$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4BB262B4F16311EEB6481A3AC4F9AE02.roa File: 4BB262B4F16311EEB6481A3AC4F9AE02.roa (raw, json) Hash identifier: 8ekzjDJhWaInROIynyVSCJyEtX2Ohp/vsQShF+f9jjs= Subject key identifier: 68:76:13:69:81:81:94:FF:39:E8:5A:95:B0:01:48:09:3E:8B:99:19 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 06D3 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4BB262B4F16311EEB6481A3AC4F9AE02.roa Signing time: Wed 03 Apr 2024 02:38:47 +0000 ROA not before: Wed 03 Apr 2024 02:38:47 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134365 IP address blocks: 43.225.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 3 02:38:47 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=660cc137-75f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:11:a9:40:29:5b:b4:18:5a:ed:d3:7f:a0:57: fc:5f:50:f7:3a:38:17:fa:db:5c:de:3b:58:f1:0d: ad:a2:6e:f0:55:c7:52:c5:9f:2a:06:1e:99:48:80: 69:17:94:09:e0:85:a2:60:d6:3f:c2:04:7c:ec:61: 18:12:99:3a:09:c5:d5:ba:ab:56:02:a9:77:04:8c: 37:b8:85:46:87:a6:11:e5:2c:55:fa:51:9a:2a:cc: a9:44:1a:3e:c6:34:10:9f:09:65:6e:d3:e2:82:ec: ab:da:db:f0:3c:01:01:58:68:3d:4a:cf:c1:50:17: 9d:d8:c0:00:57:00:ae:6a:86:80:a6:96:93:ef:41: 42:27:60:e6:f3:f9:15:82:24:be:7c:a0:84:99:c7: 9d:c6:c0:26:14:d2:23:3b:0f:86:4f:e2:c9:8e:0e: d3:92:ad:21:8c:84:a9:15:bc:b6:8a:d5:bd:73:4c: 75:ac:5a:6b:37:ce:fc:d6:4d:f9:2d:9f:b5:05:8d: 06:85:b4:dc:37:b8:89:f2:8c:70:8e:4a:60:2d:00: 0d:91:f6:5a:06:91:81:92:9c:46:5f:3d:91:23:d9: 12:1e:09:14:69:52:77:c9:a5:b0:f4:3a:b2:b9:a0: a3:fc:30:45:71:bf:a8:3e:54:7f:26:cd:5d:0d:02: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:76:13:69:81:81:94:FF:39:E8:5A:95:B0:01:48:09:3E:8B:99:19 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4BB262B4F16311EEB6481A3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.58.0/24 Signature Algorithm: sha256WithRSAEncryption 40:13:4b:be:c2:73:bc:9f:ef:da:97:04:3f:e4:c9:a3:35:bc: 50:b5:9b:ca:df:67:25:91:25:01:78:00:51:64:a9:3e:4d:e3: 6f:e3:e2:51:40:e1:28:7d:02:71:6d:5f:32:da:6d:df:72:46: 4f:bd:78:20:7d:38:cf:11:b3:6f:a7:8e:b5:2e:e0:6f:8a:be: c9:c1:e4:91:81:fa:8c:76:7a:05:a6:f4:c1:49:d6:b2:2a:65: 86:19:0d:48:11:30:f6:15:3c:02:b4:32:8f:6e:ab:74:7c:af: 9c:cd:86:4e:63:75:92:36:9c:24:78:37:a1:c0:f0:b8:1a:d1: d9:6c:bb:2f:6d:c7:87:39:39:b5:56:a4:37:e0:ba:34:a0:6b: 3d:ff:40:db:27:45:35:67:7c:18:9d:36:e5:13:23:cd:01:c7: 61:46:ed:28:9e:77:0c:5c:63:2f:d0:8e:06:9c:89:2f:87:4e: 61:4a:f1:d5:ca:ee:dd:db:ad:31:9e:b7:53:65:3e:68:46:db: 6b:90:22:50:2c:ce:e2:12:ce:85:5b:0a:9f:b5:a6:77:04:9d: 59:d1:f2:31:82:3a:37:a4:94:f3:03:b3:11:d9:59:9d:78:4d: b3:e3:11:55:f8:94:96:a3:35:de:de:e3:f1:0a:44:6f:53:a7: d0:a0:df:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQwNDAzMDIzODQ3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjYzEzNy03NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xGpQClbtBha7dN/oFf8X1D3OjgX+ttc3jtY8Q2tom7wVcdSxZ8qBh6ZSIBp F5QJ4IWiYNY/wgR87GEYEpk6CcXVuqtWAql3BIw3uIVGh6YR5SxV+lGaKsypRBo+ xjQQnwllbtPiguyr2tvwPAEBWGg9Ss/BUBed2MAAVwCuaoaAppaT70FCJ2Dm8/kV giS+fKCEmcedxsAmFNIjOw+GT+LJjg7Tkq0hjISpFby2itW9c0x1rFprN8781k35 LZ+1BY0GhbTcN7iJ8oxwjkpgLQANkfZaBpGBkpxGXz2RI9kSHgkUaVJ3yaWw9Dqy uaCj/DBFcb+oPlR/Js1dDQIMRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGh2E2mB gZT/OehalbABSAk+i5kZMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvNEJCMjYyQjRG MTYzMTFFRUI2NDgxQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4TowDQYJKoZIhvcNAQELBQADggEBAEATS77Cc7yf79qX BD/kyaM1vFC1m8rfZyWRJQF4AFFkqT5N42/j4lFA4Sh9AnFtXzLabd9yRk+9eCB9 OM8Rs2+njrUu4G+KvsnB5JGB+ox2egWm9MFJ1rIqZYYZDUgRMPYVPAK0Mo9uq3R8 r5zNhk5jdZI2nCR4N6HA8Lga0dlsuy9tx4c5ObVWpDfgujSgaz3/QNsnRTVnfBid NuUTI80Bx2FG7SiedwxcYy/QjgaciS+HTmFK8dXK7t3brTGet1NlPmhG22uQIlAs zuISzoVbCp+1pncEnVnR8jGCOjeklPMDsxHZWZ14TbPjEVX4lJajNd7e4/EKRG9T p9Cg3xk= -----END CERTIFICATE-----Generated at Sun May 19 00:30:18 2024 by rpki-client on console-ams.rpki-client.org