$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa File: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (raw, json) Hash identifier: wUUDbKl5DBlIOCnpXVMppqzFuQs2gP+ePZuJ3HAFhSQ= Subject key identifier: F0:EF:8B:B7:83:9C:DC:EB:D1:9A:57:88:74:11:7B:2B:00:80:54:DE Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 0595 Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa Signing time: Fri 26 May 2023 16:24:04 +0000 ROA not before: Fri 26 May 2023 16:24:04 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 133443 IP address blocks: 43.239.72.0/24 maxlen: 24 43.239.73.0/24 maxlen: 24 43.239.74.0/24 maxlen: 24 43.239.75.0/24 maxlen: 24 103.229.84.0/24 maxlen: 24 103.229.85.0/24 maxlen: 24 103.229.86.0/24 maxlen: 24 103.229.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: May 26 16:24:04 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6470dd24-7b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:52:5a:86:8b:e1:4c:0b:d4:0e:b7:d8:a8: 03:41:59:6b:c0:98:f9:e7:f2:1d:6e:ee:c7:13:e2: d7:b8:60:a2:c1:65:e4:51:53:96:83:e9:0b:90:08: cd:bc:ee:a7:b1:b6:36:c2:b6:dd:b3:81:71:80:9c: 00:1c:0a:30:2b:54:c1:3e:33:16:0a:a9:5c:5e:06: 6d:15:8f:60:70:c9:94:f5:5f:03:24:92:6a:6a:34: a0:c1:d0:01:48:92:7f:7d:df:69:75:ba:07:b7:1e: 07:71:3d:a5:55:4f:5d:b0:66:13:51:f3:5f:4a:88: 9d:00:6b:d9:b0:0b:ed:9d:01:11:33:8d:06:30:6d: 91:a9:1e:b6:7b:80:a2:44:a0:38:bf:6c:e5:76:74: 58:54:4a:56:33:dd:47:3b:58:4e:11:96:6e:6e:49: b4:89:14:1d:f7:9c:1a:59:bf:94:08:29:b0:db:e6: ab:bd:89:b8:0f:83:ed:c3:93:37:68:d0:c9:92:89: 57:65:f6:db:17:52:44:24:7d:3b:d1:e1:04:8f:d6: e3:21:04:29:29:15:55:6c:9a:a0:98:46:1d:73:46: cc:e2:04:ea:35:f4:af:fa:fb:89:8a:40:01:53:77: bf:b2:a0:a3:ee:9c:74:f6:94:c0:d5:59:7e:a4:e6: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EF:8B:B7:83:9C:DC:EB:D1:9A:57:88:74:11:7B:2B:00:80:54:DE X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.72.0/22 103.229.84.0/22 Signature Algorithm: sha256WithRSAEncryption a5:68:67:22:37:36:5a:c9:d9:f4:23:15:02:db:6e:51:8d:7b: d8:d6:94:82:cf:b2:a3:9a:c8:55:85:00:c8:3f:6e:18:5b:57: fe:0f:8b:4b:90:1e:bf:a3:cc:96:e1:3b:63:d5:8a:14:97:9c: b2:cd:a8:81:f3:0b:69:6d:7b:12:d7:fd:f2:61:8c:92:1c:0e: ae:95:05:b4:ab:1e:d3:58:9c:f0:4c:d8:29:a7:97:72:ab:d0: 5b:bd:32:9d:50:cf:eb:42:b0:66:22:57:f8:93:d2:d9:06:8b: 07:52:5b:71:15:e3:5f:4b:1b:ab:6f:54:ff:c4:6d:b6:05:20: 8d:26:69:e9:9e:a8:e8:c9:78:cf:0b:8c:db:49:0a:98:64:8b: 0c:4f:19:5a:f2:cd:a0:6f:c0:77:76:b0:08:d6:36:0e:61:fa: d7:0f:41:58:11:d0:e4:bc:5b:96:1a:54:5f:83:51:6f:44:c7: 53:1d:7d:d6:5b:e9:35:db:2a:e9:b4:b6:85:ad:72:42:d1:72: 87:11:43:d5:32:b3:e3:94:27:c0:7b:0c:a9:33:e8:b9:9c:c6: e3:31:7f:f5:74:ac:eb:57:6a:bb:8c:1e:8f:a3:33:46:d8:13: cf:f0:7e:d6:95:25:0d:00:10:12:33:4b:b9:7a:4e:79:18:7f: f7:c0:77:db -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjMwNTI2MTYyNDA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcwZGQyNC03YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIVSWoaL4UwL1A632KgDQVlrwJj55/Idbu7HE+LXuGCiwWXkUVOWg+kLkAjN vO6nsbY2wrbds4FxgJwAHAowK1TBPjMWCqlcXgZtFY9gcMmU9V8DJJJqajSgwdAB SJJ/fd9pdboHtx4HcT2lVU9dsGYTUfNfSoidAGvZsAvtnQERM40GMG2RqR62e4Ci RKA4v2zldnRYVEpWM91HO1hOEZZubkm0iRQd95waWb+UCCmw2+arvYm4D4Ptw5M3 aNDJkolXZfbbF1JEJH070eEEj9bjIQQpKRVVbJqgmEYdc0bM4gTqNfSv+vuJikAB U3e/sqCj7px09pTA1Vl+pObGFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPDvi7eD nNzr0ZpXiHQReysAgFTeMB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM4MjQvQkEwRUZFNTJGRDI1MTFFNDlEOTMyNzNCQzRGOUFFMDIvNEJCNjEwQzJF MTY1MTFFQzhFREY2NjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr70gDBAJn5VQwDQYJKoZIhvcNAQELBQADggEBAKVoZyI3 NlrJ2fQjFQLbblGNe9jWlILPsqOayFWFAMg/bhhbV/4Pi0uQHr+jzJbhO2PVihSX nLLNqIHzC2ltexLX/fJhjJIcDq6VBbSrHtNYnPBM2Cmnl3Kr0Fu9Mp1Qz+tCsGYi V/iT0tkGiwdSW3EV419LG6tvVP/EbbYFII0maemeqOjJeM8LjNtJCphkiwxPGVry zaBvwHd2sAjWNg5h+tcPQVgR0OS8W5YaVF+DUW9Ex1MdfdZb6TXbKum0toWtckLR cocRQ9Uys+OUJ8B7DKkz6LmcxuMxf/V0rOtXaruMHo+jM0bYE8/wftaVJQ0AEBIz S7l6TnkYf/fAd9s= -----END CERTIFICATE-----Generated at Fri May 24 18:22:57 2024 by rpki-client on console-ams.rpki-client.org