$ rpki-client -vvf rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa File: BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa (raw, json) Hash identifier: pspkGPfhH+f5mAliCVv5t4mufNrQX+cYgNKwkWqMa3o= Subject key identifier: FD:61:16:DA:8C:73:F9:5D:45:DE:DB:2B:EF:7D:12:69:22:E4:F5:B8 Certificate issuer: /CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Certificate serial: 0204 Authority key identifier: 94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa Signing time: Thu 21 Nov 2024 01:55:48 +0000 ROA not before: Thu 21 Nov 2024 01:55:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132627 IP address blocks: 43.245.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164A50/serialNumber=94830F940D8DDC7F989B7CAB136283CF432960BD Validity Not Before: Nov 21 01:55:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673e9324-9302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:01:49:67:44:0b:14:0e:ca:0d:5d:02:50: 4b:e8:47:71:62:ab:af:9e:21:05:a2:c4:d9:60:e0: 6c:2f:d6:d5:92:57:a7:46:98:38:34:a6:ff:31:45: 3c:1f:63:66:da:ed:15:3a:25:8f:92:23:9a:90:22: 4f:3d:23:f3:37:0a:3b:ee:f1:7f:d3:8a:2b:6e:0f: 8b:26:4a:b6:b8:3a:dc:b5:5b:62:9c:a0:af:a4:1a: 33:c5:7b:c5:9a:15:fb:86:ec:e6:f5:da:3c:11:62: 0c:32:a3:ea:b0:7c:81:02:56:30:27:c1:2f:06:8c: 17:43:34:71:d8:cd:0b:a5:d2:f6:bd:e5:f2:d2:f8: c5:e4:34:18:0b:e5:4f:db:fa:d2:9f:88:76:c1:2d: 74:e9:26:11:24:a9:78:e4:25:9e:0a:db:b4:49:01: 00:ba:92:7e:5a:d1:b9:eb:0c:97:3a:aa:68:0c:63: e5:14:03:49:03:cf:d0:ab:c9:79:ab:c4:ea:de:b5: b1:3d:03:bc:f4:d5:64:7b:d0:7f:a5:c0:48:b9:8d: 5f:5f:6c:d1:a0:4f:ef:74:d0:79:94:bc:d0:ef:20: 3a:96:b8:88:62:d5:28:44:02:5a:e5:91:27:d0:ae: ce:37:b9:64:61:1b:06:8c:04:7c:9e:9d:af:00:86: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:16:DA:8C:73:F9:5D:45:DE:DB:2B:EF:7D:12:69:22:E4:F5:B8 X509v3 Authority Key Identifier: keyid:94:83:0F:94:0D:8D:DC:7F:98:9B:7C:AB:13:62:83:CF:43:29:60:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lIMPlA2N3H-Ym3yrE2KDz0MpYL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164A50/F7A64B0A187811EDBE469610C4F9AE02/BA4EECF2A7AB11EF86CDC35CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.224.0/22 Signature Algorithm: sha256WithRSAEncryption 90:55:e0:24:4c:59:3f:dc:2a:26:ff:88:d3:70:2d:cc:d3:67: f8:7b:89:08:e9:6a:62:6e:71:74:e2:c6:2e:44:ff:ae:b3:c2: 30:eb:b0:15:b7:94:8a:3a:31:bb:bf:ae:bc:2f:c1:eb:03:63: 39:b0:a2:f1:15:67:c7:60:c1:c7:74:e7:df:8d:46:73:e4:16: 69:e1:b4:0e:97:ce:46:ef:fd:82:3e:67:6b:f2:b5:fb:f5:97: ab:db:d1:59:16:fc:5a:9c:58:ec:e8:bc:fd:50:63:9c:9b:7e: ce:2c:86:64:d5:5e:fd:52:be:01:20:44:e7:f3:21:b5:b7:2f: 8e:0c:8a:f3:96:a5:53:05:11:bb:b9:7a:4f:2b:bf:ce:77:0e: d0:51:bf:79:7d:c4:f2:bb:61:e0:2c:64:99:76:cc:98:e6:43: c5:b7:98:42:84:24:1f:ec:cd:b0:68:0c:97:ed:ef:68:45:94: 6d:b6:1f:62:ff:03:a1:c8:e6:51:40:a0:f0:0a:0f:ea:a3:8d: 77:ea:fd:13:29:29:ca:8c:c5:6d:d1:c5:31:49:f2:05:88:fd: 1e:1b:76:89:a2:1d:99:3f:07:61:c5:b8:9e:90:aa:dc:11:6e: af:07:11:bb:81:ea:75:42:f9:46:cb:5d:a2:54:9f:84:90:df: d8:c3:3d:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRBNTAxMTAvBgNVBAUTKDk0ODMwRjk0MEQ4RERDN0Y5ODlCN0NBQjEzNjI4M0NG NDMyOTYwQkQwHhcNMjQxMTIxMDE1NTQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlOTMyNC05MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAgBSWdECxQOyg1dAlBL6EdxYquvniEFosTZYOBsL9bVklenRpg4NKb/MUU8 H2Nm2u0VOiWPkiOakCJPPSPzNwo77vF/04orbg+LJkq2uDrctVtinKCvpBozxXvF mhX7huzm9do8EWIMMqPqsHyBAlYwJ8EvBowXQzRx2M0LpdL2veXy0vjF5DQYC+VP 2/rSn4h2wS106SYRJKl45CWeCtu0SQEAupJ+WtG56wyXOqpoDGPlFANJA8/Qq8l5 q8Tq3rWxPQO89NVke9B/pcBIuY1fX2zRoE/vdNB5lLzQ7yA6lriIYtUoRAJa5ZEn 0K7ON7lkYRsGjAR8np2vAIYw7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1hFtqM c/ldRd7bK+99Emki5PW4MB8GA1UdIwQYMBaAFJSDD5QNjdx/mJt8qxNig89DKWC9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEE1MC9GN0E2NEIwQTE4 NzgxMUVEQkU0Njk2MTBDNEY5QUUwMi9sSU1QbEEyTjNILVltM3lyRTJLRHowTXBZ TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJTVBsQTJOM0gtWW0zeXJFMktEejBNcFlMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRBNTAvRjdBNjRCMEExODc4MTFFREJFNDY5NjEwQzRGOUFFMDIvQkE0RUVDRjJB N0FCMTFFRjg2Q0RDMzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr9eAwDQYJKoZIhvcNAQELBQADggEBAJBV4CRMWT/cKib/ iNNwLczTZ/h7iQjpamJucXTixi5E/66zwjDrsBW3lIo6Mbu/rrwvwesDYzmwovEV Z8dgwcd059+NRnPkFmnhtA6Xzkbv/YI+Z2vytfv1l6vb0VkW/FqcWOzovP1QY5yb fs4shmTVXv1SvgEgROfzIbW3L44MivOWpVMFEbu5ek8rv853DtBRv3l9xPK7YeAs ZJl2zJjmQ8W3mEKEJB/szbBoDJft72hFlG22H2L/A6HI5lFAoPAKD+qjjXfq/RMp KcqMxW3RxTFJ8gWI/R4bdomiHZk/B2HFuJ6QqtwRbq8HEbuB6nVC+UbLXaJUn4SQ 39jDPVk= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org