$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa File: 83BD68508E5411EF9626DF3CC4F9AE02.roa (raw, json) Hash identifier: yYy9sqW+bIg76QGHQOdsCbUROu4kV020oIkec6So/dM= Subject key identifier: 97:B1:38:28:EB:30:AE:B8:04:91:D6:AE:B0:47:FD:8C:D8:EB:33:E1 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 9A Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa Signing time: Sat 19 Oct 2024 19:58:31 +0000 ROA not before: Sat 19 Oct 2024 19:58:31 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 834 IP address blocks: 43.231.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Oct 19 19:58:31 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=67140f67-1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:40:e0:13:4b:83:46:6f:bb:6e:7e:67:53: d1:63:cd:16:d3:8a:f3:94:91:47:2a:ec:1f:4b:3c: 05:ee:70:66:a2:dd:fb:be:5a:79:97:45:17:02:b4: 09:f7:04:db:2c:22:70:2f:af:d3:53:13:23:1d:dd: 32:ca:97:8b:58:53:41:ef:cc:a4:cc:76:3c:44:eb: 51:c1:f8:26:12:a7:27:45:a0:d2:0a:ac:84:a6:07: 78:c1:73:a7:5d:8b:a3:9a:a9:24:c2:59:bf:b8:b8: 4f:53:72:6c:f9:97:80:17:6e:46:ca:98:f8:48:45: f8:1e:01:da:67:12:73:45:04:93:46:1b:d5:f3:da: db:aa:af:b8:6f:30:c5:11:3b:04:54:70:84:11:22: 02:57:42:7f:44:ea:94:24:1e:a7:7f:14:c8:ea:9a: 16:27:22:51:99:f8:c0:8f:a3:89:33:95:2c:02:e1: 6f:a6:25:c6:8b:77:85:ab:70:2c:be:ce:bc:c0:59: 09:ca:8b:20:a9:7d:03:e4:8c:19:db:59:cc:9e:8c: 6c:19:ad:ca:ff:f6:0b:9b:46:2e:d2:66:39:bb:ff: ce:e9:f4:64:4f:38:06:06:6f:a2:7e:92:83:29:81: 2a:73:8f:91:61:64:c6:2d:4e:89:bb:0d:0e:a8:ec: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:38:28:EB:30:AE:B8:04:91:D6:AE:B0:47:FD:8C:D8:EB:33:E1 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/83BD68508E5411EF9626DF3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.207.0/24 Signature Algorithm: sha256WithRSAEncryption 54:9a:51:22:f3:a5:4b:99:73:9a:03:5d:c2:d1:91:05:4f:6e: 8d:24:d1:1b:47:95:9e:4d:4e:e1:97:a8:ff:a0:21:dc:45:10: 11:09:9e:5d:60:3f:13:b4:77:13:82:2d:c3:01:c8:ad:fb:d0: bd:f8:3a:0f:5d:f4:97:c8:f7:1d:e4:79:db:be:c1:4f:98:27: aa:c9:b7:8d:b9:e8:8c:9a:27:78:93:72:41:c9:5e:da:79:ef: 21:f7:4d:3e:15:20:7b:7a:ea:ce:36:cc:97:f6:52:fe:5b:f4: 67:f9:5c:c6:f7:c1:dd:3f:06:ea:48:86:a7:bf:5d:29:65:17: 28:82:f6:a0:ac:30:7f:61:25:00:18:ae:8c:39:0d:13:f8:67: 1b:f5:1b:43:74:25:d0:dd:ed:f4:e3:99:37:20:c1:0d:7f:bb: 21:33:96:19:8d:e4:43:eb:52:ab:e1:2f:0e:4d:3c:e5:68:32: 6e:f7:3f:78:9c:25:4f:43:b1:f7:a2:b4:c8:a0:4b:cb:5a:3a: e2:aa:db:b4:8e:32:4a:dc:eb:b2:d2:2f:de:42:fa:f1:f5:11: 7c:4a:58:7d:ff:98:26:4c:8b:14:2a:08:30:1e:ae:70:8a:4d: 24:80:14:24:87:5f:16:5b:87:b4:99:be:85:ce:ae:19:13:f8: 60:00:b8:94 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjQxMDE5MTk1ODMxWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzE0MGY2Ny0xMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07ZA4BNLg0Zvu25+Z1PRY80W04rzlJFHKuwfSzwF7nBmot37vlp5l0UXArQJ 9wTbLCJwL6/TUxMjHd0yypeLWFNB78ykzHY8ROtRwfgmEqcnRaDSCqyEpgd4wXOn XYujmqkkwlm/uLhPU3Js+ZeAF25Gypj4SEX4HgHaZxJzRQSTRhvV89rbqq+4bzDF ETsEVHCEESICV0J/ROqUJB6nfxTI6poWJyJRmfjAj6OJM5UsAuFvpiXGi3eFq3As vs68wFkJyosgqX0D5IwZ21nMnoxsGa3K//YLm0Yu0mY5u//O6fRkTzgGBm+ifpKD KYEqc4+RYWTGLU6Juw0OqOwxrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJexOCjr MK64BJHWrrBH/YzY6zPhMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvODNCRDY4NTA4 RTU0MTFFRjk2MjZERjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr588wDQYJKoZIhvcNAQELBQADggEBAFSaUSLzpUuZc5oD XcLRkQVPbo0k0RtHlZ5NTuGXqP+gIdxFEBEJnl1gPxO0dxOCLcMByK370L34Og9d 9JfI9x3kedu+wU+YJ6rJt4256IyaJ3iTckHJXtp57yH3TT4VIHt66s42zJf2Uv5b 9Gf5XMb3wd0/BupIhqe/XSllFyiC9qCsMH9hJQAYrow5DRP4Zxv1G0N0JdDd7fTj mTcgwQ1/uyEzlhmN5EPrUqvhLw5NPOVoMm73P3icJU9DsfeitMigS8taOuKq27SO Mkrc67LSL95C+vH1EXxKWH3/mCZMixQqCDAernCKTSSAFCSHXxZbh7SZvoXOrhkT +GAAuJQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org