$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa File: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (raw, json) Hash identifier: cKLqzBD3UNEjua94H34t+S8hZV/aOFg8bXhQVhmFTLs= Subject key identifier: F6:45:30:9D:E8:D4:6D:BF:5A:16:EC:56:F1:22:FC:3F:CF:00:23:23 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0982 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa Signing time: Thu 05 Sep 2024 08:24:46 +0000 ROA not before: Thu 05 Sep 2024 08:24:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 21859 IP address blocks: 43.152.178.0/24 maxlen: 24 101.33.12.0/24 maxlen: 24 101.33.13.0/24 maxlen: 24 101.33.14.0/24 maxlen: 24 101.33.15.0/24 maxlen: 24 240d:c010:14b::/48 maxlen: 48 240d:c010:14c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Sep 5 08:24:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66d96ace-c330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:59:09:3d:59:a7:09:b1:14:d2:68:cf:9f:01: 35:ba:97:b1:16:6a:48:6b:e2:d1:0b:df:c9:a0:cb: 06:06:7b:82:28:16:0b:f1:db:57:fc:99:95:6d:ca: 3d:df:21:14:67:3a:41:b3:7b:bc:2d:1e:2a:75:04: cd:c0:f8:36:66:f2:be:e5:07:b4:51:fb:3d:59:b1: fc:4c:a9:8e:2b:83:94:af:5c:f9:d7:0c:f6:43:7d: 77:1e:b7:59:36:a4:75:69:21:93:a3:8f:50:49:f2: 3b:c0:7f:ba:5a:0d:dd:43:00:f4:ae:a8:70:fa:55: d4:fa:2f:3c:de:74:14:d9:13:2c:52:59:ab:d9:d6: 88:1f:2d:dc:c4:59:4e:72:65:ec:0a:f1:e2:3f:22: 60:3f:d9:af:70:05:d5:38:65:3b:08:4d:04:57:c6: 9f:23:48:15:aa:75:81:5c:e4:b3:ea:b9:78:cb:99: d2:33:73:89:39:20:57:e7:9f:d5:ef:8f:d2:7e:b9: 1b:8b:e9:0e:5a:54:1e:9e:7a:52:15:ce:79:ac:9d: 33:76:3f:72:36:97:39:d7:a6:db:a0:27:db:3c:a5: 5f:ac:d2:0f:16:d3:30:d4:67:b8:4c:83:d9:50:cc: 1c:98:32:3a:6b:d7:00:06:e4:cb:65:40:37:1e:9d: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:30:9D:E8:D4:6D:BF:5A:16:EC:56:F1:22:FC:3F:CF:00:23:23 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.152.178.0/24 101.33.12.0/22 IPv6: 240d:c010:14b::-240d:c010:14c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:f1:c8:6c:d7:43:4c:73:20:92:81:4f:21:ef:91:a4:24:6d: b6:2f:58:b1:82:5b:e7:be:34:2d:65:99:d7:2e:48:7a:c6:86: 43:98:53:6c:d1:72:27:83:00:b8:e3:b2:df:6c:98:7a:ce:66: 83:b7:c9:9c:51:ae:d5:bf:9d:fc:2f:e9:ce:22:ce:0c:0b:9f: 53:45:05:72:6d:ac:9b:f1:dd:d1:cf:63:b3:22:01:38:dc:ae: bc:83:e2:d7:0b:00:ed:7e:a7:3a:9a:09:2b:86:0e:3b:83:b6: 6d:6b:1b:c0:8d:27:5c:5d:90:0c:6d:f2:a5:04:b8:24:56:a9: 96:bb:0d:16:fb:bb:43:8d:dc:f5:05:0c:f4:44:07:94:4f:33: 5e:f9:01:91:71:88:d8:ad:e0:c5:b5:9f:83:75:c3:66:63:48: 8c:5e:98:79:1a:2e:ec:02:77:2c:9a:ca:28:3f:36:65:5a:b0: 3e:e8:aa:a2:ff:ed:de:65:22:fa:2f:59:0b:e0:0f:a6:4a:76: 9c:ad:0c:ca:16:39:5a:d4:ed:45:7c:4a:c5:c8:60:04:a3:bd: 91:62:2c:98:d7:82:3b:1c:b2:e9:09:fd:35:bd:41:26:19:1e: e4:c2:50:c1:b3:dd:be:03:47:4a:b9:c8:f6:99:f9:f3:b2:ec: e7:80:f6:a5 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjQwOTA1MDgyNDQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5NmFjZS1jMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VkJPVmnCbEU0mjPnwE1upexFmpIa+LRC9/JoMsGBnuCKBYL8dtX/JmVbco9 3yEUZzpBs3u8LR4qdQTNwPg2ZvK+5Qe0Ufs9WbH8TKmOK4OUr1z51wz2Q313HrdZ NqR1aSGTo49QSfI7wH+6Wg3dQwD0rqhw+lXU+i883nQU2RMsUlmr2daIHy3cxFlO cmXsCvHiPyJgP9mvcAXVOGU7CE0EV8afI0gVqnWBXOSz6rl4y5nSM3OJOSBX55/V 74/Sfrkbi+kOWlQennpSFc55rJ0zdj9yNpc516bboCfbPKVfrNIPFtMw1Ge4TIPZ UMwcmDI6a9cABuTLZUA3Hp0b4wIDAQABo4ICtzCCArMwHQYDVR0OBBYEFPZFMJ3o 1G2/WhbsVvEi/D/PACMjMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvOTNFRTA0N0U0 QkI1MTFFRTkzMDlBQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBAArmLIDBAJlIQwwGgQCAAIwFDASAwcAJA3AEAFLAwcAJA3A EAFMMA0GCSqGSIb3DQEBCwUAA4IBAQAA8chs10NMcyCSgU8h75GkJG22L1ixglvn vjQtZZnXLkh6xoZDmFNs0XIngwC447LfbJh6zmaDt8mcUa7Vv538L+nOIs4MC59T RQVybayb8d3Rz2OzIgE43K68g+LXCwDtfqc6mgkrhg47g7ZtaxvAjSdcXZAMbfKl BLgkVqmWuw0W+7tDjdz1BQz0RAeUTzNe+QGRcYjYreDFtZ+DdcNmY0iMXph5Gi7s AncsmsooPzZlWrA+6Kqi/+3eZSL6L1kL4A+mSnacrQzKFjla1O1FfErFyGAEo72R YiyY14I7HLLpCf01vUEmGR7kwlDBs92+A0dKucj2mfnzsuzngPal -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:40 2024 by rpki-client on console-ams.rpki-client.org