$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/27E3EC16172211EEB3A9C124C4F9AE02.roa File: 27E3EC16172211EEB3A9C124C4F9AE02.roa (raw, json) Hash identifier: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk= Subject key identifier: A1:63:F9:06:55:C3:C6:D8:CB:8E:14:7B:8D:DA:D7:EC:99:F5:FE:50 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 075D Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/27E3EC16172211EEB3A9C124C4F9AE02.roa Signing time: Thu 28 Nov 2024 21:41:03 +0000 ROA not before: Thu 28 Nov 2024 21:41:03 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 60021 IP address blocks: 43.225.56.0/24 maxlen: 24 43.225.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18 Validity Not Before: Nov 28 21:41:03 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748e36f-109f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:28:b2:80:d1:41:94:e9:62:92:2e:14:cf: 12:d0:5c:72:dd:c9:82:ac:11:0f:84:6a:6e:02:0b: 57:81:22:30:01:c7:90:28:fb:6c:d1:54:ea:1b:9d: 13:3d:87:4f:22:b3:14:70:db:22:a1:8a:43:ba:65: 56:13:83:ee:69:8a:d1:d6:dd:ea:34:ff:ee:bb:28: 6b:72:89:a9:f2:88:7c:aa:82:1e:aa:d3:ac:dc:24: bb:2a:60:ab:ee:19:32:6f:bf:db:d4:4c:d8:f0:54: 50:4f:8c:21:79:1a:6d:46:b7:af:8f:75:4c:b9:5e: 53:93:22:d7:d7:9f:b5:33:13:62:35:0e:c8:a9:94: 30:c5:a9:4a:a7:b4:2c:41:f3:12:91:05:b6:47:97: 47:42:df:ea:21:79:8b:2c:0f:86:86:6e:91:7c:7d: 6d:28:34:a0:50:7c:1e:a0:7f:89:b3:86:14:07:59: 9f:41:22:96:aa:22:c3:de:e0:7a:33:fd:20:de:90: bb:a2:78:b9:73:19:70:57:39:d4:e8:b7:9e:b9:9c: 78:f0:3a:62:83:63:95:f7:c2:2d:6f:02:2d:05:94: e8:c4:2c:2e:43:89:9f:fe:fb:cd:ad:42:90:9d:53: 35:0f:79:59:e4:f2:58:d8:83:20:f5:e3:f0:fe:75: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:63:F9:06:55:C3:C6:D8:CB:8E:14:7B:8D:DA:D7:EC:99:F5:FE:50 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/27E3EC16172211EEB3A9C124C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/23 Signature Algorithm: sha256WithRSAEncryption 30:cf:f2:f2:e0:b1:3d:04:df:d8:96:28:c7:df:f0:31:9a:84: 1c:cc:f5:5a:c9:2d:66:06:cd:39:54:54:a8:15:cd:e0:9f:b1: f7:8a:3c:c3:49:c2:bf:35:78:2f:f8:d4:7a:e6:c0:6c:42:4c: 85:71:9d:e6:7b:90:1f:4a:bd:4d:68:9e:65:fc:64:c2:a5:8e: 9a:20:06:a1:5a:cd:61:f0:25:ec:9b:09:57:dd:f3:60:6f:af: ef:5b:fc:73:67:72:34:0d:50:e4:48:0d:d5:70:04:50:b8:76: 2a:a9:82:6c:80:a2:a1:20:ea:65:92:0a:c6:ab:c6:9c:a9:1f: ff:6e:9e:e0:a9:a9:0a:62:7c:a2:31:e4:29:8f:25:c4:48:33: 09:41:47:dc:de:f5:15:30:ea:7d:d4:bf:32:ac:94:04:8d:57: 6d:aa:d9:cd:94:d5:17:65:83:98:ec:00:14:64:f4:5e:ca:11: d2:a4:eb:cc:28:ed:82:c3:a3:f6:9a:82:fc:c8:1d:88:3f:29: 79:29:9f:24:4d:a1:79:92:9a:bf:0d:db:86:9b:21:51:64:53: d0:1f:7a:c8:76:29:7c:b3:9c:4e:f3:81:c8:03:8d:c0:b1:09: 8f:fd:2c:d2:9e:84:20:5d:0b:f3:81:ca:d1:c3:9c:a6:cb:06: a8:d4:95:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQxMTI4MjE0MTAzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4ZTM2Zi0xMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2QosoDRQZTpYpIuFM8S0Fxy3cmCrBEPhGpuAgtXgSIwAceQKPts0VTqG50T PYdPIrMUcNsioYpDumVWE4PuaYrR1t3qNP/uuyhrcomp8oh8qoIeqtOs3CS7KmCr 7hkyb7/b1EzY8FRQT4wheRptRrevj3VMuV5TkyLX15+1MxNiNQ7IqZQwxalKp7Qs QfMSkQW2R5dHQt/qIXmLLA+Ghm6RfH1tKDSgUHweoH+Js4YUB1mfQSKWqiLD3uB6 M/0g3pC7oni5cxlwVznU6LeeuZx48Dpig2OV98ItbwItBZToxCwuQ4mf/vvNrUKQ nVM1D3lZ5PJY2IMg9ePw/nXRTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKFj+QZV w8bYy44Ue43a1+yZ9f5QMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvMjdFM0VDMTYx NzIyMTFFRUIzQTlDMTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr4TgwDQYJKoZIhvcNAQELBQADggEBADDP8vLgsT0E39iW KMff8DGahBzM9VrJLWYGzTlUVKgVzeCfsfeKPMNJwr81eC/41HrmwGxCTIVxneZ7 kB9KvU1onmX8ZMKljpogBqFazWHwJeybCVfd82Bvr+9b/HNncjQNUORIDdVwBFC4 diqpgmyAoqEg6mWSCsarxpypH/9unuCpqQpifKIx5CmPJcRIMwlBR9ze9RUw6n3U vzKslASNV22q2c2U1Rdlg5jsABRk9F7KEdKk68wo7YLDo/aagvzIHYg/KXkpnyRN oXmSmr8N24abIVFkU9Afesh2KXyznE7zgcgDjcCxCY/9LNKehCBdC/OBytHDnKbL BqjUlf0= -----END CERTIFICATE-----Generated at Sun Apr 6 18:28:51 2025 by rpki-client