$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa File: B811CFA2BF7811EE80314533C4F9AE02.roa (raw, json) Hash identifier: /1U9CvjJjnoR+Cc8eBTwWfrYGw1ed/NEOO7axvdE43I= Subject key identifier: D9:F8:08:99:F3:AD:54:B0:74:72:0C:17:1E:92:2A:2B:A0:DB:B0:49 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 06FA Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa Signing time: Sun 30 Jun 2024 23:06:48 +0000 ROA not before: Sun 30 Jun 2024 23:06:48 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 132825 IP address blocks: 43.251.112.0/24 maxlen: 24 43.251.113.0/24 maxlen: 24 43.251.114.0/24 maxlen: 24 43.251.115.0/24 maxlen: 24 119.42.32.0/24 maxlen: 24 119.42.34.0/24 maxlen: 24 119.42.35.0/24 maxlen: 24 2001:df0:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jun 30 23:06:48 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6681e507-d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:04:e4:ae:67:5c:ff:f0:65:4e:22:e7:04: 61:ca:4b:e5:60:05:59:29:1a:dc:46:8a:3d:b4:d7: 41:0a:6a:be:07:a3:7f:39:82:ae:8d:09:8f:74:1e: 4b:d1:e3:0b:ff:20:3f:b9:71:1f:06:48:f4:05:8d: f8:19:6f:2a:b1:ff:bc:a2:f4:cf:ac:20:0c:29:9b: 54:4b:0a:5b:d5:bc:b8:6e:f6:39:d6:df:0a:9c:a0: 7a:40:c3:56:38:6c:ea:95:cd:91:f9:06:09:df:48: 45:40:01:cc:cd:de:0d:72:3a:bc:11:cf:f8:46:97: b8:04:ef:bf:dd:4a:72:0e:56:df:c9:d8:5f:c3:67: f7:31:db:58:4d:af:10:ac:3d:b7:43:7f:bd:53:44: 9d:d7:8e:66:51:27:2f:ae:53:b8:22:75:cb:97:e5: 28:ae:04:07:7f:54:8e:19:72:61:39:36:0f:fd:46: 2e:a0:07:1c:07:d0:b2:5f:51:6c:5d:22:88:e3:48: c7:cb:de:9c:87:ba:30:38:32:c9:3f:40:9b:72:12: fe:6a:0b:25:2c:80:9d:25:78:b2:95:88:4f:49:a1: fa:71:25:67:b0:9a:d1:ef:fa:d3:ab:4c:e6:53:39: a7:05:74:96:7c:37:b4:b6:ce:7b:7c:49:d4:04:2e: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:08:99:F3:AD:54:B0:74:72:0C:17:1E:92:2A:2B:A0:DB:B0:49 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.112.0/22 119.42.32.0/24 119.42.34.0/23 IPv6: 2001:df0:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption 99:56:f2:6b:62:ac:93:7f:53:13:06:bf:37:37:49:8c:55:79: 59:05:97:89:fa:6a:39:4d:40:73:55:ab:1e:12:12:b9:23:8a: 8e:13:d4:e1:ca:d9:45:88:96:93:76:64:f8:85:6d:00:60:61: 64:da:a9:fd:97:73:c7:9f:dd:dd:b5:b6:79:ee:c6:a1:1b:0a: d7:bd:b7:7c:a4:39:82:3f:8f:dc:08:a8:39:bb:c1:cb:32:ab: 31:6d:44:4c:ed:ea:95:5f:b5:27:cb:19:c7:c6:f2:cc:ee:fa: 8a:bb:a6:fc:15:b4:65:31:6b:e5:ec:a8:5e:43:72:3e:1a:24: 18:e4:3d:1e:47:2e:fd:a9:3e:b0:ae:f8:45:17:59:17:8e:41: 4a:77:01:44:ec:82:47:34:9c:8f:06:95:39:02:82:f6:52:3f: e4:f1:bf:f0:88:6e:9e:c8:9c:93:b4:c7:cc:8c:ea:47:82:24: f1:52:94:4a:00:6f:51:2e:84:d9:24:ca:5f:8e:68:1f:42:6e: 66:cd:27:37:64:8c:8f:0e:62:c0:9d:d8:ac:4e:b4:0f:9d:94: c4:08:80:af:e2:05:8d:28:aa:8e:9b:81:20:52:02:25:00:81: 42:8b:bc:83:57:47:19:a6:cd:0b:74:d0:b2:5c:de:85:2a:45: 40:b5:5b:10 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjQwNjMwMjMwNjQ4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjgxZTUwNy1kMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OME5K5nXP/wZU4i5wRhykvlYAVZKRrcRoo9tNdBCmq+B6N/OYKujQmPdB5L 0eML/yA/uXEfBkj0BY34GW8qsf+8ovTPrCAMKZtUSwpb1by4bvY51t8KnKB6QMNW OGzqlc2R+QYJ30hFQAHMzd4Ncjq8Ec/4Rpe4BO+/3UpyDlbfydhfw2f3MdtYTa8Q rD23Q3+9U0Sd145mUScvrlO4InXLl+UorgQHf1SOGXJhOTYP/UYuoAccB9CyX1Fs XSKI40jHy96ch7owODLJP0CbchL+agslLICdJXiylYhPSaH6cSVnsJrR7/rTq0zm UzmnBXSWfDe0ts57fEnUBC41qwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNn4CJnz rVSwdHIMFx6SKiug27BJMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvQjgxMUNGQTJC Rjc4MTFFRTgwMzE0NTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAIr+3ADBAB3KiADBAF3KiIwDwQCAAIwCQMHACABDfD7wDAN BgkqhkiG9w0BAQsFAAOCAQEAmVbya2Ksk39TEwa/NzdJjFV5WQWXifpqOU1Ac1Wr HhISuSOKjhPU4crZRYiWk3Zk+IVtAGBhZNqp/Zdzx5/d3bW2ee7GoRsK1723fKQ5 gj+P3AioObvByzKrMW1ETO3qlV+1J8sZx8byzO76irum/BW0ZTFr5eyoXkNyPhok GOQ9Hkcu/ak+sK74RRdZF45BSncBROyCRzScjwaVOQKC9lI/5PG/8Ihunsick7TH zIzqR4Ik8VKUSgBvUS6E2STKX45oH0JuZs0nN2SMjw5iwJ3YrE60D52UxAiAr+IF jSiqjpuBIFICJQCBQou8g1dHGabNC3TQslzehSpFQLVbEA== -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:43 2024 by rpki-client on console-fra.rpki-client.org