$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa File: 724AF49CE2F911ECAA4F4C71C4F9AE02.roa (raw, json) Hash identifier: WC91Y9EJ7ixC7wb1nh5f4u+ZzBhgl77uNzgpGtMxTeM= Subject key identifier: 82:06:2D:53:75:5D:6B:38:C9:0A:6E:A5:65:20:31:85:9E:AC:EE:36 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 0836 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa Signing time: Mon 10 Jul 2023 20:57:26 +0000 ROA not before: Mon 10 Jul 2023 20:57:26 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 3491 IP address blocks: 43.242.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 10 20:57:26 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=64ac70b6-e40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:54:ec:0a:5b:92:f1:d1:0a:08:72:ee:b9: 2a:51:b2:dc:01:c1:e4:56:23:90:fd:c1:1f:d9:05: 34:0f:b4:41:b9:65:e4:87:f0:f6:f4:df:b1:7a:7a: d1:02:68:79:86:ff:83:7c:fa:b2:82:8e:ef:e4:a9: 20:ef:98:b9:4b:74:26:3d:b4:30:01:04:05:9e:61: 2e:06:9b:d6:91:24:ae:62:bb:24:5e:80:9e:11:9b: 04:50:59:de:b9:da:4f:52:14:58:dd:7d:6a:cd:38: 21:f1:36:21:4f:19:c5:d0:ab:78:88:2a:8f:dc:0a: b2:35:4c:1c:6a:49:b6:06:87:5f:4e:cb:52:7a:6d: 81:2b:58:c9:c9:ba:14:93:28:73:c9:db:b4:46:50: 50:b8:08:0f:06:a3:f8:9c:39:65:be:da:9c:f4:69: fd:be:fa:d6:fe:aa:6b:f1:7d:6a:ce:33:53:65:b5: 52:ef:e5:50:b8:bf:2e:56:8f:9a:4f:0f:fd:ad:1b: d6:49:c8:43:a5:59:ce:1c:93:4c:91:0b:cd:5c:be: 08:7c:41:cb:7b:52:1b:0e:e4:29:13:5c:37:be:ad: 40:a7:2b:6e:f7:18:f8:c1:20:78:e1:7e:5c:32:bc: 0b:d8:df:59:96:6c:9f:ea:47:1d:5a:56:39:10:e4: ca:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:06:2D:53:75:5D:6B:38:C9:0A:6E:A5:65:20:31:85:9E:AC:EE:36 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:d3:b2:4f:4f:70:fb:b1:d5:c7:0b:08:e1:a8:b4:73:04:be: e9:37:c1:d8:56:5f:53:81:d6:76:42:25:19:a1:29:24:a1:7f: bf:46:81:ae:2d:c8:a0:03:7b:9b:fd:83:8a:13:b9:d9:b4:10: 08:ec:83:d1:ac:75:33:ea:95:c5:6a:ec:d1:5e:42:14:85:b5: f8:d9:df:dc:c4:21:8d:c4:e1:50:dd:66:7a:40:f8:4c:c6:a8: e3:3d:31:2b:50:c6:b5:3c:0a:0b:cb:e8:5b:c5:a0:fd:56:5d: f4:db:e7:a2:3f:0b:ba:df:34:ed:d7:11:74:24:da:a9:6c:5f: 72:9f:63:ba:ff:c2:91:11:53:55:09:b7:ef:dc:19:0f:15:5c: 12:f4:41:cf:db:3e:d7:85:c0:02:43:b2:83:dc:a4:1b:7e:e7: 46:a9:77:5b:2d:d9:6d:43:3f:25:cb:d0:eb:25:21:95:b6:56: 77:f1:da:01:72:10:85:e8:03:9e:f0:5a:c1:89:47:46:1b:1c: e8:23:f7:4f:a4:d8:5d:b1:e4:59:4a:d7:9a:3b:12:f1:8e:71: b3:f2:45:3c:f9:46:c7:e8:1a:4b:0f:f0:bf:37:1c:14:33:8b: 59:93:55:60:32:bc:43:7a:58:46:7b:9a:eb:d9:f8:91:04:c9: 2a:f5:4e:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjMwNzEwMjA1NzI2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGFjNzBiNi1lNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoRU7ApbkvHRCghy7rkqUbLcAcHkViOQ/cEf2QU0D7RBuWXkh/D29N+xenrR Amh5hv+DfPqygo7v5Kkg75i5S3QmPbQwAQQFnmEuBpvWkSSuYrskXoCeEZsEUFne udpPUhRY3X1qzTgh8TYhTxnF0Kt4iCqP3AqyNUwcakm2BodfTstSem2BK1jJyboU kyhzydu0RlBQuAgPBqP4nDllvtqc9Gn9vvrW/qpr8X1qzjNTZbVS7+VQuL8uVo+a Tw/9rRvWSchDpVnOHJNMkQvNXL4IfEHLe1IbDuQpE1w3vq1Apytu9xj4wSB44X5c MrwL2N9Zlmyf6kcdWlY5EOTKFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIIGLVN1 XWs4yQpupWUgMYWerO42MB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNzI0QUY0OUNF MkY5MTFFQ0FBNEY0QzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr8u8wDQYJKoZIhvcNAQELBQADggEBAH7Tsk9PcPux1ccL COGotHMEvuk3wdhWX1OB1nZCJRmhKSShf79Gga4tyKADe5v9g4oTudm0EAjsg9Gs dTPqlcVq7NFeQhSFtfjZ39zEIY3E4VDdZnpA+EzGqOM9MStQxrU8CgvL6FvFoP1W XfTb56I/C7rfNO3XEXQk2qlsX3KfY7r/wpERU1UJt+/cGQ8VXBL0Qc/bPteFwAJD soPcpBt+50apd1st2W1DPyXL0OslIZW2Vnfx2gFyEIXoA57wWsGJR0YbHOgj90+k 2F2x5FlK15o7EvGOcbPyRTz5RsfoGksP8L83HBQzi1mTVWAyvEN6WEZ7muvZ+JEE ySr1TrI= -----END CERTIFICATE-----Generated at Sat May 18 22:14:03 2024 by rpki-client on console-fra.rpki-client.org