$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa File: 39952E50C6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: UriRXIOaFvm5u1qncQTi3IERwvU0QHA/1gyCNIPeCng= Subject key identifier: 9D:AF:D4:3B:85:04:54:1A:31:77:56:B0:15:92:3D:A6:33:89:A0:50 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 02C4 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa Signing time: Fri 25 Oct 2024 01:44:56 +0000 ROA not before: Fri 25 Oct 2024 01:44:56 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132742 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Oct 25 01:44:56 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=671af817-a43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:6c:d3:df:e9:ba:c7:66:5b:92:6b:08:67: 47:dc:b2:73:9f:2c:43:c4:17:33:60:65:57:a2:f5: 3a:52:64:72:50:6f:8c:b5:e6:80:a3:60:6c:a9:28: 6c:20:36:88:21:9f:07:30:e3:ae:f3:8d:51:8c:6d: c8:9b:3e:f0:a7:76:f5:0d:42:f5:75:ae:37:3c:6d: bb:c5:73:19:6b:98:c9:12:a5:07:35:d6:63:bb:18: 67:27:1c:e9:a4:ce:60:4a:71:9a:0e:09:da:50:fc: c0:1c:cb:1d:75:bc:89:0d:64:4f:ea:a9:b5:6b:2e: c9:0b:63:54:01:a4:cd:bd:d4:c3:a0:1c:77:56:67: 23:99:26:10:8b:4a:23:56:18:8b:8b:59:fd:9e:e1: 45:7a:73:08:45:3e:e3:e5:c7:ac:9f:68:09:f9:90: fd:3f:f2:39:f7:85:62:9f:7d:5d:fd:d9:6d:d4:19: a8:24:c6:3a:b2:93:0b:86:68:c9:6a:ce:ac:ef:a2: 87:84:e3:a3:12:a4:4d:37:fe:7b:95:96:02:81:be: c8:c0:bd:0d:86:89:33:8d:eb:13:f6:b8:e2:24:27: 56:ad:44:2a:28:ec:02:a2:3d:45:b3:73:d9:f9:23: 96:81:82:c6:a4:8a:36:a5:f4:fd:3a:91:ac:46:2a: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AF:D4:3B:85:04:54:1A:31:77:56:B0:15:92:3D:A6:33:89:A0:50 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/39952E50C6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption b2:a5:1a:14:32:11:a7:93:f6:a4:b6:aa:90:a1:41:63:b7:4b: ea:4e:63:43:b4:a7:74:63:5d:43:84:35:e9:33:5b:61:69:2b: f2:c3:80:ac:3f:2e:f2:01:5f:45:42:e5:d0:c5:3f:92:9d:e9: 3a:dd:f4:e4:63:1a:9c:c7:b0:54:81:39:19:b0:95:4a:b8:5a: e6:e0:90:14:19:83:a5:7c:49:df:d4:f5:1f:a3:32:80:64:61: aa:a8:78:31:ec:dc:e6:09:71:a1:0d:57:c7:0d:99:fd:ad:95: 38:66:12:76:7b:e3:fc:2a:35:5e:87:29:e0:7b:46:2d:5a:df: e9:05:cb:3b:7e:0e:e3:4b:c6:eb:e4:cf:c3:ae:2a:65:3d:9e: 40:02:8c:b7:d7:64:57:fe:30:9c:be:34:6c:b8:3d:8c:ae:02: 69:a2:e0:97:84:0c:8e:82:92:54:4a:65:2a:f1:e2:d0:6a:0b: dd:09:ec:1f:2a:93:29:82:0d:a9:85:f6:13:0e:22:9e:63:23: cc:c2:86:b8:4f:c0:18:16:87:28:67:68:0a:1c:65:9d:0c:01: 79:42:cf:29:b4:5f:25:1d:85:5b:0a:95:ad:2f:95:e4:87:05: 8f:15:e5:e9:b3:64:f7:7a:d3:82:d8:11:62:a3:d4:48:24:31: f5:94:e0:15 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjQxMDI1MDE0NDU2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFhZjgxNy1hNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Ns09/pusdmW5JrCGdH3LJznyxDxBczYGVXovU6UmRyUG+MteaAo2BsqShs IDaIIZ8HMOOu841RjG3Imz7wp3b1DUL1da43PG27xXMZa5jJEqUHNdZjuxhnJxzp pM5gSnGaDgnaUPzAHMsddbyJDWRP6qm1ay7JC2NUAaTNvdTDoBx3VmcjmSYQi0oj VhiLi1n9nuFFenMIRT7j5cesn2gJ+ZD9P/I594Vin31d/dlt1BmoJMY6spMLhmjJ as6s76KHhOOjEqRNN/57lZYCgb7IwL0NhokzjesT9rjiJCdWrUQqKOwCoj1Fs3PZ +SOWgYLGpIo2pfT9OpGsRioGOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ2v1DuF BFQaMXdWsBWSPaYziaBQMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMzk5NTJFNTBD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr80ADBAJnJqgwDQYJKoZIhvcNAQELBQADggEBALKlGhQy EaeT9qS2qpChQWO3S+pOY0O0p3RjXUOENekzW2FpK/LDgKw/LvIBX0VC5dDFP5Kd 6Trd9ORjGpzHsFSBORmwlUq4WubgkBQZg6V8Sd/U9R+jMoBkYaqoeDHs3OYJcaEN V8cNmf2tlThmEnZ74/wqNV6HKeB7Ri1a3+kFyzt+DuNLxuvkz8OuKmU9nkACjLfX ZFf+MJy+NGy4PYyuAmmi4JeEDI6CklRKZSrx4tBqC90J7B8qkymCDamF9hMOIp5j I8zChrhPwBgWhyhnaAocZZ0MAXlCzym0XyUdhVsKla0vleSHBY8V5emzZPd604LY EWKj1EgkMfWU4BU= -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:37 2024 by rpki-client on console-ams.rpki-client.org