$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/5FEAFF2082EB11EEB854FA63C4F9AE02.roa File: 5FEAFF2082EB11EEB854FA63C4F9AE02.roa (raw, json) Hash identifier: fwD/D4w981v9C46e6Nzw5iG3uYBN5ATHjRuKjYF4jO4= Subject key identifier: 91:2B:27:22:FE:71:86:41:59:0B:F8:E2:23:77:71:63:46:5E:C3:AD Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0369 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/5FEAFF2082EB11EEB854FA63C4F9AE02.roa Signing time: Mon 22 Jul 2024 09:25:17 +0000 ROA not before: Mon 22 Jul 2024 09:25:17 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9009 IP address blocks: 43.228.156.0/24 maxlen: 24 43.228.159.0/24 maxlen: 24 103.47.144.0/24 maxlen: 24 103.47.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Jul 22 09:25:17 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=669e257d-ed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:b8:4c:5c:15:9a:5e:cc:e0:04:2a:54:b1: 93:07:62:ce:87:45:dd:41:26:f1:8a:ab:28:92:dd: a9:75:27:26:b9:71:da:ed:21:0d:d4:6d:44:d5:1c: 6d:f0:13:a6:bf:be:1c:92:e6:0c:20:75:bb:a2:4f: 88:07:ae:c1:42:cc:cc:27:94:35:db:7d:e3:84:09: 1f:e3:11:f9:d3:e7:48:a7:10:b2:71:79:7a:50:7f: f5:c9:ce:e0:28:88:ea:5f:87:e6:d3:7d:46:6b:4d: da:e1:6e:26:9f:4f:ad:5b:d0:18:33:13:b3:0c:5f: b4:ae:b5:44:8d:13:81:22:93:6a:62:b4:ae:37:77: 18:97:ae:a4:f8:65:a0:66:4e:14:59:87:ed:17:fb: 29:4f:59:f8:41:69:a9:ae:50:be:b9:71:98:b3:3b: b5:78:06:ba:e2:95:09:b1:99:29:58:ad:dc:55:b6: 04:5e:da:ac:3e:d5:ed:5c:da:40:7d:49:4d:65:16: 07:2a:f5:c1:7e:62:18:42:ce:8c:f3:08:1c:ab:d3: 5b:b5:f6:c2:f2:62:de:23:b1:7e:84:74:ae:78:3c: 28:0a:19:44:1b:9d:4f:20:1c:39:d2:d3:4e:24:43: 79:fe:15:a7:09:72:fe:c1:e1:d2:cf:ec:c5:73:4e: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:27:22:FE:71:86:41:59:0B:F8:E2:23:77:71:63:46:5E:C3:AD X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/5FEAFF2082EB11EEB854FA63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.156.0/24 43.228.159.0/24 103.47.144.0/24 103.47.146.0/24 Signature Algorithm: sha256WithRSAEncryption 88:34:a4:92:64:6a:fc:bf:82:7c:b2:10:42:3e:d4:b0:6f:a9: cc:3c:21:d1:be:23:ce:55:41:4a:64:3f:4a:1e:80:09:fa:4e: ab:2c:93:66:53:b0:97:0e:06:b9:c1:b1:27:7b:70:ce:ab:6d: d2:4e:cd:8b:d5:2c:31:06:a6:5a:8b:fd:65:39:fc:73:7e:ed: ce:ec:f6:eb:c5:d7:f7:3e:0c:38:ba:6e:14:4b:99:33:7c:4a: 71:04:02:88:83:0b:88:2e:c7:a9:6e:6c:df:f5:9c:c4:16:bb: b2:68:70:d0:54:34:e5:27:cc:bf:f9:00:c4:b5:4e:83:61:85: 62:2a:51:d1:09:aa:3e:89:fd:4a:46:1b:f2:bc:a5:35:02:03: 34:5f:2a:35:da:73:e1:18:0e:36:9a:49:eb:65:37:7c:53:1d: cf:7e:61:1a:90:d8:6e:b8:8c:a7:ee:06:1b:cb:d7:ab:b8:08: fe:10:61:93:18:9c:a6:17:61:fc:82:1e:7a:94:10:63:98:97: 7b:d0:89:1b:e0:f3:76:a8:07:3a:c7:c6:d8:40:02:da:3c:82: 55:57:62:ed:a5:2b:a2:f7:08:c0:12:b9:93:60:17:13:6a:b0: 4d:d5:fc:97:1f:cd:5d:59:73:12:24:f0:db:b4:40:f2:05:68: fa:03:b0:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjQwNzIyMDkyNTE3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllMjU3ZC1lZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG64TFwVml7M4AQqVLGTB2LOh0XdQSbxiqsokt2pdScmuXHa7SEN1G1E1Rxt 8BOmv74ckuYMIHW7ok+IB67BQszMJ5Q1233jhAkf4xH50+dIpxCycXl6UH/1yc7g KIjqX4fm031Ga03a4W4mn0+tW9AYMxOzDF+0rrVEjROBIpNqYrSuN3cYl66k+GWg Zk4UWYftF/spT1n4QWmprlC+uXGYszu1eAa64pUJsZkpWK3cVbYEXtqsPtXtXNpA fUlNZRYHKvXBfmIYQs6M8wgcq9NbtfbC8mLeI7F+hHSueDwoChlEG51PIBw50tNO JEN5/hWnCXL+weHSz+zFc07v+wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJErJyL+ cYZBWQv44iN3cWNGXsOtMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvNUZFQUZGMjA4 MkVCMTFFRUI4NTRGQTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr5JwDBAAr5J8DBABnL5ADBABnL5IwDQYJKoZIhvcNAQEL BQADggEBAIg0pJJkavy/gnyyEEI+1LBvqcw8IdG+I85VQUpkP0oegAn6Tqssk2ZT sJcOBrnBsSd7cM6rbdJOzYvVLDEGplqL/WU5/HN+7c7s9uvF1/c+DDi6bhRLmTN8 SnEEAoiDC4gux6lubN/1nMQWu7JocNBUNOUnzL/5AMS1ToNhhWIqUdEJqj6J/UpG G/K8pTUCAzRfKjXac+EYDjaaSetlN3xTHc9+YRqQ2G64jKfuBhvL16u4CP4QYZMY nKYXYfyCHnqUEGOYl3vQiRvg83aoBzrHxthAAto8glVXYu2lK6L3CMASuZNgFxNq sE3V/JcfzV1ZcxIk8Nu0QPIFaPoDsGU= -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:56 2024 by rpki-client on console-fra.rpki-client.org