$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa File: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (raw, json) Hash identifier: pys/sQOmvCqaV53G586jaLiqzsRmV+KQG83GqftinV4= Subject key identifier: BC:1B:E6:6F:4F:4E:2B:DB:13:E2:24:9B:D8:DC:55:D0:28:E3:75:A2 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0692 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa Signing time: Thu 14 Dec 2023 22:51:01 +0000 ROA not before: Thu 14 Dec 2023 22:51:01 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133929 IP address blocks: 43.225.59.0/24 maxlen: 24 103.252.16.0/22 maxlen: 22 103.252.16.0/23 maxlen: 24 103.252.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Dec 14 22:51:01 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657b86d4-6049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:35:a3:94:c7:e3:eb:a0:f8:41:53:1e:22:54: 90:df:44:f8:fb:c0:a8:65:b8:f4:a6:b3:95:54:54: 6e:af:e3:39:51:49:83:a5:98:29:21:df:b6:ba:83: 3b:4c:7e:7e:20:85:45:61:e3:0d:fe:62:85:89:6b: 94:a8:f6:39:da:2c:2a:d3:72:84:98:71:8b:11:fd: d9:47:9e:39:9e:83:a0:cf:8f:f4:2d:b9:bd:d8:e4: 1a:01:43:5b:9e:5a:32:b2:7d:22:59:6d:0f:0f:76: 58:95:53:ce:93:04:fd:66:d5:48:55:3d:a0:7b:bc: 7d:27:60:e3:11:b2:31:a3:d4:29:87:91:d7:3e:be: 3e:90:4d:2c:cd:e7:14:34:1a:7d:bb:76:bb:eb:19: d0:7d:3d:f9:a5:2e:28:f4:7a:f7:bd:07:e5:03:09: 95:2d:28:0a:c6:43:1c:31:d4:03:8e:78:55:ae:b9: d4:9c:f4:40:5d:98:58:48:2f:a7:7e:dc:ce:15:a4: f9:ca:8f:3e:07:58:00:c5:7e:1a:2a:0e:fd:d8:1e: 62:d1:61:70:be:bc:53:fc:82:32:9f:5c:26:79:cd: 8f:41:b5:ab:fe:c1:ea:b1:60:88:63:53:03:88:a9: 5b:be:db:e0:c0:0f:31:32:a6:0b:3e:47:8c:a2:69: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1B:E6:6F:4F:4E:2B:DB:13:E2:24:9B:D8:DC:55:D0:28:E3:75:A2 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/0DA7D6ACBEF111ED9634C070C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.59.0/24 103.252.16.0/22 Signature Algorithm: sha256WithRSAEncryption 25:94:e1:47:df:fc:2b:2d:8f:97:7f:ce:36:8c:73:98:e1:86: 41:29:4e:82:72:6b:e4:a8:55:29:61:81:b7:73:8c:70:1f:0c: b1:61:56:de:67:f8:b8:13:b3:00:17:e8:aa:98:c4:8f:f1:85: f6:40:d6:3d:71:5f:99:cf:c3:ad:29:cc:bb:8e:e2:cc:3d:1c: 41:4a:ea:33:ac:e9:d4:04:01:b8:f3:f2:0e:83:ef:29:28:b6: df:44:8f:db:a6:10:cd:60:a2:05:51:68:80:dd:bb:22:b1:42: 5b:1f:bb:b0:ea:56:cd:81:75:8c:45:83:cb:dd:d6:c3:2f:39: a0:3f:0f:7a:e0:8a:d1:e0:12:7d:b6:9d:25:d1:78:67:f0:05: ca:80:36:b2:29:ca:58:c3:dd:7d:8b:19:e7:33:0a:74:de:f9: 71:d7:dc:f7:9f:e7:2a:95:f4:fd:3a:3b:39:d6:87:12:18:c8: 3d:82:37:fa:3c:6d:20:b3:53:eb:30:c4:f9:3b:f5:fc:f5:af: 5c:1e:d4:3b:5f:c6:d1:0d:91:b0:75:a1:90:72:43:a7:85:8a: 74:80:a8:50:04:59:7f:81:81:3f:13:58:27:b1:b8:62:05:7a: 11:c0:ac:44:5b:4e:03:02:5a:e0:f1:d1:7b:c8:37:ce:dd:cf: 86:88:ce:94 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjMxMjE0MjI1MTAxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTdiODZkNC02MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jWjlMfj66D4QVMeIlSQ30T4+8CoZbj0prOVVFRur+M5UUmDpZgpId+2uoM7 TH5+IIVFYeMN/mKFiWuUqPY52iwq03KEmHGLEf3ZR545noOgz4/0Lbm92OQaAUNb nloysn0iWW0PD3ZYlVPOkwT9ZtVIVT2ge7x9J2DjEbIxo9Qph5HXPr4+kE0szecU NBp9u3a76xnQfT35pS4o9Hr3vQflAwmVLSgKxkMcMdQDjnhVrrnUnPRAXZhYSC+n ftzOFaT5yo8+B1gAxX4aKg792B5i0WFwvrxT/IIyn1wmec2PQbWr/sHqsWCIY1MD iKlbvtvgwA8xMqYLPkeMomn+4wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLwb5m9P TivbE+Ikm9jcVdAo43WiMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvMERBN0Q2QUNC RUYxMTFFRDk2MzRDMDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4TsDBAJn/BAwDQYJKoZIhvcNAQELBQADggEBACWU4Uff /Cstj5d/zjaMc5jhhkEpToJya+SoVSlhgbdzjHAfDLFhVt5n+LgTswAX6KqYxI/x hfZA1j1xX5nPw60pzLuO4sw9HEFK6jOs6dQEAbjz8g6D7ykott9Ej9umEM1gogVR aIDduyKxQlsfu7DqVs2BdYxFg8vd1sMvOaA/D3rgitHgEn22nSXReGfwBcqANrIp yljD3X2LGeczCnTe+XHX3Pef5yqV9P06OznWhxIYyD2CN/o8bSCzU+swxPk79fz1 r1we1DtfxtENkbB1oZByQ6eFinSAqFAEWX+BgT8TWCexuGIFehHArERbTgMCWuDx 0XvIN87dz4aIzpQ= -----END CERTIFICATE-----Generated at Thu May 16 23:48:41 2024 by rpki-client on console-fra.rpki-client.org