$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa File: D90961489C1311EFA0BF1480C4F9AE02.roa (raw, json) Hash identifier: j0mJ0mAPy+58lCgkLchY+5j/S4lXHOE/HC1eBYmlnTs= Subject key identifier: 14:7A:96:30:2C:2D:40:70:9E:31:5A:4F:72:A0:02:09:9E:AE:11:ED Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Certificate serial: 1ABC Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa Signing time: Wed 06 Nov 2024 07:50:53 +0000 ROA not before: Wed 06 Nov 2024 07:50:53 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 4837 IP address blocks: 43.248.4.0/24 maxlen: 24 43.248.7.0/24 maxlen: 24 60.16.0.0/13 maxlen: 24 103.3.132.0/24 maxlen: 24 113.9.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6844 (0x1abc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70 Validity Not Before: Nov 6 07:50:53 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=672b1fdd-3a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:bd:46:93:02:b5:37:14:41:d3:77:63:a2: 99:52:d4:e3:35:a9:f5:1c:88:24:7a:43:09:90:48: 0a:13:e3:88:14:3e:a9:28:6c:e7:e9:b9:ae:8f:cc: ff:15:f0:90:c9:36:8d:34:5f:c5:a0:f9:7a:07:84: 64:f8:94:de:21:a6:3a:bd:4b:ff:fa:4c:9e:2e:fe: c6:60:ee:e2:bd:b5:5b:19:e5:5b:53:b8:0c:2a:64: f5:12:e5:51:07:27:e2:a9:9c:cc:22:6f:9c:2c:dd: 67:67:76:ed:3a:34:eb:ab:30:f8:7a:46:c0:7d:8e: 53:f6:0f:4e:5c:d1:b3:d3:9a:fd:bc:7e:fc:6d:66: a3:a2:ea:ea:f0:6d:58:99:f9:2f:2a:0a:8d:80:f8: 2c:16:9c:70:0d:2f:3c:8b:98:20:78:c7:3d:01:f4: b2:2b:1a:0e:44:30:9f:72:8f:aa:f3:2c:1c:c7:82: 11:fd:be:8c:7a:ff:9f:7e:e7:cb:e8:03:9f:3f:72: 28:d4:76:02:5f:85:64:9b:4a:5b:02:19:d0:6e:e2: 9e:47:61:22:7b:a6:c5:3b:9d:4a:49:a2:c0:1a:9d: 68:61:66:5c:63:92:c5:dd:a1:85:a0:c2:79:f6:73: 6f:9c:b8:bd:f1:a3:8a:3e:34:25:e7:c9:f2:e8:67: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:96:30:2C:2D:40:70:9E:31:5A:4F:72:A0:02:09:9E:AE:11:ED X509v3 Authority Key Identifier: keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/D90961489C1311EFA0BF1480C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.4.0/24 43.248.7.0/24 60.16.0.0/13 103.3.132.0/24 113.9.196.0/24 Signature Algorithm: sha256WithRSAEncryption 42:5a:b7:88:15:b9:cc:0a:30:e0:4e:e4:ca:07:45:70:65:b5: 95:e8:4c:ca:9d:10:d9:af:d1:e1:26:4b:de:41:fe:9c:8d:42: 40:05:4d:4f:2a:fe:88:77:ea:21:da:a9:6d:be:5a:8c:b5:c8: 00:8f:58:f5:7a:a0:b0:39:30:0e:b0:29:0b:23:10:5a:b0:df: b5:5b:88:0f:6d:43:5a:ce:b2:93:0c:5c:43:ef:23:04:e1:77: 2f:14:f3:1e:3c:14:94:1c:b2:f5:85:47:3f:b9:00:94:5e:01: b3:02:de:06:3d:fd:08:48:e7:72:85:27:66:37:5c:75:d1:f4: 06:a9:dd:73:fb:85:67:ac:e1:7d:df:c0:81:8e:3d:e3:14:67: 9d:2c:b5:14:81:cf:e1:2f:b2:5e:36:02:52:ea:b7:87:ef:8c: 10:06:19:e4:c2:c5:dd:9f:3c:17:25:a1:ee:a0:00:4e:8d:db: 1b:e9:7c:23:e7:2d:59:d2:ce:62:61:8e:ed:52:76:3b:90:cf: b2:f2:ae:95:91:f0:5b:8b:bb:52:8f:4a:77:69:5d:87:60:07: 0f:14:97:15:77:23:c1:6d:4d:9b:78:cb:6c:8a:85:6c:59:01: 79:85:00:a4:20:7d:7c:a2:af:b1:89:aa:38:d6:c8:8b:a1:b6: 2b:b2:83:71 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICGrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDQjMxMTAvBgNVBAUTKENCQTE5N0MwNENBQTlCRDI5NUY1Nzg4NDcyQTZBMTBB QTNGQkVGNzAwHhcNMjQxMTA2MDc1MDUzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiMWZkZC0zYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TK9RpMCtTcUQdN3Y6KZUtTjNan1HIgkekMJkEgKE+OIFD6pKGzn6bmuj8z/ FfCQyTaNNF/FoPl6B4Rk+JTeIaY6vUv/+kyeLv7GYO7ivbVbGeVbU7gMKmT1EuVR ByfiqZzMIm+cLN1nZ3btOjTrqzD4ekbAfY5T9g9OXNGz05r9vH78bWajourq8G1Y mfkvKgqNgPgsFpxwDS88i5ggeMc9AfSyKxoORDCfco+q8ywcx4IR/b6Mev+ffufL 6AOfP3Io1HYCX4Vkm0pbAhnQbuKeR2Eie6bFO51KSaLAGp1oYWZcY5LF3aGFoMJ5 9nNvnLi98aOKPjQl58ny6GcKpQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBR6ljAs LUBwnjFaT3KgAgmerhHtMB8GA1UdIwQYMBaAFMuhl8BMqpvSlfV4hHKmoQqj++9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0NCMy8xREI3OTgzQzI1 OUQxMUU3ODVEMzI1MEFDNEY5QUUwMi95NkdYd0V5cW05S1Y5WGlFY3FhaENxUDc3 M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k2R1h3RXlxbTlLVjlYaUVjcWFoQ3FQNzczQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNDQjMvMURCNzk4M0MyNTlEMTFFNzg1RDMyNTBBQzRGOUFFMDIvRDkwOTYxNDg5 QzEzMTFFRkEwQkYxNDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMCMEAgABMB0DBAAr+AQDBAAr+AcDAwM8EAMEAGcDhAMEAHEJxDANBgkqhkiG 9w0BAQsFAAOCAQEAQlq3iBW5zAow4E7kygdFcGW1lehMyp0Q2a/R4SZL3kH+nI1C QAVNTyr+iHfqIdqpbb5ajLXIAI9Y9XqgsDkwDrApCyMQWrDftVuID21DWs6ykwxc Q+8jBOF3LxTzHjwUlByy9YVHP7kAlF4BswLeBj39CEjncoUnZjdcddH0Bqndc/uF Z6zhfd/AgY494xRnnSy1FIHP4S+yXjYCUuq3h++MEAYZ5MLF3Z88FyWh7qAATo3b G+l8I+ctWdLOYmGO7VJ2O5DPsvKulZHwW4u7Uo9Kd2ldh2AHDxSXFXcjwW1Nm3jL bIqFbFkBeYUApCB9fKKvsYmqONbIi6G2K7KDcQ== -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org