$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa File: BADD8D386C4411EFA8952B76C4F9AE02.roa (raw, json) Hash identifier: LwkjkiVkHZnBOccklVVMLCv8uUCy9lN1wDZ92FF5Uco= Subject key identifier: 63:70:D0:D6:A1:22:5A:A5:7B:3C:B0:4E:CD:94:12:FF:6C:48:EF:7D Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0725 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa Signing time: Fri 06 Sep 2024 11:39:52 +0000 ROA not before: Fri 06 Sep 2024 11:39:52 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 62468 IP address blocks: 43.225.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Sep 6 11:39:52 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66daea08-e34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:95:49:ac:99:54:22:fb:31:66:9b:d3:48: ee:55:a1:e5:21:1d:a6:8d:b2:76:65:98:dc:49:f6: d5:5d:75:11:bc:3f:da:4e:df:c8:00:d7:f2:d6:b8: 9c:0c:6f:bf:b7:7c:40:86:f4:87:ea:e9:00:e9:dc: 40:96:4b:fe:31:42:6b:3e:15:ee:34:6f:87:72:2e: 7f:70:f0:31:07:a3:ee:57:6c:0a:72:f7:05:65:58: 0a:62:ae:da:47:b8:ca:d4:92:6f:8b:ea:97:83:bd: d5:d5:b1:91:6d:dc:6b:f5:b1:66:68:6e:95:28:f8: 78:2d:83:be:fb:ca:ff:b6:36:b8:69:4a:2b:9e:b7: 06:c7:8e:67:b8:e2:f2:69:3f:12:c1:17:3c:15:41: 6d:0f:b3:83:15:35:5f:65:6c:b6:f8:39:55:92:9c: 07:8e:b7:3d:84:44:d6:0d:3c:33:2d:9d:11:09:38: 15:c5:bb:19:10:04:68:22:61:b8:8e:d7:96:f6:3d: b0:55:ab:45:e1:cb:9d:cd:48:35:ea:14:a1:71:01: 5d:7b:0a:c7:bb:72:99:0e:62:c7:42:e4:d8:36:29: 4a:70:6a:3b:8c:61:61:8a:be:eb:fb:29:37:d3:b8: a4:fd:f1:d9:06:c7:9e:37:b5:4d:7d:92:08:35:c0: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:70:D0:D6:A1:22:5A:A5:7B:3C:B0:4E:CD:94:12:FF:6C:48:EF:7D X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/22 Signature Algorithm: sha256WithRSAEncryption 96:64:61:bc:c9:93:32:9c:d6:2a:ca:3b:1d:f7:a6:82:5e:d9: ad:14:4b:b0:0f:27:2c:d3:83:dc:4f:4e:75:87:9f:72:86:b1: 16:fc:8b:2a:53:b3:38:65:07:b5:df:fb:f7:99:69:1b:f9:2f: c0:b7:5f:9c:5d:6b:5d:69:73:d5:c5:41:4e:b9:9c:71:03:24: d7:c7:bb:6b:4a:c6:98:ba:ef:a2:9b:cb:96:2d:f8:75:ad:57: 8e:33:c8:94:5c:d1:1b:25:aa:9f:73:ae:b3:1d:0b:cc:80:44: f2:35:58:ae:25:8f:eb:68:00:36:f2:24:99:bd:7f:aa:5c:05: 1b:11:5a:d2:92:b7:3a:b8:ef:78:6d:06:cd:5a:72:bf:68:f8: f0:8c:e1:99:c3:e1:4f:26:7d:48:73:81:ec:8c:e7:20:8b:b3: 97:1f:2e:2b:bc:1e:9c:e4:0d:11:84:6d:f9:9f:63:15:1a:67: e1:e3:6a:d0:0a:77:7f:f8:d3:fe:a7:42:df:51:60:1c:e7:65: 84:d9:86:15:c3:e4:ea:b2:c0:2c:ec:4a:4a:0e:92:4c:ec:48: f5:0c:f5:f8:9b:4e:be:48:7f:cb:e7:de:9f:ea:93:85:1c:df: 99:4c:a8:42:20:26:4f:0d:96:a6:de:9d:f4:c0:46:34:cc:1f: 15:c4:5d:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjQwOTA2MTEzOTUyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRhZWEwOC1lMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEaVSayZVCL7MWab00juVaHlIR2mjbJ2ZZjcSfbVXXURvD/aTt/IANfy1ric DG+/t3xAhvSH6ukA6dxAlkv+MUJrPhXuNG+Hci5/cPAxB6PuV2wKcvcFZVgKYq7a R7jK1JJvi+qXg73V1bGRbdxr9bFmaG6VKPh4LYO++8r/tja4aUornrcGx45nuOLy aT8SwRc8FUFtD7ODFTVfZWy2+DlVkpwHjrc9hETWDTwzLZ0RCTgVxbsZEARoImG4 jteW9j2wVatF4cudzUg16hShcQFdewrHu3KZDmLHQuTYNilKcGo7jGFhir7r+yk3 07ik/fHZBseeN7VNfZIINcCqkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGNw0Nah IlqlezywTs2UEv9sSO99MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvQkFERDhEMzg2 QzQ0MTFFRkE4OTUyQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4TgwDQYJKoZIhvcNAQELBQADggEBAJZkYbzJkzKc1irK Ox33poJe2a0US7APJyzTg9xPTnWHn3KGsRb8iypTszhlB7Xf+/eZaRv5L8C3X5xd a11pc9XFQU65nHEDJNfHu2tKxpi676Kby5Yt+HWtV44zyJRc0Rslqp9zrrMdC8yA RPI1WK4lj+toADbyJJm9f6pcBRsRWtKStzq473htBs1acr9o+PCM4ZnD4U8mfUhz geyM5yCLs5cfLiu8HpzkDRGEbfmfYxUaZ+HjatAKd3/40/6nQt9RYBznZYTZhhXD 5OqywCzsSkoOkkzsSPUM9fibTr5If8vn3p/qk4Uc35lMqEIgJk8NlqbenfTARjTM HxXEXeE= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:44 2024 by rpki-client on console-ams.rpki-client.org