$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/282DAABE82EC11EEB4D96065C4F9AE02.roa File: 282DAABE82EC11EEB4D96065C4F9AE02.roa (raw, json) Hash identifier: Q2vr7Gro7CPSBWIBXgNWEfCuh8qIitp6+jrEA/bCwE8= Subject key identifier: E0:05:48:04:5B:2A:50:ED:B2:28:FC:1A:5E:FE:DD:2B:F5:DD:5A:F8 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0432 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/282DAABE82EC11EEB4D96065C4F9AE02.roa Signing time: Thu 11 Jan 2024 01:43:18 +0000 ROA not before: Thu 11 Jan 2024 01:43:18 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 206264 IP address blocks: 43.226.231.0/24 maxlen: 24 103.46.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jan 11 01:43:18 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=659f47b5-46a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:47:6e:38:db:9a:41:df:96:c3:20:9c:c9: 1a:00:45:2b:0e:db:fa:49:d7:90:e7:93:51:2e:03: 22:72:13:3d:16:51:b5:16:28:7c:4d:11:67:83:88: 1e:ef:d0:f7:2c:ef:0e:0e:25:b5:58:16:c5:ca:46: b5:7c:71:25:bd:e6:09:02:03:55:5a:84:06:f9:61: 90:7e:bc:ed:d4:a9:4f:52:86:dc:bb:b9:ff:39:97: be:90:30:1b:74:54:cb:b3:b3:c8:55:cc:45:26:90: b6:89:31:e8:54:40:34:99:e3:ed:46:e8:d8:1a:ee: 22:6a:46:e1:9d:1f:d5:04:b2:6e:89:08:06:df:26: d3:c8:12:90:e2:9a:7e:99:97:c1:fb:c4:c2:10:fa: 6f:3d:ea:1f:c3:80:10:ae:2d:e3:21:6c:d2:72:56: 11:28:7f:cc:43:6c:e6:25:6a:10:03:da:aa:a7:1d: 30:3a:4e:c3:13:e8:40:7d:d8:a1:25:da:98:c0:66: 2f:93:e6:9a:5e:32:11:6e:ba:75:73:04:0c:c8:1d: b0:6e:15:f2:dc:e8:1e:1e:61:3e:6d:5d:6c:61:6b: 7b:ad:12:a5:a7:63:78:ea:62:6a:5e:59:f6:34:1b: 1e:df:53:ca:12:1e:fd:6f:41:a3:5e:e1:5a:89:93: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:48:04:5B:2A:50:ED:B2:28:FC:1A:5E:FE:DD:2B:F5:DD:5A:F8 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/282DAABE82EC11EEB4D96065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.231.0/24 103.46.141.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:6c:ae:ec:8f:84:d7:a5:45:0c:d5:74:5b:77:77:f8:a3:53: 63:a9:21:61:23:84:5d:a1:c8:c9:cf:c5:ba:56:f2:b7:66:d2: 59:4e:64:f5:8c:2a:39:33:8d:24:ee:46:33:04:fb:ad:c8:02: 66:80:13:5c:f8:48:64:49:ff:61:79:e9:52:30:6a:b1:ea:27: 6e:53:b2:88:62:5b:e3:15:cf:80:41:4c:a6:69:d2:2b:9d:9b: ff:2f:09:a0:9d:d9:9d:39:cd:ec:1a:ba:e9:09:28:53:19:3d: 1a:e1:6c:78:34:5d:25:62:07:c8:3f:71:78:8f:11:20:73:b6: 40:cd:5e:d0:b6:8a:c3:57:f8:66:0f:b7:1f:4c:53:b1:42:a9: d9:03:e3:35:23:54:86:cb:4a:90:b4:c8:6a:45:5a:4e:33:a5: 27:75:e0:56:5d:58:6d:69:b3:2c:ff:13:bd:79:78:4f:27:87: e2:91:70:68:d0:39:69:ec:7a:3d:24:a9:a7:07:dd:a1:57:62: 3a:9b:ea:3a:13:90:81:47:d2:a1:4d:5d:b1:e0:0a:47:a4:22: 7d:55:47:18:8c:fe:17:f0:1b:e7:da:67:0e:73:92:fd:ab:59: 0c:12:a4:4b:cf:89:a2:9e:09:19:67:63:5f:bd:db:b5:04:2b: 4c:87:b1:00 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjQwMTExMDE0MzE4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTlmNDdiNS00NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtatHbjjbmkHflsMgnMkaAEUrDtv6SdeQ55NRLgMichM9FlG1Fih8TRFng4ge 79D3LO8ODiW1WBbFyka1fHElveYJAgNVWoQG+WGQfrzt1KlPUobcu7n/OZe+kDAb dFTLs7PIVcxFJpC2iTHoVEA0mePtRujYGu4iakbhnR/VBLJuiQgG3ybTyBKQ4pp+ mZfB+8TCEPpvPeofw4AQri3jIWzSclYRKH/MQ2zmJWoQA9qqpx0wOk7DE+hAfdih JdqYwGYvk+aaXjIRbrp1cwQMyB2wbhXy3OgeHmE+bV1sYWt7rRKlp2N46mJqXln2 NBse31PKEh79b0GjXuFaiZOLoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOAFSARb KlDtsij8Gl7+3Sv13Vr4MB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvMjgyREFBQkU4 MkVDMTFFRUI0RDk2MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4ucDBABnLo0wDQYJKoZIhvcNAQELBQADggEBAEtsruyP hNelRQzVdFt3d/ijU2OpIWEjhF2hyMnPxbpW8rdm0llOZPWMKjkzjSTuRjME+63I AmaAE1z4SGRJ/2F56VIwarHqJ25TsohiW+MVz4BBTKZp0iudm/8vCaCd2Z05zewa uukJKFMZPRrhbHg0XSViB8g/cXiPESBztkDNXtC2isNX+GYPtx9MU7FCqdkD4zUj VIbLSpC0yGpFWk4zpSd14FZdWG1psyz/E715eE8nh+KRcGjQOWnsej0kqacH3aFX Yjqb6joTkIFH0qFNXbHgCkekIn1VRxiM/hfwG+faZw5zkv2rWQwSpEvPiaKeCRln Y1+927UEK0yHsQA= -----END CERTIFICATE-----Generated at Sat May 25 03:05:57 2024 by rpki-client on console-fra.rpki-client.org