$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DB5C4650ED3011EEB4F92916C4F9AE02.roa File: DB5C4650ED3011EEB4F92916C4F9AE02.roa (raw, json) Hash identifier: wbmKlz7JuWdizjlv/qgPJn2eE2B+Uw8bD0D4pnz83gQ= Subject key identifier: D6:C8:4C:F2:56:D1:DF:8A:91:01:79:51:97:19:A6:D0:CA:E7:18:09 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0297 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DB5C4650ED3011EEB4F92916C4F9AE02.roa Signing time: Thu 28 Mar 2024 18:27:39 +0000 ROA not before: Thu 28 Mar 2024 18:27:39 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150142 IP address blocks: 43.243.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Mar 28 18:27:39 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6605b69b-06c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:c8:49:9f:01:b8:7e:d8:83:5e:5a:02:da: 5a:54:0f:fa:91:04:de:b0:41:db:72:5f:9b:cb:2d: 3b:e6:01:b0:9c:42:de:bb:41:fb:7c:bc:8c:3d:02: 27:bb:05:82:03:ae:ff:b1:6e:1d:c7:91:91:b8:d1: e2:18:d0:09:b8:0f:51:38:f4:b8:b6:97:96:8d:f2: 00:bd:87:bc:29:35:23:49:21:24:b2:21:18:c0:d3: 53:2f:50:c7:0f:09:82:ca:8e:93:16:eb:cf:6a:6e: a0:a9:85:47:10:ee:31:f9:e9:65:d5:93:6d:cc:5e: 9e:b2:5c:8f:b3:86:65:2a:32:20:80:28:cb:81:d9: 2d:91:ff:17:97:de:dc:d1:6b:44:98:4c:ff:43:2d: f2:6f:17:76:d9:98:bb:2d:00:bc:d8:29:65:dc:f6: 26:ef:44:4b:87:f5:64:89:8f:1b:3b:7a:d8:5b:a2: d6:c2:f8:d9:12:50:f7:80:e8:98:69:cd:18:2f:3b: 4a:c5:69:49:2f:95:1d:ce:6c:58:cf:0f:82:d1:ff: f6:15:03:4a:5e:83:f6:4e:e5:5a:c9:23:19:fe:4e: d4:4a:82:0c:74:33:66:3c:e3:07:c3:ac:d9:07:b0: e3:aa:8c:2c:12:e7:7d:a3:9f:26:5e:54:52:90:8c: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C8:4C:F2:56:D1:DF:8A:91:01:79:51:97:19:A6:D0:CA:E7:18:09 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/DB5C4650ED3011EEB4F92916C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.193.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:af:63:0d:2b:b0:3f:5d:49:5d:c1:13:cd:77:97:81:c3:87: 34:5b:2b:7d:d1:a5:ee:d4:2c:9b:84:3f:95:68:f7:5d:81:0a: 21:0b:f2:09:11:b6:71:88:31:ba:75:2d:95:f1:35:2a:a9:57: c3:66:da:96:a7:e0:94:b7:04:b3:2b:3d:93:d5:71:eb:86:28: 77:41:96:a0:78:62:58:a5:57:6d:dc:b6:5e:2e:fe:8a:3c:15: fa:9c:3f:31:00:83:4c:a7:4c:d8:b7:c6:8a:f8:93:2e:c3:f2: 1f:88:ec:09:01:18:fc:a0:d1:70:9b:87:6f:5b:da:8f:5f:71: 86:1f:b2:18:7c:9b:47:7c:bc:7f:b0:be:da:21:18:9f:44:80: 91:21:32:ed:d0:db:ed:30:74:39:4c:35:1c:b7:46:e3:43:d4: 64:d2:a3:1e:6f:e2:06:07:1b:68:3e:41:71:81:3f:db:c7:e1: b8:1a:ab:3c:39:24:dd:e4:4f:e5:36:94:74:58:0f:68:57:67: 2e:c6:96:f3:82:e2:1f:44:9c:50:6d:ba:39:1b:31:7f:ef:54: f3:ca:a3:52:73:ed:7a:c4:22:81:b1:a9:ee:21:44:12:55:c0: e2:28:b4:a2:d1:d8:4a:36:ec:b0:44:ac:36:8c:45:42:07:bd: 33:ad:61:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQwMzI4MTgyNzM5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1YjY5Yi0wNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0TISZ8BuH7Yg15aAtpaVA/6kQTesEHbcl+byy075gGwnELeu0H7fLyMPQIn uwWCA67/sW4dx5GRuNHiGNAJuA9ROPS4tpeWjfIAvYe8KTUjSSEksiEYwNNTL1DH DwmCyo6TFuvPam6gqYVHEO4x+ell1ZNtzF6eslyPs4ZlKjIggCjLgdktkf8Xl97c 0WtEmEz/Qy3ybxd22Zi7LQC82Cll3PYm70RLh/VkiY8bO3rYW6LWwvjZElD3gOiY ac0YLztKxWlJL5UdzmxYzw+C0f/2FQNKXoP2TuVaySMZ/k7USoIMdDNmPOMHw6zZ B7DjqowsEud9o58mXlRSkIyO3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNbITPJW 0d+KkQF5UZcZptDK5xgJMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvREI1QzQ2NTBF RDMwMTFFRUI0RjkyOTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88EwDQYJKoZIhvcNAQELBQADggEBAD6vYw0rsD9dSV3B E813l4HDhzRbK33Rpe7ULJuEP5Vo912BCiEL8gkRtnGIMbp1LZXxNSqpV8Nm2pan 4JS3BLMrPZPVceuGKHdBlqB4YlilV23ctl4u/oo8FfqcPzEAg0ynTNi3xor4ky7D 8h+I7AkBGPyg0XCbh29b2o9fcYYfshh8m0d8vH+wvtohGJ9EgJEhMu3Q2+0wdDlM NRy3RuND1GTSox5v4gYHG2g+QXGBP9vH4bgaqzw5JN3kT+U2lHRYD2hXZy7GlvOC 4h9EnFBtujkbMX/vVPPKo1Jz7XrEIoGxqe4hRBJVwOIotKLR2Eo27LBErDaMRUIH vTOtYco= -----END CERTIFICATE-----Generated at Sat May 11 05:27:32 2024 by rpki-client on console-fra.rpki-client.org