$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa File: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (raw, json) Hash identifier: Mse2fnTgzH7IcGff7hL/OaUafi6TDhnPkojb8Rkr2XY= Subject key identifier: 89:AF:93:92:12:90:19:BD:53:E2:8D:33:47:9B:63:47:6F:E1:8C:E2 Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 0664 Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa Signing time: Thu 20 Jun 2024 16:03:17 +0000 ROA not before: Thu 20 Jun 2024 16:03:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133443 IP address blocks: 43.239.72.0/24 maxlen: 24 43.239.73.0/24 maxlen: 24 43.239.74.0/24 maxlen: 24 43.239.75.0/24 maxlen: 24 103.229.84.0/24 maxlen: 24 103.229.85.0/24 maxlen: 24 103.229.86.0/24 maxlen: 24 103.229.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: Jun 20 16:03:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=667452c5-bceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:b2:25:88:a8:01:43:11:d1:75:db:89:b1: 04:2a:35:b2:b6:cc:93:cc:e5:73:bb:26:d3:5d:7b: d0:5a:9d:fe:ba:e3:a6:3f:03:47:90:11:23:10:d8: da:bb:9c:d9:3d:26:4f:17:06:65:04:68:ed:95:da: 23:16:d6:a1:db:d6:cf:00:0e:1e:02:69:82:70:2c: 4e:ab:b1:98:86:5b:3c:8c:94:42:dc:86:55:23:68: 25:b2:46:6f:32:62:08:d9:29:fa:2d:85:a9:bf:76: 7a:7a:5b:4d:7b:3a:f7:57:93:c4:7a:38:7a:98:1f: e2:c7:f9:ac:87:c3:52:84:f5:09:b2:09:d7:4f:32: a8:fe:3a:79:91:03:0d:a0:2a:36:f5:41:a0:f6:71: 0f:b8:ff:49:4d:27:7e:94:a9:e2:c4:94:c0:4d:be: 91:5f:49:1c:97:0f:63:e4:0e:0c:0c:3a:f3:1a:54: dc:83:8d:52:d4:f1:e5:50:bd:ab:2f:69:ab:0e:39: 09:84:be:d3:3c:67:9e:83:e3:0e:4f:83:cf:a5:56: 20:e9:89:fb:9a:af:59:72:75:3a:bf:59:e1:01:35: ac:b8:76:cb:5c:1d:3b:7b:f0:84:75:f7:36:ba:2b: ba:c1:5c:5c:0f:96:38:e7:8e:55:dd:20:b5:db:86: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AF:93:92:12:90:19:BD:53:E2:8D:33:47:9B:63:47:6F:E1:8C:E2 X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.72.0/22 103.229.84.0/22 Signature Algorithm: sha256WithRSAEncryption 73:3a:b7:7d:6b:cc:4b:7d:39:d8:e2:cc:94:f5:17:00:0a:2b: 14:e8:c7:0a:21:83:d9:ad:b8:cd:77:49:3b:30:5e:eb:7d:bc: ee:f8:fb:7c:ed:2d:3d:f8:73:08:7a:6c:8c:82:5b:e3:4e:ff: 0d:fd:ff:bf:f2:eb:10:fa:90:5b:8e:b9:ca:1b:f4:79:6a:2e: 1b:ab:15:b9:d7:92:b9:95:8c:9a:51:89:30:bd:96:64:d6:25: 3e:fd:5f:76:50:b6:9e:02:c9:05:42:61:a8:ba:e9:b3:32:28: a4:f4:2b:94:d8:34:e2:41:c7:f6:51:bf:4b:4b:66:30:59:db: a2:ba:fa:d1:54:bf:ca:9f:6d:cb:c1:3d:16:d8:57:5c:7f:13: 2b:a0:8c:6e:bb:dd:1d:b0:91:fc:ea:49:cd:0a:cf:87:33:02: d3:ab:83:d6:97:a8:fd:13:76:e4:df:9d:28:2d:b6:07:d0:45: c7:66:19:d1:c4:26:8f:57:b1:20:9a:c7:32:43:e2:97:dd:2d: f5:68:af:d4:c0:b3:f8:b4:6a:2c:71:07:62:66:99:20:1b:22: 02:00:2f:93:a6:5e:91:62:db:bb:7e:ac:41:14:d3:c1:e5:c0: b5:91:99:2c:f8:68:c3:3d:6b:c5:e6:ab:ce:c7:cc:b8:5c:59: 6c:4b:60:65 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjQwNjIwMTYwMzE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0NTJjNS1iY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslSyJYioAUMR0XXbibEEKjWytsyTzOVzuybTXXvQWp3+uuOmPwNHkBEjENja u5zZPSZPFwZlBGjtldojFtah29bPAA4eAmmCcCxOq7GYhls8jJRC3IZVI2glskZv MmII2Sn6LYWpv3Z6eltNezr3V5PEejh6mB/ix/msh8NShPUJsgnXTzKo/jp5kQMN oCo29UGg9nEPuP9JTSd+lKnixJTATb6RX0kclw9j5A4MDDrzGlTcg41S1PHlUL2r L2mrDjkJhL7TPGeeg+MOT4PPpVYg6Yn7mq9ZcnU6v1nhATWsuHbLXB07e/CEdfc2 uiu6wVxcD5Y4545V3SC124bsqQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFImvk5IS kBm9U+KNM0ebY0dv4YziMB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM4MjQvQkEwRUZFNTJGRDI1MTFFNDlEOTMyNzNCQzRGOUFFMDIvNEJCNjEwQzJF MTY1MTFFQzhFREY2NjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr70gDBAJn5VQwDQYJKoZIhvcNAQELBQADggEBAHM6t31r zEt9OdjizJT1FwAKKxToxwohg9mtuM13STswXut9vO74+3ztLT34cwh6bIyCW+NO /w39/7/y6xD6kFuOucob9HlqLhurFbnXkrmVjJpRiTC9lmTWJT79X3ZQtp4CyQVC Yai66bMyKKT0K5TYNOJBx/ZRv0tLZjBZ26K6+tFUv8qfbcvBPRbYV1x/EyugjG67 3R2wkfzqSc0Kz4czAtOrg9aXqP0TduTfnSgttgfQRcdmGdHEJo9XsSCaxzJD4pfd LfVor9TAs/i0aixxB2JmmSAbIgIAL5OmXpFi27t+rEEU08HlwLWRmSz4aMM9a8Xm q87HzLhcWWxLYGU= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org