$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa File: 0463FF50526C11EC80A31615C4F9AE02.roa (raw, json) Hash identifier: 75t6akdtpfZ66rCaphdHE8Ci0vcMWvnaqPUEn6z8jRY= Subject key identifier: E1:A9:65:7F:7B:5D:60:A4:2B:26:7B:73:32:F9:E8:3C:A9:FA:6B:C6 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 05E2 Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa Signing time: Tue 06 Aug 2024 23:32:01 +0000 ROA not before: Tue 06 Aug 2024 23:32:01 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 36351 IP address blocks: 43.245.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 22:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA Validity Not Before: Aug 6 23:32:01 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b2b271-4e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:dc:7d:99:ec:7a:8d:0d:e5:c6:ac:14:1e: fa:0d:6b:51:ae:67:0d:df:14:41:9a:64:3d:5a:5f: 8a:de:fb:a3:10:03:9d:ab:47:69:84:c4:d0:f3:2d: a8:c2:18:72:e9:58:bc:a0:ed:ca:2c:78:86:5e:c2: 46:1e:0c:5a:95:57:73:63:df:e9:dd:7b:1c:af:9f: fa:df:fb:9e:69:df:2f:93:10:31:c5:6c:69:60:cd: 97:79:1c:95:db:3a:d2:5a:57:8b:8a:d5:49:42:a5: 7c:0c:a5:47:58:d6:77:77:99:e8:73:db:70:13:18: b1:f8:99:af:3f:ad:b8:e3:3c:95:fa:8a:ee:cd:ab: 6c:6c:45:b3:83:4b:61:1f:ed:9f:3f:59:ca:0d:f0: 8d:7b:02:bb:10:ef:cb:50:70:52:0f:a2:75:b0:3e: 8a:e7:13:c6:7a:f5:50:b6:4b:a4:c6:1b:e0:38:b8: 98:28:b1:09:27:54:62:ba:45:62:14:40:ed:d5:4e: 77:ca:61:8c:59:c7:c8:46:25:bd:d8:ea:10:d6:62: ee:b9:54:db:b3:68:be:0c:b6:7d:8f:dd:38:16:85: d0:76:56:6c:4e:17:e8:89:fe:d5:a0:34:ff:f3:3d: d6:04:7e:31:e8:e4:ac:7c:45:2e:61:d9:5b:a3:9a: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:65:7F:7B:5D:60:A4:2B:26:7B:73:32:F9:E8:3C:A9:FA:6B:C6 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/24 Signature Algorithm: sha256WithRSAEncryption 31:5d:fc:f8:b5:b3:0c:18:d8:59:60:45:1c:8d:c4:9b:0c:b6: df:9a:de:4d:03:56:65:fb:b2:87:71:ef:a8:7c:e2:e5:d6:8a: 63:9f:df:96:8b:76:77:1b:b6:5b:35:1f:7a:af:69:9e:da:f9: 05:d6:21:6f:eb:fc:13:7d:37:3e:d1:fe:ca:9b:97:76:74:d4: 61:c2:c9:cc:28:4a:05:ca:c9:5a:f8:26:e3:c5:2a:e9:64:76: 0e:98:37:7e:08:e7:8c:b9:6e:ae:97:e2:61:97:2c:a8:29:a6: b7:0d:cc:cf:ac:5f:d6:b1:7d:06:41:57:b1:0d:83:5c:ba:d0: 6b:1b:55:e4:ca:33:d3:c5:13:af:73:dd:ce:21:dd:05:db:e7: cc:d5:2d:7b:e3:e5:f6:e3:13:fa:32:c8:d2:ee:45:8a:76:2d: 31:13:a3:84:95:c4:cc:cf:b6:65:45:a8:19:7e:82:73:23:a2: 4a:63:45:c9:b4:b8:8e:0f:d9:0e:63:27:57:c5:32:1e:18:ce: b5:c7:22:8d:6f:85:60:82:a3:34:a1:96:5e:e2:a0:ee:cd:44: 07:0d:ab:eb:59:e4:ec:52:4f:5d:c3:e1:35:08:69:ed:20:af: 54:bd:01:4c:f9:f9:52:04:d7:1c:a3:17:5c:4f:ef:c1:f0:01: 09:40:22:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjQwODA2MjMzMjAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIyYjI3MS00ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnbcfZnseo0N5casFB76DWtRrmcN3xRBmmQ9Wl+K3vujEAOdq0dphMTQ8y2o whhy6Vi8oO3KLHiGXsJGHgxalVdzY9/p3Xscr5/63/uead8vkxAxxWxpYM2XeRyV 2zrSWleLitVJQqV8DKVHWNZ3d5noc9twExix+JmvP6244zyV+oruzatsbEWzg0th H+2fP1nKDfCNewK7EO/LUHBSD6J1sD6K5xPGevVQtkukxhvgOLiYKLEJJ1RiukVi FEDt1U53ymGMWcfIRiW92OoQ1mLuuVTbs2i+DLZ9j904FoXQdlZsThfoif7VoDT/ 8z3WBH4x6OSsfEUuYdlbo5po2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOGpZX97 XWCkKyZ7czL56Dyp+mvGMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvMDQ2M0ZGNTA1 MjZDMTFFQzgwQTMxNjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr9agwDQYJKoZIhvcNAQELBQADggEBADFd/Pi1swwY2Flg RRyNxJsMtt+a3k0DVmX7sodx76h84uXWimOf35aLdncbtls1H3qvaZ7a+QXWIW/r /BN9Nz7R/sqbl3Z01GHCycwoSgXKyVr4JuPFKulkdg6YN34I54y5bq6X4mGXLKgp prcNzM+sX9axfQZBV7ENg1y60GsbVeTKM9PFE69z3c4h3QXb58zVLXvj5fbjE/oy yNLuRYp2LTETo4SVxMzPtmVFqBl+gnMjokpjRcm0uI4P2Q5jJ1fFMh4YzrXHIo1v hWCCozShll7ioO7NRAcNq+tZ5OxST13D4TUIae0gr1S9AUz5+VIE1xyjF1xP78Hw AQlAIiY= -----END CERTIFICATE-----Generated at Thu Mar 13 21:57:03 2025 by rpki-client