$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa File: 416881CE924011EB8767521BC4F9AE02.roa (raw, json) Hash identifier: 4mEXVYgBx/nKl7DjW29xkvq4e05Fqjm8qJZ6J8+De7I= Subject key identifier: C2:BB:4A:46:41:A4:5B:F6:90:25:5E:EB:98:54:11:39:C1:A0:97:C7 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0E6F Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa Signing time: Sun 02 Jun 2024 18:51:50 +0000 ROA not before: Sun 02 Jun 2024 18:51:50 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 40065 IP address blocks: 43.250.104.0/24 maxlen: 24 43.250.105.0/24 maxlen: 24 43.250.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 2 18:51:50 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665cbf46-6faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:d6:06:f1:d8:07:ca:65:16:4c:64:eb:bd: 73:93:b7:01:36:ac:16:bf:9d:30:98:44:3e:97:92: c4:ea:2b:18:21:72:76:a8:42:f1:6c:ef:8b:5e:d7: ae:c2:fc:ba:a3:d5:c6:89:ad:cb:9f:54:a0:65:ed: 1d:db:8f:07:29:21:64:f8:d7:a0:80:41:1b:91:f5: 41:55:a7:61:8c:de:8e:77:8b:5d:3e:7f:ab:0e:4f: c9:19:b0:9f:f1:56:05:42:5f:ff:82:60:9d:78:6a: 2c:ef:22:12:a1:a6:4b:eb:d8:e1:2e:24:04:4f:86: 5a:47:dd:aa:02:6c:55:5b:75:e3:7a:12:79:c5:4f: 23:90:c1:f3:43:d0:3b:79:42:39:ed:68:cd:a6:96: 98:c5:7f:f6:a9:9f:61:7e:ed:d2:2d:7e:f4:63:05: 93:97:19:01:88:f2:5e:75:9c:61:89:95:67:84:b5: db:1c:83:a4:1f:84:21:76:7d:eb:73:92:b6:8e:07: 8c:e2:22:8d:9c:ca:76:05:95:f0:0f:59:07:34:da: 35:62:ab:3c:d0:5b:60:3e:f3:ef:cd:4f:95:a8:11: b1:ad:57:eb:66:86:14:f8:df:c9:12:0f:4e:f1:1f: ea:26:1e:0f:78:dc:79:49:f9:66:9e:94:ba:3a:43: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BB:4A:46:41:A4:5B:F6:90:25:5E:EB:98:54:11:39:C1:A0:97:C7 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.104.0-43.250.106.255 Signature Algorithm: sha256WithRSAEncryption 54:2b:ce:93:1d:19:88:91:f6:c5:35:8a:d5:32:9d:a8:e6:e5: eb:36:5d:65:14:99:1b:46:ca:5b:a4:01:15:dd:eb:d5:4f:4d: 2f:b1:d6:85:57:75:2a:94:5c:2a:5e:1e:54:3a:bf:18:2b:3b: 55:ef:54:4c:dd:69:67:cc:b1:a9:d5:46:a5:82:a0:4d:5b:7b: 12:e2:34:76:98:1c:e0:8d:16:3d:2a:a9:f4:f8:96:51:1d:92: 12:3c:e7:56:c2:a9:9e:a4:bf:33:97:8a:e4:d2:3e:0b:bf:bc: 21:67:5d:f4:53:60:22:83:c9:9f:50:de:cf:9b:f3:cd:ed:2c: b3:2b:71:d8:9a:82:61:95:64:20:a5:c6:38:21:f0:26:af:4d: ea:c3:61:e8:ac:70:6c:9c:21:e0:44:27:14:5f:1e:05:21:fb: fd:8a:9b:ee:a0:d3:fb:d5:3e:46:23:63:4b:15:f4:f1:20:81: 90:d1:9e:f8:a4:16:4e:8e:c3:1e:ed:57:7b:43:a8:f5:45:5a: ab:ac:90:50:42:ff:73:ec:dc:d2:dc:6c:43:c0:e3:11:32:3c: fd:e0:72:41:ad:e2:fc:07:19:a6:c7:2d:11:5b:35:c3:83:69: 5f:5e:e7:e9:69:68:5d:aa:36:13:63:b6:1d:21:e5:8f:de:6c: dc:9e:ae:fd -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjQwNjAyMTg1MTUwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVjYmY0Ni02ZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTfWBvHYB8plFkxk671zk7cBNqwWv50wmEQ+l5LE6isYIXJ2qELxbO+LXteu wvy6o9XGia3Ln1SgZe0d248HKSFk+NeggEEbkfVBVadhjN6Od4tdPn+rDk/JGbCf 8VYFQl//gmCdeGos7yISoaZL69jhLiQET4ZaR92qAmxVW3XjehJ5xU8jkMHzQ9A7 eUI57WjNppaYxX/2qZ9hfu3SLX70YwWTlxkBiPJedZxhiZVnhLXbHIOkH4Qhdn3r c5K2jgeM4iKNnMp2BZXwD1kHNNo1Yqs80FtgPvPvzU+VqBGxrVfrZoYU+N/JEg9O 8R/qJh4PeNx5SflmnpS6OkOizwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMK7SkZB pFv2kCVe65hUETnBoJfHMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvNDE2ODgxQ0U5 MjQwMTFFQjg3Njc1MjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAyv6aAMEACv6ajANBgkqhkiG9w0BAQsFAAOCAQEAVCvO kx0ZiJH2xTWK1TKdqObl6zZdZRSZG0bKW6QBFd3r1U9NL7HWhVd1KpRcKl4eVDq/ GCs7Ve9UTN1pZ8yxqdVGpYKgTVt7EuI0dpgc4I0WPSqp9PiWUR2SEjznVsKpnqS/ M5eK5NI+C7+8IWdd9FNgIoPJn1Dez5vzze0ssytx2JqCYZVkIKXGOCHwJq9N6sNh 6KxwbJwh4EQnFF8eBSH7/Yqb7qDT+9U+RiNjSxX08SCBkNGe+KQWTo7DHu1Xe0Oo 9UVaq6yQUEL/c+zc0txsQ8DjETI8/eByQa3i/AcZpsctEVs1w4NpX17n6WloXao2 E2O2HSHlj95s3J6u/Q== -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:49 2024 by rpki-client on console-fra.rpki-client.org