$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa File: 724AF49CE2F911ECAA4F4C71C4F9AE02.roa (raw, json) Hash identifier: oxiEJ6/TPU8a18QQQJsARd7wolyFAwbWspbY9Oof4OE= Subject key identifier: B0:7C:87:35:75:4F:4A:95:8B:F7:8E:27:ED:DE:FD:C7:BC:C2:CE:D3 Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 08EF Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa Signing time: Wed 26 Jun 2024 21:14:19 +0000 ROA not before: Wed 26 Jun 2024 21:14:19 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 3491 IP address blocks: 43.242.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jun 26 21:14:19 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667c84ab-2132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:5f:5e:ce:f1:4a:6a:25:95:2e:ce:b8:ad:37: 23:fc:d6:a7:8d:5a:8c:e1:32:86:e1:5b:1c:b0:2a: 27:d6:5e:02:ef:b6:6b:cb:7b:93:0a:6f:71:ab:ba: 22:c8:58:e8:80:0c:39:6d:11:c4:a0:d0:19:75:3b: 5e:8c:24:74:05:52:9d:b4:de:f8:96:54:ad:d7:94: fb:4d:b1:b5:ac:d5:fc:f6:78:f9:d1:db:5f:dd:d9: 4f:14:38:ea:9a:f5:09:ab:bc:13:a7:ff:cb:00:16: 4e:e5:3a:61:ea:14:70:a5:10:a3:dc:d6:aa:db:b1: 29:dd:72:5d:4d:b8:d5:10:30:69:76:99:08:66:d7: f6:f9:39:57:d7:56:f1:7e:8f:9c:8f:f5:a2:25:84: 4d:33:2e:c7:fa:a3:3a:dc:48:13:b6:90:c8:e8:eb: 7d:dc:7e:95:06:34:ab:36:62:33:b6:46:64:04:40: 06:7c:63:79:fa:6f:8e:e7:a3:10:b1:95:93:49:9b: b5:e3:1b:b3:53:77:0e:f6:cf:18:0f:cd:0b:cc:a5: 3f:69:ec:b6:55:e3:53:9b:d0:19:9d:21:3b:df:71: 7c:dc:f6:f6:ca:f9:e8:5d:e1:34:6f:72:2c:ec:a6: 51:4d:00:c2:37:eb:5f:89:7a:41:f0:64:91:d0:c3: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7C:87:35:75:4F:4A:95:8B:F7:8E:27:ED:DE:FD:C7:BC:C2:CE:D3 X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/724AF49CE2F911ECAA4F4C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.239.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d4:87:57:46:8d:ae:67:aa:ac:f2:07:1e:d4:9f:27:eb:66: e9:fb:69:cd:ed:39:17:6a:14:28:e8:86:27:a8:9a:88:1a:f8: 33:c7:6e:c3:01:e6:b9:22:29:2a:df:fd:0f:ad:ce:3a:61:eb: 52:40:c9:12:ea:66:75:38:1f:06:ed:ac:a1:6e:1a:4d:49:5f: 70:ac:e9:fc:97:51:fb:4b:8b:b3:2c:c8:ec:d5:04:98:fe:b6: d8:04:21:56:68:f4:d0:5a:c3:c0:19:04:50:64:15:23:a9:cf: 31:f4:c2:e2:9d:63:e7:b9:e4:fa:6b:92:6e:11:e3:f0:3f:1f: 0b:6a:e1:e0:68:32:99:db:d3:8f:2a:06:0f:53:e5:04:b9:d0: ff:3e:cd:09:c6:b6:e9:9f:44:2a:1e:aa:c3:43:e1:32:de:65: d9:6e:69:a7:b5:9e:ad:bb:4b:99:ea:72:25:8c:01:31:b7:bb: 8a:97:5b:b9:c9:75:50:6f:ce:f6:e4:e9:c4:68:38:2a:80:b4: 04:c1:16:3a:31:2f:9f:22:67:78:36:cc:76:8f:87:47:a0:45: 65:00:0a:d5:c3:c2:61:6c:58:91:5e:63:6b:02:b4:5a:a6:51: eb:53:18:0a:b1:74:75:2a:8e:14:8b:4c:1c:31:df:f2:90:f0: fe:9d:21:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjQwNjI2MjExNDE5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjODRhYi0yMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+19ezvFKaiWVLs64rTcj/NanjVqM4TKG4VscsCon1l4C77Zry3uTCm9xq7oi yFjogAw5bRHEoNAZdTtejCR0BVKdtN74llSt15T7TbG1rNX89nj50dtf3dlPFDjq mvUJq7wTp//LABZO5Tph6hRwpRCj3Naq27Ep3XJdTbjVEDBpdpkIZtf2+TlX11bx fo+cj/WiJYRNMy7H+qM63EgTtpDI6Ot93H6VBjSrNmIztkZkBEAGfGN5+m+O56MQ sZWTSZu14xuzU3cO9s8YD80LzKU/aey2VeNTm9AZnSE733F83Pb2yvnoXeE0b3Is 7KZRTQDCN+tfiXpB8GSR0MMY5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLB8hzV1 T0qVi/eOJ+3e/ce8ws7TMB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNzI0QUY0OUNF MkY5MTFFQ0FBNEY0QzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr8u8wDQYJKoZIhvcNAQELBQADggEBAEHUh1dGja5nqqzy Bx7UnyfrZun7ac3tORdqFCjohieomoga+DPHbsMB5rkiKSrf/Q+tzjph61JAyRLq ZnU4HwbtrKFuGk1JX3Cs6fyXUftLi7MsyOzVBJj+ttgEIVZo9NBaw8AZBFBkFSOp zzH0wuKdY+e55Pprkm4R4/A/Hwtq4eBoMpnb048qBg9T5QS50P8+zQnGtumfRCoe qsND4TLeZdluaae1nq27S5nqciWMATG3u4qXW7nJdVBvzvbk6cRoOCqAtATBFjox L58iZ3g2zHaPh0egRWUACtXDwmFsWJFeY2sCtFqmUetTGAqxdHUqjhSLTBwx3/KQ 8P6dIUE= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org