB73 PsIXJbb3vQgvxGQYNYaOQJuADE0zNjU5ybaQs2Iq6kG17sStBQhGvmL4g9SWh9DN CcLwQXRLRay2pcPcD0EJOhFnFgThtG4pKud3FAG4OIBLP+bQ/TeU2Vja75+FiPXw 3WzY5kRZCflCRctWFHlrd3rxrw3V0RPLb5cLdXI6gq5lRRp7vC65Jkv58jhX0VWU rJjQquM6LTvYfp8= -----END CERTIFICATE-----Generated at Thu Apr 18 23:21:42 2024 by rpki-client on console-fra.rpki-client.org