$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/D3F11234E5EB11EEAD1B4222C4F9AE02.roa File: D3F11234E5EB11EEAD1B4222C4F9AE02.roa (raw, json) Hash identifier: yEW8IyoCpV1N/CuZl6smfHkUb8Ny9JkofO3A8FInk7o= Subject key identifier: 2F:54:27:16:B3:6D:FF:19:11:86:C9:74:FA:41:AA:A9:45:B1:57:61 Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Certificate serial: 1849 Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/D3F11234E5EB11EEAD1B4222C4F9AE02.roa Signing time: Tue 19 Mar 2024 12:25:53 +0000 ROA not before: Tue 19 Mar 2024 12:25:53 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 4609 IP address blocks: 43.249.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6217 (0x1849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Validity Not Before: Mar 19 12:25:53 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65f98451-3c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:04:99:c8:7a:99:64:23:3b:bd:77:0f:6f:c0: e9:e7:15:f4:11:b2:5b:21:9e:5c:39:af:6f:68:a1: bd:d8:01:68:db:51:27:8a:bb:fc:7f:17:cd:61:e5: c6:7b:f3:26:79:0a:ed:4d:5f:c9:23:f3:5b:d5:7f: ba:5f:e8:67:e4:f1:e4:0f:a7:ee:e0:79:88:13:d0: ed:42:b7:9f:8a:a8:81:c5:ca:8e:cd:9e:3c:a9:46: a3:e0:3c:2d:90:ae:b4:87:28:33:8a:9b:a6:42:42: 0f:0d:18:67:73:83:f2:88:9d:d7:c7:f1:80:8a:26: 04:41:0a:6f:b1:0c:aa:da:2f:63:c0:d1:87:bb:43: 43:1c:a1:ee:94:f3:de:38:35:35:19:e9:5f:73:89: f3:d5:e3:6a:21:08:b2:80:31:07:2f:f4:fb:87:7c: 20:91:a5:72:07:c3:58:62:89:e5:b7:67:e6:3a:d4: 5c:d3:3e:0e:f8:3b:2b:5d:8f:6d:bf:fd:2a:ec:2a: 76:f8:f1:e5:c9:1b:3c:14:24:7c:79:e5:4e:c5:8f: 18:54:52:98:3d:44:14:3a:da:a4:9b:53:7f:c3:97: 08:14:69:f5:de:e3:66:c7:75:84:67:a2:26:bd:64: 39:b2:a4:8b:0a:c0:e0:a9:bd:16:21:4a:2f:e2:3c: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:27:16:B3:6D:FF:19:11:86:C9:74:FA:41:AA:A9:45:B1:57:61 X509v3 Authority Key Identifier: keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/D3F11234E5EB11EEAD1B4222C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.215.0/24 Signature Algorithm: sha256WithRSAEncryption bf:b6:53:24:a1:89:9f:a2:d2:5d:73:87:be:ae:7c:3d:0c:a0: 2e:a8:8e:a1:bf:71:90:85:60:fa:76:fa:0a:15:95:2f:fb:7a: 03:1a:a3:00:4f:b7:34:40:f6:9f:a9:7a:90:b2:38:33:8f:7d: 2a:70:26:25:66:88:88:c5:e2:6b:52:b0:8a:81:e8:f1:e9:1e: 01:83:2c:70:d3:cd:c7:0a:ca:e5:5b:fa:ce:d6:05:d4:e6:fd: 93:45:2c:a7:f1:6d:e2:d5:27:1f:cb:d3:97:60:76:43:6e:98: c8:2b:3a:b1:13:6f:6d:cd:b7:07:41:66:4b:e8:79:9b:25:6e: 07:92:df:b5:b2:6b:36:a4:ad:84:ee:26:9e:19:8c:1f:8e:11: c7:92:ed:68:26:cf:66:3d:3f:60:51:dd:1b:22:65:d1:7f:d7: 10:54:81:f0:5e:6a:64:40:40:92:52:6c:d3:9e:04:d6:04:b3: 3f:b1:83:25:a9:e7:13:e2:69:4c:08:27:a5:86:b5:76:a1:36: dc:4a:c5:43:7c:36:86:18:7f:97:66:32:47:07:ff:f9:b1:1d: e5:1e:90:19:b1:66:3d:e2:7f:37:81:6f:f4:aa:27:f2:23:ed: 6f:71:86:9f:0e:67:2e:02:90:bc:af:de:78:16:c0:f8:6a:10: 97:ad:80:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD NTQyQTBEOTEwHhcNMjQwMzE5MTIyNTUzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY5ODQ1MS0zYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gSZyHqZZCM7vXcPb8Dp5xX0EbJbIZ5cOa9vaKG92AFo21Enirv8fxfNYeXG e/MmeQrtTV/JI/Nb1X+6X+hn5PHkD6fu4HmIE9DtQrefiqiBxcqOzZ48qUaj4Dwt kK60hygzipumQkIPDRhnc4PyiJ3Xx/GAiiYEQQpvsQyq2i9jwNGHu0NDHKHulPPe ODU1Gelfc4nz1eNqIQiygDEHL/T7h3wgkaVyB8NYYonlt2fmOtRc0z4O+DsrXY9t v/0q7Cp2+PHlyRs8FCR8eeVOxY8YVFKYPUQUOtqkm1N/w5cIFGn13uNmx3WEZ6Im vWQ5sqSLCsDgqb0WIUov4jyguwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC9UJxaz bf8ZEYbJdPpBqqlFsVdhMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvRDNGMTEyMzRF NUVCMTFFRUFEMUI0MjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+dcwDQYJKoZIhvcNAQELBQADggEBAL+2UyShiZ+i0l1z h76ufD0MoC6ojqG/cZCFYPp2+goVlS/7egMaowBPtzRA9p+pepCyODOPfSpwJiVm iIjF4mtSsIqB6PHpHgGDLHDTzccKyuVb+s7WBdTm/ZNFLKfxbeLVJx/L05dgdkNu mMgrOrETb23NtwdBZkvoeZslbgeS37WyazakrYTuJp4ZjB+OEceS7Wgmz2Y9P2BR 3RsiZdF/1xBUgfBeamRAQJJSbNOeBNYEsz+xgyWp5xPiaUwIJ6WGtXahNtxKxUN8 NoYYf5dmMkcH//mxHeUekBmxZj3ifzeBb/SqJ/Ij7W9xhp8OZy4CkLyv3ngWwPhq EJetgJs= -----END CERTIFICATE-----Generated at Fri May 31 20:34:04 2024 by rpki-client on console-ams.rpki-client.org