$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/AAE6BD866D0411EE878EAE44C4F9AE02.roa File: AAE6BD866D0411EE878EAE44C4F9AE02.roa (raw, json) Hash identifier: GqmaNgYZDil2yUNBT/GDb6j3ArpwRkAKb5foUy6J7w8= Subject key identifier: E0:79:2A:52:81:D2:9C:46:CE:8F:9C:9B:3C:52:7D:27:90:D6:66:06 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0513 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/AAE6BD866D0411EE878EAE44C4F9AE02.roa Signing time: Tue 17 Oct 2023 15:48:51 +0000 ROA not before: Tue 17 Oct 2023 15:48:51 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134972 IP address blocks: 43.254.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Oct 17 15:48:51 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652eace3-4592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:b8:c9:b5:cf:36:86:4a:5a:37:82:fe:dc: d1:32:db:0b:27:31:41:c8:8a:42:2d:47:36:7e:6d: 63:13:6a:88:b1:47:3f:ad:24:2b:39:59:7b:2f:64: 84:51:12:ab:32:11:dc:a2:da:cd:05:91:d9:ec:c7: 95:e5:e8:38:3b:3d:91:72:a6:18:43:93:59:c2:3c: 89:a2:49:0d:37:04:36:68:65:ba:ee:cd:8b:05:d2: d0:44:63:2b:0e:91:a7:55:87:0f:ca:78:1d:3d:90: a9:12:da:39:8a:3d:9c:e1:16:0b:38:94:40:bf:10: 07:c6:ed:11:65:2d:2a:93:38:33:79:9a:4d:45:93: 50:ad:97:1f:0e:77:3e:a5:67:09:01:9b:ad:ce:f2: 93:8a:e2:d0:b6:bc:c9:0b:bf:1f:75:67:37:d8:34: a5:e9:55:63:dc:2d:d2:e0:91:2e:4e:de:90:e4:e8: e3:7d:f4:9b:3e:c2:0c:40:c0:aa:93:a5:78:6b:18: d6:ee:b1:f1:6b:53:32:d5:9e:b0:01:39:de:a1:7b: bf:28:c9:9c:9d:8d:b4:f3:36:f3:d9:05:76:a1:93: ec:ed:8b:41:f1:69:ef:67:51:85:b3:30:76:7c:d9: d5:f9:db:92:0f:ec:1a:6b:16:9c:c2:76:61:9e:b7: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:79:2A:52:81:D2:9C:46:CE:8F:9C:9B:3C:52:7D:27:90:D6:66:06 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/AAE6BD866D0411EE878EAE44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.165.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:97:8d:9a:40:98:0b:f8:00:24:8b:cf:32:06:25:26:f1:c2: 6d:a0:f2:ce:43:a3:5d:f5:b5:de:70:22:c4:a1:99:36:c5:9c: 59:56:36:b1:85:09:6a:60:e9:18:a4:83:c3:b3:be:ff:7d:07: f8:33:40:89:27:a2:49:78:05:a0:df:04:82:7b:87:ab:7a:0a: 57:2f:83:55:7c:b0:ee:25:2a:87:f4:6c:99:72:87:c3:91:09: 74:47:a5:9d:0a:e8:77:fb:cc:f2:14:00:8a:72:5e:07:00:28: 2c:a7:fb:6c:3e:eb:8f:3c:78:90:25:0a:6d:1c:16:49:9d:5a: 1b:a7:f4:2b:e7:a6:65:59:0f:6d:54:74:b8:79:2a:1f:1a:33: 7b:af:78:af:cc:12:0b:3b:f6:60:f5:94:d0:23:44:5e:72:c0: 66:65:fc:4b:8f:02:00:3f:45:7c:d9:4a:90:05:1c:5e:4e:33: cd:22:41:fd:38:e2:2e:62:75:71:8d:7a:87:2a:a8:de:38:a8: 03:ed:f2:93:d1:ae:17:d5:5b:5b:ad:96:f2:cb:16:43:52:78: 91:e1:72:24:3e:7b:df:b1:48:58:b8:f4:65:8e:68:a1:e8:df: 6b:a4:a9:d5:bf:ed:68:d0:86:51:b8:4e:66:c1:39:63:72:cd: cd:77:d9:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjMxMDE3MTU0ODUxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJlYWNlMy00NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8i4ybXPNoZKWjeC/tzRMtsLJzFByIpCLUc2fm1jE2qIsUc/rSQrOVl7L2SE URKrMhHcotrNBZHZ7MeV5eg4Oz2RcqYYQ5NZwjyJokkNNwQ2aGW67s2LBdLQRGMr DpGnVYcPyngdPZCpEto5ij2c4RYLOJRAvxAHxu0RZS0qkzgzeZpNRZNQrZcfDnc+ pWcJAZutzvKTiuLQtrzJC78fdWc32DSl6VVj3C3S4JEuTt6Q5OjjffSbPsIMQMCq k6V4axjW7rHxa1My1Z6wATneoXu/KMmcnY208zbz2QV2oZPs7YtB8WnvZ1GFszB2 fNnV+duSD+waaxacwnZhnrclLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOB5KlKB 0pxGzo+cmzxSfSeQ1mYGMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvQUFFNkJEODY2 RDA0MTFFRTg3OEVBRTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr/qUwDQYJKoZIhvcNAQELBQADggEBAJyXjZpAmAv4ACSL zzIGJSbxwm2g8s5Do131td5wIsShmTbFnFlWNrGFCWpg6Rikg8Ozvv99B/gzQIkn okl4BaDfBIJ7h6t6Clcvg1V8sO4lKof0bJlyh8ORCXRHpZ0K6Hf7zPIUAIpyXgcA KCyn+2w+6488eJAlCm0cFkmdWhun9CvnpmVZD21UdLh5Kh8aM3uveK/MEgs79mD1 lNAjRF5ywGZl/EuPAgA/RXzZSpAFHF5OM80iQf044i5idXGNeocqqN44qAPt8pPR rhfVW1utlvLLFkNSeJHhciQ+e9+xSFi49GWOaKHo32ukqdW/7WjQhlG4TmbBOWNy zc132e8= -----END CERTIFICATE-----Generated at Wed May 29 06:12:08 2024 by rpki-client on console-ams.rpki-client.org