$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa File: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (raw, json) Hash identifier: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8= Subject key identifier: C9:B6:CE:78:8A:C6:B5:7D:D6:E7:95:E2:79:BA:AB:5A:1C:BA:F0:61 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 075A Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa Signing time: Thu 28 Nov 2024 21:41:00 +0000 ROA not before: Thu 28 Nov 2024 21:40:59 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134428 IP address blocks: 43.225.56.0/24 maxlen: 24 43.225.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18 Validity Not Before: Nov 28 21:40:59 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6748e36b-46c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:94:b0:fe:53:b4:80:63:6b:67:be:1a:c5: 1f:2e:c8:ec:6b:ab:85:87:e7:39:18:c2:7c:74:93: b3:9c:c4:49:76:7b:7e:09:33:63:43:ee:ef:77:d2: 36:f6:bd:52:94:a7:3c:12:a2:47:ba:3f:25:4b:81: 91:62:9b:c8:91:f0:3c:96:cc:2f:56:9a:d1:d5:9b: 06:54:9c:e6:c6:ae:16:13:a6:50:b5:ea:ad:82:0f: 06:cc:8e:d6:14:1c:d4:d6:39:8c:ca:d0:e4:6a:1b: b4:f0:6b:85:12:d6:6e:58:fe:d8:d5:02:fb:51:68: e4:01:2a:d4:f0:c1:77:2c:86:90:81:b9:15:50:04: b2:93:62:0a:ee:e0:e5:53:84:3d:39:e3:37:63:9e: 17:e4:a0:92:85:49:39:7d:5c:90:8b:d1:4b:f2:67: 34:b1:f5:b4:8c:d2:03:f7:a9:af:ea:7a:ea:c6:1f: 5d:db:45:3e:44:a7:e3:02:3f:c4:e9:94:fd:1f:9e: 69:28:aa:28:55:b5:b3:0b:f3:45:b5:94:f2:e1:bc: 05:c7:8f:f6:93:2d:a9:b4:bc:5f:a6:97:10:6f:5a: 9f:7d:be:09:d4:da:61:7e:44:a0:49:f0:36:e7:f1: 33:e6:02:92:58:5c:ee:6f:8a:74:cf:19:07:d8:af: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B6:CE:78:8A:C6:B5:7D:D6:E7:95:E2:79:BA:AB:5A:1C:BA:F0:61 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:61:c1:de:df:d7:c0:6a:89:33:e4:e6:c7:1b:d9:12:f1:f3: 66:3e:36:d3:ef:c8:f3:81:32:05:6b:31:6a:00:c3:48:ef:8a: 87:61:2a:0e:af:4c:93:de:78:fb:88:6a:b8:14:17:e2:0f:01: d7:ab:a7:79:ce:b7:2f:16:c1:84:28:d7:ee:2a:92:c2:e3:ae: d9:44:ad:1c:26:cd:3c:e0:99:8d:44:a3:15:09:83:a0:22:55: b5:d0:50:80:33:99:86:c3:c2:85:d1:c8:64:93:69:70:d9:1e: 77:09:c0:b2:a8:37:6c:2f:10:a6:77:7e:36:2e:aa:55:16:ca: 5f:d4:53:5a:58:2a:2b:61:9b:4a:61:63:11:cd:10:3b:93:6a: 9f:50:fa:76:9f:b0:8b:8a:db:d0:cd:f2:6d:bd:e4:5f:d8:ca: a9:a7:2e:6a:44:d2:af:70:b5:e9:0a:f3:84:a0:1c:19:e5:cb: 62:ab:d9:76:a2:bb:f1:0e:81:7b:55:2c:6e:1b:1c:81:43:c5: ce:25:a2:ed:fa:d6:06:f5:d6:cb:4b:88:1f:f6:8f:a5:53:b8: 81:db:3b:d7:c2:7f:bb:dd:d2:af:a2:26:cd:fb:9b:a7:2f:23: ff:a1:ce:68:19:e7:a3:27:bf:77:a7:07:11:72:bc:45:9d:04: 4f:4c:ec:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQxMTI4MjE0MDU5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ4ZTM2Yi00NmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbqUsP5TtIBja2e+GsUfLsjsa6uFh+c5GMJ8dJOznMRJdnt+CTNjQ+7vd9I2 9r1SlKc8EqJHuj8lS4GRYpvIkfA8lswvVprR1ZsGVJzmxq4WE6ZQteqtgg8GzI7W FBzU1jmMytDkahu08GuFEtZuWP7Y1QL7UWjkASrU8MF3LIaQgbkVUASyk2IK7uDl U4Q9OeM3Y54X5KCShUk5fVyQi9FL8mc0sfW0jNID96mv6nrqxh9d20U+RKfjAj/E 6ZT9H55pKKooVbWzC/NFtZTy4bwFx4/2ky2ptLxfppcQb1qffb4J1NphfkSgSfA2 5/Ez5gKSWFzub4p0zxkH2K+UvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMm2zniK xrV91ueV4nm6q1ocuvBhMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvNEZBRTRDREM3 QzI3MTFFREEzQTBCODE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr4TgwDQYJKoZIhvcNAQELBQADggEBAJ5hwd7f18BqiTPk 5scb2RLx82Y+NtPvyPOBMgVrMWoAw0jviodhKg6vTJPeePuIargUF+IPAderp3nO ty8WwYQo1+4qksLjrtlErRwmzTzgmY1EoxUJg6AiVbXQUIAzmYbDwoXRyGSTaXDZ HncJwLKoN2wvEKZ3fjYuqlUWyl/UU1pYKithm0phYxHNEDuTap9Q+nafsIuK29DN 8m295F/YyqmnLmpE0q9wtekK84SgHBnly2Kr2Xaiu/EOgXtVLG4bHIFDxc4lou36 1gb11stLiB/2j6VTuIHbO9fCf7vd0q+iJs37m6cvI/+hzmgZ56Mnv3enBxFyvEWd BE9M7Hw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:27:48 2025 by rpki-client