$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/407AAAF0F16311EE848EF739C4F9AE02.roa File: 407AAAF0F16311EE848EF739C4F9AE02.roa (raw, json) Hash identifier: zwC0dh3a1/ouuLM5MG6/NwQE7APvtGFHp/Q8/BqStX8= Subject key identifier: F6:24:DC:63:B4:53:86:7C:3F:FA:06:45:2D:FA:D9:EA:77:86:E2:2A Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 06D1 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/407AAAF0F16311EE848EF739C4F9AE02.roa Signing time: Wed 03 Apr 2024 02:38:28 +0000 ROA not before: Wed 03 Apr 2024 02:38:28 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137547 IP address blocks: 43.225.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 3 02:38:28 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=660cc124-a5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:4d:7a:14:89:2f:ed:53:b4:83:42:a8:e5: a2:25:46:a4:1c:28:ae:b3:82:6f:2c:97:b8:a7:62: 6b:26:70:bf:db:d7:93:43:4b:43:2f:ff:88:f1:cf: 6c:ad:cf:79:0e:09:68:3b:02:91:9e:71:c8:c7:46: 44:f2:aa:11:c7:6d:77:b8:6c:bd:83:a9:87:7e:e1: b3:33:ac:ea:34:95:de:ee:c7:6f:4a:bf:62:fa:84: 35:1a:80:8b:1f:31:35:4f:7a:18:7d:6e:67:3e:2e: 4f:67:79:02:ab:7b:8a:4e:ba:de:bd:d6:3e:fe:c2: 44:82:8e:43:16:d4:0c:91:33:a7:fe:30:13:66:62: 11:cf:43:04:db:d5:80:ba:b0:bf:d8:f2:4d:dc:d3: 9c:13:b8:61:59:75:da:0b:23:ef:82:c7:e2:64:7b: 86:60:75:4e:e2:35:9c:d0:8e:34:6e:1f:51:82:87: 6e:91:0a:7b:7a:eb:83:f9:bd:90:e9:93:7a:05:06: e3:d7:8e:22:03:ed:02:1e:36:46:c1:01:0d:d6:2a: bf:a3:11:d0:ed:db:7a:89:12:79:49:39:87:03:9e: 77:dd:55:b3:43:0d:88:b1:bd:d3:47:32:0b:12:d0: cb:3f:e9:38:51:46:9f:e9:d2:cb:38:53:4b:53:98: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:DC:63:B4:53:86:7C:3F:FA:06:45:2D:FA:D9:EA:77:86:E2:2A X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/407AAAF0F16311EE848EF739C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.58.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:3d:cb:4e:6d:ec:42:05:cd:3b:87:dd:1f:d9:a0:29:eb:0f: 31:5d:9e:cb:29:4a:01:55:ea:6c:a7:ef:52:de:a7:d2:69:28: 02:4c:45:49:89:00:23:d9:08:d4:08:01:ac:21:43:32:0f:f7: 86:2c:0e:b8:dd:2a:cc:2d:14:22:70:31:01:d2:b8:7a:93:e1: b8:7b:6f:8b:ae:2e:ae:5e:90:80:72:a8:4c:86:53:2a:10:d9: 34:83:23:ea:e5:10:73:f5:90:89:ef:20:38:72:2b:58:5e:76: 5c:56:a0:92:d7:07:ab:40:b0:b2:13:4f:2a:c5:ee:b4:dd:be: 00:67:1d:d0:ae:7b:f8:64:00:34:76:88:2e:dd:de:27:16:67: 9b:d0:77:13:a0:c2:bb:a8:82:03:b4:a2:7b:d1:2e:ad:a1:b0: 38:94:f6:4d:c3:23:0b:d9:ef:aa:c1:ac:8a:ab:dd:92:7c:69: ce:af:97:28:15:7b:79:35:1c:9a:84:44:3e:77:8c:f3:08:08: 87:61:6d:30:2f:5b:16:54:4e:fe:66:bc:2a:44:df:6a:f5:c8: e3:78:e1:50:7c:e6:a9:5d:7a:c8:53:36:59:c0:e6:0a:54:c4: c1:6c:53:83:93:e6:88:16:ff:2e:d4:eb:70:e2:11:2c:5c:fb: 0d:ca:a4:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQwNDAzMDIzODI4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjYzEyNC1hNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQtNehSJL+1TtINCqOWiJUakHCius4JvLJe4p2JrJnC/29eTQ0tDL/+I8c9s rc95DgloOwKRnnHIx0ZE8qoRx213uGy9g6mHfuGzM6zqNJXe7sdvSr9i+oQ1GoCL HzE1T3oYfW5nPi5PZ3kCq3uKTrrevdY+/sJEgo5DFtQMkTOn/jATZmIRz0ME29WA urC/2PJN3NOcE7hhWXXaCyPvgsfiZHuGYHVO4jWc0I40bh9RgodukQp7euuD+b2Q 6ZN6BQbj144iA+0CHjZGwQEN1iq/oxHQ7dt6iRJ5STmHA5533VWzQw2Isb3TRzIL EtDLP+k4UUaf6dLLOFNLU5gZswIDAQABo4IClTCCApEwHQYDVR0OBBYEFPYk3GO0 U4Z8P/oGRS362ep3huIqMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvNDA3QUFBRjBG MTYzMTFFRTg0OEVGNzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4TowDQYJKoZIhvcNAQELBQADggEBAA49y05t7EIFzTuH 3R/ZoCnrDzFdnsspSgFV6myn71Lep9JpKAJMRUmJACPZCNQIAawhQzIP94YsDrjd KswtFCJwMQHSuHqT4bh7b4uuLq5ekIByqEyGUyoQ2TSDI+rlEHP1kInvIDhyK1he dlxWoJLXB6tAsLITTyrF7rTdvgBnHdCue/hkADR2iC7d3icWZ5vQdxOgwruoggO0 onvRLq2hsDiU9k3DIwvZ76rBrIqr3ZJ8ac6vlygVe3k1HJqERD53jPMICIdhbTAv WxZUTv5mvCpE32r1yON44VB85qldeshTNlnA5gpUxMFsU4OT5ogW/y7U63DiESxc +w3KpIo= -----END CERTIFICATE-----Generated at Thu May 16 23:48:41 2024 by rpki-client on console-fra.rpki-client.org