$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa File: B589332C498611EF90B46962C4F9AE02.roa (raw, json) Hash identifier: /39js7xUNXh8V/6i6K70ZVCe594GaB6xfYqa45imu48= Subject key identifier: 0C:96:2B:8C:F7:72:50:37:8E:1B:02:BD:F1:68:3C:36:A9:42:DF:C9 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 049E Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa Signing time: Wed 24 Jul 2024 06:33:59 +0000 ROA not before: Wed 24 Jul 2024 06:33:59 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137409 IP address blocks: 43.226.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jul 24 06:33:59 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66a0a057-673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:e0:95:ce:38:96:59:3e:22:bc:eb:74:1e: c3:45:14:4e:14:90:25:79:03:2e:5a:64:97:aa:04: 9e:ed:1f:16:f7:26:20:f4:73:6c:13:4e:c7:16:7c: 08:ac:60:65:4d:0b:78:e0:59:85:d9:93:f0:9b:37: 86:0a:13:d7:fd:49:c1:9d:84:96:df:ae:30:11:b5: 70:45:01:6e:ed:57:de:64:89:08:19:5a:ac:b9:a0: 47:08:de:b0:e9:8e:37:34:dc:b9:6a:78:a5:75:67: 24:2e:ec:ca:86:cc:6d:4a:5d:ed:ce:13:0b:8d:02: a7:7b:6b:b4:a0:35:3c:42:6f:2f:fe:86:f5:b5:dd: 04:59:fc:2e:36:a4:d0:7f:84:b2:c2:93:ed:5c:4f: a8:8c:9b:9a:90:52:c7:b0:aa:e2:e1:d7:dc:43:70: 3f:d7:ad:de:c3:53:53:11:d1:24:b8:c4:de:47:ab: 3e:e2:1c:2f:a6:66:74:18:5d:b8:41:b6:e2:3f:8c: 55:4a:78:e7:06:7c:9a:8b:1f:43:59:da:53:5d:e5: 40:d0:44:bf:6b:5c:e5:34:dc:cd:b7:c8:d3:9c:32: 35:ff:ef:da:ec:7a:30:19:0d:1e:6c:af:bf:14:1c: 2a:38:e0:67:92:1d:91:52:bf:09:0d:5a:4c:92:28: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:2B:8C:F7:72:50:37:8E:1B:02:BD:F1:68:3C:36:A9:42:DF:C9 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B589332C498611EF90B46962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.226.229.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ec:17:b2:45:c3:9b:0a:2b:71:55:1c:d0:47:c5:3b:e1:a5: f9:ea:71:c1:fc:bc:c0:c2:43:ca:c3:36:aa:c2:84:bf:b7:86: 11:81:b4:78:f6:6f:89:bd:28:8f:d6:4f:ec:7b:c6:93:cc:82: c6:e3:4c:c1:43:44:c1:bb:d8:2a:fb:10:e2:81:a1:5f:82:d4: 50:d7:01:41:8c:6f:9e:a0:79:b9:12:04:4c:21:3a:aa:8e:40: 66:39:aa:07:48:d9:7e:f0:dd:f3:cd:cb:09:43:cb:1c:7d:96: 71:d2:c6:36:68:b9:4c:6b:60:35:9e:5f:20:d4:9d:73:07:b4: 27:56:4b:46:6f:4a:e2:c8:e9:89:f6:db:d3:dc:d1:53:e0:e5: ff:17:d1:1c:cd:49:34:db:99:1a:60:d2:f7:4a:f8:93:7b:21: ec:d1:98:7a:20:24:24:75:99:79:b1:4e:bd:0a:d4:e5:7b:8c: 9b:e3:f0:94:09:37:43:80:54:81:91:9d:ea:ef:95:73:98:4d: 91:89:e6:b5:49:fd:9f:b4:7a:ab:18:dc:db:c4:82:d9:e4:e0: ef:a2:1a:62:b8:47:8e:4b:9d:d8:2c:6e:c9:5e:a7:cf:7a:42: a5:3e:7c:72:e2:56:8c:3b:6d:f0:27:57:f7:c5:49:f9:05:a2: d8:de:44:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjQwNzI0MDYzMzU5WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEwYTA1Ny02NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxojglc44llk+IrzrdB7DRRROFJAleQMuWmSXqgSe7R8W9yYg9HNsE07HFnwI rGBlTQt44FmF2ZPwmzeGChPX/UnBnYSW364wEbVwRQFu7VfeZIkIGVqsuaBHCN6w 6Y43NNy5anildWckLuzKhsxtSl3tzhMLjQKne2u0oDU8Qm8v/ob1td0EWfwuNqTQ f4SywpPtXE+ojJuakFLHsKri4dfcQ3A/163ew1NTEdEkuMTeR6s+4hwvpmZ0GF24 QbbiP4xVSnjnBnyaix9DWdpTXeVA0ES/a1zlNNzNt8jTnDI1/+/a7HowGQ0ebK+/ FBwqOOBnkh2RUr8JDVpMkijrtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAyWK4z3 clA3jhsCvfFoPDapQt/JMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvQjU4OTMzMkM0 OTg2MTFFRjkwQjQ2OTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4uUwDQYJKoZIhvcNAQELBQADggEBAITsF7JFw5sKK3FV HNBHxTvhpfnqccH8vMDCQ8rDNqrChL+3hhGBtHj2b4m9KI/WT+x7xpPMgsbjTMFD RMG72Cr7EOKBoV+C1FDXAUGMb56gebkSBEwhOqqOQGY5qgdI2X7w3fPNywlDyxx9 lnHSxjZouUxrYDWeXyDUnXMHtCdWS0ZvSuLI6Yn229Pc0VPg5f8X0RzNSTTbmRpg 0vdK+JN7IezRmHogJCR1mXmxTr0K1OV7jJvj8JQJN0OAVIGRnervlXOYTZGJ5rVJ /Z+0eqsY3NvEgtnk4O+iGmK4R45Lndgsbslep896QqU+fHLiVow7bfAnV/fFSfkF otjeRK4= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:20 2024 by rpki-client on console-fra.rpki-client.org