$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa File: 416881CE924011EB8767521BC4F9AE02.roa (raw, json) Hash identifier: pqLESChkdmP/9OVTdbyMMz2k1ZDaIE9YZCoNErEaxrA= Subject key identifier: 9E:C7:99:7D:B9:44:1D:9D:F7:CC:6A:93:3F:09:6A:90:A2:26:C2:07 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0DA5 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa Signing time: Fri 02 Jun 2023 19:29:37 +0000 ROA not before: Fri 02 Jun 2023 19:29:37 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 40065 IP address blocks: 43.250.104.0/24 maxlen: 24 43.250.105.0/24 maxlen: 24 43.250.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3493 (0xda5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 2 19:29:37 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=647a4321-d21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8d:76:e5:a0:40:34:1a:c1:88:8d:a9:59:c2: 62:6b:9f:90:89:fb:71:80:99:7e:5e:61:2f:02:d1: 27:5f:3f:91:b4:42:56:90:08:37:ff:58:8f:b1:b8: 35:6e:21:0b:91:ab:b9:a5:1f:af:3f:e7:3e:a3:f6: 4e:40:f0:b2:83:4f:27:ed:55:b1:93:d1:0b:45:28: a0:16:5d:b7:d6:6d:08:b5:fd:d5:b1:74:7c:48:7d: f5:0e:6b:35:49:95:da:ca:f4:a9:2d:17:dc:6e:b3: 35:d5:39:ed:85:51:09:02:aa:0e:d0:cf:ac:a3:d5: 64:1d:56:95:d3:e6:84:86:d5:9e:6a:db:2d:0f:16: cf:61:0c:83:7e:a8:69:e7:da:93:17:02:df:39:8f: 4b:44:7a:58:be:f3:40:ac:c2:48:74:01:0b:14:0e: 7f:8f:d3:0c:e8:02:d8:c7:6e:c8:01:40:67:e2:95: ea:ec:08:d3:5c:e3:9a:4a:95:a9:41:ad:9d:31:a3: a2:0b:69:b3:f9:3a:3c:88:d5:f3:2b:f6:80:3a:7e: 9a:65:54:99:92:83:42:4c:74:0e:eb:9a:8f:5d:d2: 07:f4:ef:cd:e9:b2:c7:18:ed:ca:aa:d8:17:83:aa: 32:9a:7e:f5:60:91:f1:7d:48:9f:77:9b:a7:53:38: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C7:99:7D:B9:44:1D:9D:F7:CC:6A:93:3F:09:6A:90:A2:26:C2:07 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/416881CE924011EB8767521BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.104.0-43.250.106.255 Signature Algorithm: sha256WithRSAEncryption 52:db:59:10:89:2b:35:af:e5:b4:1b:c5:9a:ff:e1:f2:9c:06: 37:56:e5:d0:24:ac:d0:14:44:ad:80:56:78:49:a1:b4:11:67: cf:de:3b:b9:82:ca:3d:20:72:85:87:ad:0b:e2:a8:e8:ec:c6: 57:06:b6:78:90:d1:be:98:aa:57:83:07:b2:d9:52:67:6e:eb: ae:09:79:43:d4:0c:9e:a8:bd:59:e6:a1:6b:62:59:f9:b2:5a: a1:13:54:e5:a1:4f:8f:08:f3:a8:bf:b5:5e:e1:a6:fd:8b:29: 2f:ab:38:dd:4a:3d:e7:34:35:d8:de:bc:53:ed:5c:09:0e:91: da:5d:ce:98:a2:4d:6d:32:b0:6d:c5:f4:47:02:bd:2e:ed:6c: a9:d8:46:55:50:2e:8d:10:9b:2f:c1:b2:26:a7:de:bd:7a:0e: d0:dd:ba:eb:5f:87:85:00:a5:c5:da:d2:b3:c2:7d:b6:23:67: 03:4b:85:bf:87:5c:e7:58:dc:1f:9b:4e:90:8d:ce:69:13:99: cd:13:80:ac:93:77:80:9f:f2:9f:ad:65:72:b3:6e:57:f0:3a: c6:e7:7e:d2:7d:56:36:0c:b6:c4:c0:11:1b:29:31:1a:68:f8: ee:b0:66:ca:98:11:e2:1a:b2:66:07:30:4c:bd:4e:f9:ef:02: 28:74:9a:61 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjMwNjAyMTkyOTM3WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhNDMyMS1kMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6o125aBANBrBiI2pWcJia5+QiftxgJl+XmEvAtEnXz+RtEJWkAg3/1iPsbg1 biELkau5pR+vP+c+o/ZOQPCyg08n7VWxk9ELRSigFl231m0Itf3VsXR8SH31Dms1 SZXayvSpLRfcbrM11TnthVEJAqoO0M+so9VkHVaV0+aEhtWeatstDxbPYQyDfqhp 59qTFwLfOY9LRHpYvvNArMJIdAELFA5/j9MM6ALYx27IAUBn4pXq7AjTXOOaSpWp Qa2dMaOiC2mz+To8iNXzK/aAOn6aZVSZkoNCTHQO65qPXdIH9O/N6bLHGO3KqtgX g6oymn71YJHxfUifd5unUzjLsQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJ7HmX25 RB2d98xqkz8JapCiJsIHMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvNDE2ODgxQ0U5 MjQwMTFFQjg3Njc1MjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAyv6aAMEACv6ajANBgkqhkiG9w0BAQsFAAOCAQEAUttZ EIkrNa/ltBvFmv/h8pwGN1bl0CSs0BRErYBWeEmhtBFnz947uYLKPSByhYetC+Ko 6OzGVwa2eJDRvpiqV4MHstlSZ27rrgl5Q9QMnqi9Weaha2JZ+bJaoRNU5aFPjwjz qL+1XuGm/YspL6s43Uo95zQ12N68U+1cCQ6R2l3OmKJNbTKwbcX0RwK9Lu1sqdhG VVAujRCbL8GyJqfevXoO0N2661+HhQClxdrSs8J9tiNnA0uFv4dc51jcH5tOkI3O aROZzROArJN3gJ/yn61lcrNuV/A6xud+0n1WNgy2xMARGykxGmj47rBmypgR4hqy ZgcwTL1O+e8CKHSaYQ== -----END CERTIFICATE-----Generated at Thu May 2 20:50:21 2024 by rpki-client on console-fra.rpki-client.org