$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa File: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (raw, json) Hash identifier: MnBCnb88Lb1soYhMr2JBZDZOHnyxIxINjkfdJ2fBlW0= Subject key identifier: E5:86:FF:F9:A5:42:20:C0:18:E8:64:8B:58:81:FB:05:76:76:5C:A0 Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Certificate serial: 0331 Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa Signing time: Thu 03 Oct 2024 01:34:42 +0000 ROA not before: Thu 03 Oct 2024 01:34:42 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 133794 IP address blocks: 43.251.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8 Validity Not Before: Oct 3 01:34:42 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fdf4b2-6d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:15:05:f0:fa:94:58:46:83:49:ae:06:7e: ed:f5:4a:fd:3f:ad:0d:75:b0:44:a5:08:27:53:97: fc:95:38:55:a8:ea:99:6b:95:5b:76:c3:74:4e:18: 36:45:8a:cc:69:77:11:00:b7:df:01:e3:f9:47:4a: 7c:bd:1f:8d:0b:22:90:01:17:e9:a4:89:4d:09:0a: f8:a1:ce:d2:07:ff:ff:aa:03:25:65:5a:41:ae:6d: 38:ea:19:10:bc:e0:c5:3d:e7:12:65:af:87:df:fe: f8:bf:22:fe:d8:e0:0f:24:28:6f:75:22:80:3a:61: c6:be:e4:2e:d1:d8:32:13:79:68:81:35:3f:8a:86: 35:1b:24:06:50:74:2a:a7:b1:ee:82:80:81:15:e1: ba:6f:d2:44:23:b1:dd:ae:33:e0:e5:8a:d1:28:06: 39:67:c9:da:b5:ca:06:ec:96:f6:1c:e6:40:a0:9e: 8a:1d:51:0f:c2:b0:ee:68:ae:28:d9:f7:1d:ed:16: 04:9d:0e:e6:c9:9f:5f:1a:3c:45:e8:81:a1:18:69: 41:11:23:5a:c2:c7:9c:f4:79:f6:65:3a:0d:91:5a: fd:06:83:74:8c:ba:5e:13:d1:19:39:33:58:e1:28: 94:93:62:39:c4:c2:23:4e:c7:eb:92:eb:3f:66:00: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:86:FF:F9:A5:42:20:C0:18:E8:64:8B:58:81:FB:05:76:76:5C:A0 X509v3 Authority Key Identifier: keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/B0A47CAE7DA711EFB7190E26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.240.0/22 Signature Algorithm: sha256WithRSAEncryption 35:3c:29:3b:16:b5:ad:9b:5d:24:85:5b:26:84:50:03:fa:73: 60:87:5c:53:2b:ea:9f:94:f0:d0:8e:56:62:11:af:eb:03:17: 01:73:e2:08:a5:89:6b:3d:49:fd:80:a5:59:8b:95:91:2a:28: 2d:f6:8c:be:fc:bd:5d:b6:40:df:cb:1d:50:97:df:3a:31:9b: 5a:1a:9a:f9:31:b3:b0:52:6f:a0:9f:cc:ce:0a:c1:69:43:8f: ca:70:ab:b7:d8:11:79:19:15:85:2e:10:83:1a:5f:6e:f9:28: c8:9d:53:7b:f5:e9:eb:56:4c:4f:f7:4d:c0:c4:88:11:ec:87: cd:10:7d:3a:f2:22:62:77:2b:88:e5:d2:37:23:f5:f0:69:7f: 0b:46:ca:f5:1f:53:fa:3d:f6:ec:42:24:57:fc:62:0b:fe:2d: 69:64:46:d9:8b:6c:8b:9f:18:3d:68:5e:06:63:ef:63:63:fa: c5:92:53:c4:5a:6e:d0:4a:64:b3:55:8e:f2:5f:09:1a:7f:c0: 3e:65:aa:5d:2a:95:d5:59:e5:a7:61:60:d0:46:b3:99:6d:f5: 10:43:58:d7:73:80:46:e0:7d:87:2a:35:be:1a:bc:79:13:bd: 95:b2:ca:2e:b2:9a:2c:ef:38:3b:b7:9c:94:02:dd:90:33:93: 47:07:46:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5QTAxMTAvBgNVBAUTKDM3RTAzNTI0QjU4NDdEQkVBRDAwRkUzNzhDNDZBQkQw Q0E3MDQ1RjgwHhcNMjQxMDAzMDEzNDQyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZkZjRiMi02ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuucVBfD6lFhGg0muBn7t9Ur9P60NdbBEpQgnU5f8lThVqOqZa5VbdsN0Thg2 RYrMaXcRALffAeP5R0p8vR+NCyKQARfppIlNCQr4oc7SB///qgMlZVpBrm046hkQ vODFPecSZa+H3/74vyL+2OAPJChvdSKAOmHGvuQu0dgyE3logTU/ioY1GyQGUHQq p7HugoCBFeG6b9JEI7HdrjPg5YrRKAY5Z8natcoG7Jb2HOZAoJ6KHVEPwrDuaK4o 2fcd7RYEnQ7myZ9fGjxF6IGhGGlBESNawsec9Hn2ZToNkVr9BoN0jLpeE9EZOTNY 4SiUk2I5xMIjTsfrkus/ZgDvlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOWG//ml QiDAGOhki1iB+wV2dlygMB8GA1UdIwQYMBaAFDfgNSS1hH2+rQD+N4xGq9DKcEX4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTlBMC80MEVEQTExRTlB RTgxMUVDOTc0QjQ5MUNDNEY5QUUwMi9OLUExSkxXRWZiNnRBUDQzakVhcjBNcHdS ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tQTFKTFdFZmI2dEFQNDNqRWFyME1wd1JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk5QTAvNDBFREExMUU5QUU4MTFFQzk3NEI0OTFDQzRGOUFFMDIvQjBBNDdDQUU3 REE3MTFFRkI3MTkwRTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr+/AwDQYJKoZIhvcNAQELBQADggEBADU8KTsWta2bXSSF WyaEUAP6c2CHXFMr6p+U8NCOVmIRr+sDFwFz4giliWs9Sf2ApVmLlZEqKC32jL78 vV22QN/LHVCX3zoxm1oamvkxs7BSb6CfzM4KwWlDj8pwq7fYEXkZFYUuEIMaX275 KMidU3v16etWTE/3TcDEiBHsh80QfTryImJ3K4jl0jcj9fBpfwtGyvUfU/o99uxC JFf8Ygv+LWlkRtmLbIufGD1oXgZj72Nj+sWSU8RabtBKZLNVjvJfCRp/wD5lql0q ldVZ5adhYNBGs5lt9RBDWNdzgEbgfYcqNb4avHkTvZWyyi6ymizvODu3nJQC3ZAz k0cHRgM= -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org