$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa File: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (raw, json) Hash identifier: hqa3bLAwVOwmpF9Y6KqNaSGq/0Ts7TL9Rvw8QWvgERw= Subject key identifier: C9:E4:0D:0F:55:B1:D6:ED:7B:0B:7C:85:BE:3A:7E:68:1F:7F:D6:7C Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 7F Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa Signing time: Wed 03 Apr 2024 07:39:13 +0000 ROA not before: Wed 03 Apr 2024 07:39:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45671 IP address blocks: 43.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 06:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Apr 3 07:39:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660d07a1-7290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:5e:14:14:52:36:a4:12:86:92:ac:95:20: b4:7f:d5:3a:20:86:c0:7b:3e:fe:3f:2d:ef:73:d7: 19:e7:78:7e:29:b4:1d:84:15:eb:6d:a7:ec:20:6c: 9e:3e:4c:9c:56:9a:31:d6:54:e9:1a:fe:d6:1e:65: 44:5f:21:7a:2d:5e:87:98:b1:fa:eb:04:77:a3:2b: b2:f6:bf:01:8b:3e:e2:18:c1:da:cc:60:6a:fd:a2: 2e:1e:37:ed:24:a7:ac:2c:c7:8e:ba:00:5e:b3:74: 63:7c:a9:49:56:8f:c7:9a:32:77:a9:09:e3:12:9f: 93:3c:84:cd:5d:d2:5f:83:8b:95:8f:87:6d:89:82: bf:cd:2d:f1:fb:8b:26:97:23:eb:1c:a4:5e:c3:92: 5a:1e:83:ca:99:2e:ce:c6:c1:70:06:7c:12:d4:db: d9:f2:54:b3:61:d2:42:fb:18:5f:12:bf:15:6c:5f: 37:3b:19:34:36:36:fa:b3:13:4d:25:04:38:d9:a4: 49:a4:2e:c1:24:a2:63:ca:bd:17:fd:0a:89:1a:26: c3:b6:a2:e4:23:5f:c2:2d:c9:71:b4:1c:05:9c:a9: d1:28:82:83:a9:d2:29:1b:3b:e2:fc:63:c3:3c:44: d0:08:a8:b2:b3:0e:3f:e8:66:c9:e0:4b:38:b9:e1: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E4:0D:0F:55:B1:D6:ED:7B:0B:7C:85:BE:3A:7E:68:1F:7F:D6:7C X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.99.0/24 Signature Algorithm: sha256WithRSAEncryption 94:04:d1:8a:41:f7:11:9f:98:3a:95:d1:c1:89:e9:22:4b:03: 6f:ac:3e:19:1f:20:57:a9:3c:31:89:85:1f:93:52:26:08:3d: 11:c1:8b:24:df:24:05:72:13:04:18:51:25:36:6d:f0:5f:87: be:de:0f:86:dd:b8:f7:f1:30:a3:76:52:4d:3c:cf:10:14:ca: 01:12:7e:da:ee:61:22:29:5c:6a:f2:e9:1b:a2:2c:a1:bc:b6: 12:46:4f:74:95:b5:18:07:16:72:da:0a:0c:27:bf:24:8d:1c: fd:1d:c9:fc:49:cc:45:2d:6b:70:44:2e:2d:2a:a0:7e:bb:c9: 98:4a:df:3d:02:36:43:92:5e:b5:b7:63:40:ba:3d:6b:6f:12: 2b:ef:5b:82:b6:0d:70:cf:b1:cb:78:73:4d:de:51:ce:b6:9f: 96:97:b1:0f:3e:83:c7:e5:38:f7:25:f9:1c:62:c0:a1:7f:02: 48:15:1f:c2:88:29:15:d1:84:d2:27:8b:a6:86:59:60:c4:68: e5:6b:65:2d:ad:25:20:ec:8a:82:61:2e:11:3e:81:c0:1b:b1: c9:d6:20:aa:e1:dc:cd:5a:7a:8b:f6:48:2a:72:b1:d8:28:12: aa:d6:9c:a7:f0:6d:80:de:ff:3e:de:3e:fa:cc:89:a9:4d:e9: 66:b9:b5:cd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTYyMzExMC8GA1UEBRMoREE3MzY5QjQ5NzIyQkExMzlCN0I2MEYzOUM4OEI0OUJE QkIzNUYzRDAeFw0yNDA0MDMwNzM5MTNaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MGQwN2ExLTcyOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcr14UFFI2pBKGkqyVILR/1ToghsB7Pv4/Le9z1xnneH4ptB2EFettp+wgbJ4+ TJxWmjHWVOka/tYeZURfIXotXoeYsfrrBHejK7L2vwGLPuIYwdrMYGr9oi4eN+0k p6wsx466AF6zdGN8qUlWj8eaMnepCeMSn5M8hM1d0l+Di5WPh22Jgr/NLfH7iyaX I+scpF7Dkloeg8qZLs7GwXAGfBLU29nyVLNh0kL7GF8SvxVsXzc7GTQ2NvqzE00l BDjZpEmkLsEkomPKvRf9CokaJsO2ouQjX8ItyXG0HAWcqdEogoOp0ikbO+L8Y8M8 RNAIqLKzDj/oZsngSzi54fP7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUyeQND1Wx 1u17C3yFvjp+aB9/1nwwHwYDVR0jBBgwFoAU2nNptJciuhObe2DznIi0m9uzXz0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNjIzL0EyNUQ0ODlFNTA0 NzExRUVCNjc3MzY1REM0RjlBRTAyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm5OcHRKY2l1aE9iZTJEem5JaTBtOXV6WHowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi9CQkJFREVGNDZD ODIxMUVFODY2RjVBNzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEACvvYzANBgkqhkiG9w0BAQsFAAOCAQEAlATRikH3EZ+YOpXR wYnpIksDb6w+GR8gV6k8MYmFH5NSJgg9EcGLJN8kBXITBBhRJTZt8F+Hvt4Pht24 9/Ewo3ZSTTzPEBTKARJ+2u5hIilcavLpG6Isoby2EkZPdJW1GAcWctoKDCe/JI0c /R3J/EnMRS1rcEQuLSqgfrvJmErfPQI2Q5JetbdjQLo9a28SK+9bgrYNcM+xy3hz Td5RzraflpexDz6Dx+U49yX5HGLAoX8CSBUfwogpFdGE0ieLpoZZYMRo5WtlLa0l IOyKgmEuET6BwBuxydYgquHczVp6i/ZIKnKx2CgSqtacp/BtgN7/Pt4++syJqU3p Zrm1zQ== -----END CERTIFICATE-----Generated at Thu Apr 25 08:13:18 2024 by rpki-client on console-ams.rpki-client.org