$ rpki-client -vvf rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa File: 9BBF30ECD27611ECBAA59232C4F9AE02.roa (raw, json) Hash identifier: wO3Wck7J4efPh0Ov+FlLS04uEvxdoPiR+YIpK0Aw64s= Subject key identifier: EB:D3:2A:34:9D:35:1D:2D:23:03:30:4E:1F:0E:A7:76:A7:64:E6:BF Certificate issuer: /CN=A9176EE7/serialNumber=ADA93FAD1EB015CDE249718F82352783DCBDF894 Certificate serial: 01FF Authority key identifier: AD:A9:3F:AD:1E:B0:15:CD:E2:49:71:8F:82:35:27:83:DC:BD:F8:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rak_rR6wFc3iSXGPgjUng9y9-JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa Signing time: Thu 07 Dec 2023 03:34:15 +0000 ROA not before: Thu 07 Dec 2023 03:34:15 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133199 IP address blocks: 43.225.44.0/24 maxlen: 24 43.225.45.0/24 maxlen: 24 43.225.46.0/24 maxlen: 24 43.225.47.0/24 maxlen: 24 103.44.28.0/24 maxlen: 24 103.44.29.0/24 maxlen: 24 103.44.30.0/24 maxlen: 24 103.44.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/rak_rR6wFc3iSXGPgjUng9y9-JQ.crl rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/rak_rR6wFc3iSXGPgjUng9y9-JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rak_rR6wFc3iSXGPgjUng9y9-JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Apr 2024 03:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176EE7/serialNumber=ADA93FAD1EB015CDE249718F82352783DCBDF894 Validity Not Before: Dec 7 03:34:15 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65713d37-bb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ce:35:08:ec:e9:35:3a:a4:9b:80:07:6c:90: 63:0b:10:82:c6:1d:9d:f4:e9:99:75:04:1e:f9:a4: 5a:9c:45:8d:1f:ee:82:c0:97:25:fa:2b:4b:1e:cf: 1b:4d:33:23:95:9e:1b:69:66:71:6d:46:d0:61:10: ec:95:e6:9b:70:4f:41:70:b2:28:f9:d1:b7:fe:24: 1b:66:4f:3d:09:b5:44:01:f9:a2:87:7d:d5:8c:d6: 91:17:b7:ae:81:65:8a:8f:34:c7:53:d0:43:4d:cd: e0:a7:8e:06:56:a5:91:32:d4:aa:15:ee:a2:00:7b: 64:44:ba:97:81:6a:26:71:69:7e:2c:51:17:fb:82: 89:75:2d:04:72:81:d7:af:67:88:90:0d:bd:64:96: 52:2b:06:49:cf:bd:c8:71:64:a7:e6:ad:7e:7c:0f: 9e:e9:59:43:cb:b8:32:2f:73:61:f4:0e:5f:c4:8f: 7f:3f:4f:41:1c:f2:8a:f1:05:6b:eb:4d:4b:ff:4d: cd:b7:85:a7:13:2e:e7:ba:6f:ab:92:cb:28:4a:11: b7:17:81:25:ea:f3:09:8c:5e:74:5f:57:c5:89:75: 8f:b7:62:3a:3a:1a:30:dd:f6:16:4d:75:f1:25:7e: 7a:3b:1d:5f:93:d1:3e:84:5c:f3:05:2d:33:ef:f1: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D3:2A:34:9D:35:1D:2D:23:03:30:4E:1F:0E:A7:76:A7:64:E6:BF X509v3 Authority Key Identifier: keyid:AD:A9:3F:AD:1E:B0:15:CD:E2:49:71:8F:82:35:27:83:DC:BD:F8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/rak_rR6wFc3iSXGPgjUng9y9-JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rak_rR6wFc3iSXGPgjUng9y9-JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176EE7/947D4D40D27211ECAFCF3584C4F9AE02/9BBF30ECD27611ECBAA59232C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.44.0/22 103.44.28.0/22 Signature Algorithm: sha256WithRSAEncryption ad:7c:ca:21:c8:a1:2a:88:38:9a:11:1c:d8:c5:2d:6a:b6:57: 37:17:93:c2:db:1f:dd:69:5c:6b:80:bf:35:c3:76:e0:6d:4a: 00:3a:64:77:15:b0:af:2c:1a:c0:d2:7d:0d:b8:7d:55:68:29: 46:10:6c:2b:c4:20:85:cc:46:f3:f7:1b:e2:ce:0d:65:63:f1: c7:54:48:13:06:cf:a7:46:df:f1:5b:b0:2d:04:10:73:09:0b: 40:f9:35:61:51:36:50:97:b2:1b:b4:1f:25:86:7c:77:d2:5a: 26:39:79:0b:75:df:00:52:d0:29:21:2d:31:c5:03:06:92:1d: cf:c5:6f:d8:c7:45:a7:03:8a:67:fe:b6:d9:9a:91:2e:c9:f7: b7:15:9d:9d:90:6c:9a:70:4d:af:4e:87:7d:32:b6:7a:59:6b: 23:5d:1a:29:b9:3d:cf:e5:19:59:ff:16:30:80:93:e3:4a:5e: eb:0a:58:70:ef:bd:b8:77:39:41:d2:cf:a6:8e:2c:36:56:89: 36:d6:b8:cd:3d:5d:c0:50:c4:f7:6f:2f:e1:ff:c6:16:0b:c7: f1:07:af:82:7b:69:bf:4a:37:ec:47:45:6c:1a:ed:6e:d2:d8: 98:09:f0:82:45:74:b4:28:48:02:3a:94:87:16:e5:27:1d:02: 9c:2c:e6:b5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZFRTcxMTAvBgNVBAUTKEFEQTkzRkFEMUVCMDE1Q0RFMjQ5NzE4RjgyMzUyNzgz RENCREY4OTQwHhcNMjMxMjA3MDMzNDE1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTcxM2QzNy1iYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1841COzpNTqkm4AHbJBjCxCCxh2d9OmZdQQe+aRanEWNH+6CwJcl+itLHs8b TTMjlZ4baWZxbUbQYRDsleabcE9BcLIo+dG3/iQbZk89CbVEAfmih33VjNaRF7eu gWWKjzTHU9BDTc3gp44GVqWRMtSqFe6iAHtkRLqXgWomcWl+LFEX+4KJdS0EcoHX r2eIkA29ZJZSKwZJz73IcWSn5q1+fA+e6VlDy7gyL3Nh9A5fxI9/P09BHPKK8QVr 601L/03Nt4WnEy7num+rkssoShG3F4El6vMJjF50X1fFiXWPt2I6Ohow3fYWTXXx JX56Ox1fk9E+hFzzBS0z7/HnZQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOvTKjSd NR0tIwMwTh8Op3anZOa/MB8GA1UdIwQYMBaAFK2pP60esBXN4klxj4I1J4PcvfiU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkVFNy85NDdENEQ0MEQy NzIxMUVDQUZDRjM1ODRDNEY5QUUwMi9yYWtfclI2d0ZjM2lTWEdQZ2pVbmc5eTkt SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jha19yUjZ3RmMzaVNYR1BnalVuZzl5OS1KUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzZFRTcvOTQ3RDRENDBEMjcyMTFFQ0FGQ0YzNTg0QzRGOUFFMDIvOUJCRjMwRUNE Mjc2MTFFQ0JBQTU5MjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4SwDBAJnLBwwDQYJKoZIhvcNAQELBQADggEBAK18yiHI oSqIOJoRHNjFLWq2VzcXk8LbH91pXGuAvzXDduBtSgA6ZHcVsK8sGsDSfQ24fVVo KUYQbCvEIIXMRvP3G+LODWVj8cdUSBMGz6dG3/FbsC0EEHMJC0D5NWFRNlCXshu0 HyWGfHfSWiY5eQt13wBS0CkhLTHFAwaSHc/Fb9jHRacDimf+ttmakS7J97cVnZ2Q bJpwTa9Oh30ytnpZayNdGim5Pc/lGVn/FjCAk+NKXusKWHDvvbh3OUHSz6aOLDZW iTbWuM09XcBQxPdvL+H/xhYLx/EHr4J7ab9KN+xHRWwa7W7S2JgJ8IJFdLQoSAI6 lIcW5ScdApws5rU= -----END CERTIFICATE-----Generated at Fri Apr 19 06:16:41 2024 by rpki-client on console-ams.rpki-client.org