$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/87CF4198A65111EEABE0B079C4F9AE02.roa File: 87CF4198A65111EEABE0B079C4F9AE02.roa (raw, json) Hash identifier: ycsJoV1IVZjZK0jpYvT1gNJxv6HZ+ScCQGWtZUuRXRU= Subject key identifier: D0:89:4A:E8:C8:C3:56:2E:79:79:E6:ED:35:81:8B:24:29:DF:3B:EA Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0571 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/87CF4198A65111EEABE0B079C4F9AE02.roa Signing time: Fri 29 Dec 2023 13:52:40 +0000 ROA not before: Fri 29 Dec 2023 13:52:40 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 22781 IP address blocks: 43.255.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 02:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Dec 29 13:52:40 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=658ecf27-c589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:3f:b0:8f:ae:f4:6d:02:94:d8:79:e3:f6: c6:ed:fd:34:2f:a4:41:43:3e:92:62:8b:9d:14:cb: 9e:9e:c6:29:39:dd:e6:01:11:de:6a:0b:3b:e9:2c: 63:3b:de:10:0c:68:1a:c6:67:05:cd:4c:c9:d0:5f: 02:f8:6e:dc:8f:b8:a8:35:99:d8:e4:c5:de:b0:02: 13:58:8c:bc:21:64:12:99:e3:da:f2:34:8f:dd:f9: 38:94:9d:3c:a7:26:e4:34:80:07:b9:9a:72:f9:2b: 04:a5:05:dc:c1:6f:19:3b:af:05:5c:be:9f:f3:dd: 48:fc:23:4a:49:dc:48:fb:aa:49:d4:29:3a:cc:92: fb:54:dc:c2:10:c1:3f:83:ee:05:69:b8:79:c3:2b: 24:d3:50:77:b9:f5:0b:2f:94:1c:7e:0d:8d:30:0b: c6:24:87:64:cc:fe:27:4d:e4:e3:e3:ab:b4:27:ba: 17:0a:77:cd:16:d2:8b:66:42:67:ce:cf:57:32:77: a1:aa:63:11:be:28:f9:66:4f:df:29:1c:41:87:e0: db:d4:8d:26:27:3d:9a:d0:45:55:66:84:7c:0a:75: 03:f2:46:de:07:4a:7f:a3:de:87:ff:92:ce:a2:72: 52:35:30:f3:50:41:ad:7e:24:25:ec:db:01:78:0a: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:89:4A:E8:C8:C3:56:2E:79:79:E6:ED:35:81:8B:24:29:DF:3B:EA X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/87CF4198A65111EEABE0B079C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.120.0/24 Signature Algorithm: sha256WithRSAEncryption 33:db:e4:45:b6:ad:cd:59:12:4b:55:48:d8:25:06:44:f0:a2: e6:be:29:49:74:b9:00:2a:d5:12:55:48:0c:fb:44:bb:95:d9: 54:db:db:74:27:5b:de:d4:ce:48:ad:05:25:f4:30:2f:b0:d0: c0:72:2e:29:e6:5a:22:77:2a:8e:f8:eb:6b:48:41:32:57:c4: 35:96:2b:2a:3e:87:9b:16:16:d1:70:72:41:68:6a:f8:1b:17: 1f:e4:cb:99:02:4b:36:c3:76:56:73:64:5c:3d:29:34:5f:71: d8:47:ff:46:09:9d:61:57:01:bb:11:e5:93:76:1c:0e:6e:07: 35:a1:fd:03:b4:31:3f:d6:53:b6:b6:89:af:0f:76:ed:54:d5: ed:39:81:c2:bb:bf:f7:e3:b9:17:10:70:1e:fb:97:c0:5d:28: d2:55:e2:42:6c:da:96:db:eb:31:b2:52:eb:47:3a:34:eb:56: 67:b0:83:4d:f4:6e:4f:f9:59:90:c7:76:1a:ea:8e:03:f1:71: 42:7c:77:e4:5f:63:fd:b6:67:ab:ef:8e:f4:14:90:0c:f7:3a: ce:52:42:48:99:28:89:fc:be:e8:4e:a0:aa:c9:55:92:0d:0a: ed:11:af:c0:4b:c0:79:b5:49:3a:a6:6b:49:80:d5:3e:b5:39: 19:6f:46:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjMxMjI5MTM1MjQwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThlY2YyNy1jNTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nI/sI+u9G0ClNh54/bG7f00L6RBQz6SYoudFMuensYpOd3mARHeags76Sxj O94QDGgaxmcFzUzJ0F8C+G7cj7ioNZnY5MXesAITWIy8IWQSmePa8jSP3fk4lJ08 pybkNIAHuZpy+SsEpQXcwW8ZO68FXL6f891I/CNKSdxI+6pJ1Ck6zJL7VNzCEME/ g+4Fabh5wysk01B3ufULL5Qcfg2NMAvGJIdkzP4nTeTj46u0J7oXCnfNFtKLZkJn zs9XMnehqmMRvij5Zk/fKRxBh+Db1I0mJz2a0EVVZoR8CnUD8kbeB0p/o96H/5LO onJSNTDzUEGtfiQl7NsBeArrQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNCJSujI w1YueXnm7TWBiyQp3zvqMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvODdDRjQxOThB NjUxMTFFRUFCRTBCMDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr/3gwDQYJKoZIhvcNAQELBQADggEBADPb5EW2rc1ZEktV SNglBkTwoua+KUl0uQAq1RJVSAz7RLuV2VTb23QnW97UzkitBSX0MC+w0MByLinm WiJ3Ko7462tIQTJXxDWWKyo+h5sWFtFwckFoavgbFx/ky5kCSzbDdlZzZFw9KTRf cdhH/0YJnWFXAbsR5ZN2HA5uBzWh/QO0MT/WU7a2ia8Pdu1U1e05gcK7v/fjuRcQ cB77l8BdKNJV4kJs2pbb6zGyUutHOjTrVmewg030bk/5WZDHdhrqjgPxcUJ8d+Rf Y/22Z6vvjvQUkAz3Os5SQkiZKIn8vuhOoKrJVZINCu0Rr8BLwHm1STqma0mA1T61 ORlvRnA= -----END CERTIFICATE-----Generated at Mon Jun 3 03:37:19 2024 by rpki-client on console-fra.rpki-client.org