$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa File: FEA22F60A5F111EF9C230280C4F9AE02.roa (raw, json) Hash identifier: Jbt7n2ZRFDuS80TPLIamwTYwNZ2fv7lYVuWS7NZ1xLU= Subject key identifier: 7E:7A:13:EB:00:48:92:6D:55:9B:EB:6A:7E:88:22:C7:16:CA:2E:A6 Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 1143 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa Signing time: Tue 24 Dec 2024 17:15:01 +0000 ROA not before: Tue 24 Dec 2024 17:15:01 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38056 IP address blocks: 125.253.128.0/19 maxlen: 19 125.253.134.0/23 maxlen: 23 125.253.138.0/24 maxlen: 24 125.253.145.0/24 maxlen: 24 125.253.152.0/24 maxlen: 24 125.253.153.0/24 maxlen: 24 125.253.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4419 (0x1143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Dec 24 17:15:01 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676aec14-82ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:2f:e0:3e:60:68:98:91:1f:de:d7:f2:8b: 0b:07:3f:b8:eb:c1:eb:bf:86:ac:13:a9:f9:11:ec: 26:ea:9d:fc:32:6a:f2:8b:dc:03:94:92:5d:24:46: a0:16:40:7e:87:0c:ab:4f:0c:ae:12:df:bb:e1:dd: 87:fd:55:21:7c:9f:5c:0f:83:dc:45:11:5d:4a:35: f8:18:2d:7d:d5:92:f5:4c:94:61:45:75:5a:41:28: 49:0d:f7:86:bd:00:23:ab:93:e8:37:d3:57:7b:76: 1d:9f:ca:4f:0a:93:04:e6:62:c2:49:34:59:11:b7: 79:6b:f9:88:8f:6b:89:e0:95:b8:a8:32:99:f4:6c: 4d:bb:89:4b:29:a6:e0:a2:b8:48:e1:09:53:88:e5: c6:23:39:d5:eb:b0:04:3f:c6:ab:58:9f:03:15:66: 31:d1:c2:b6:cd:fb:a3:57:42:a9:ef:11:44:30:27: 24:53:e2:9c:1e:9f:61:23:aa:fd:04:ea:fa:71:6b: af:75:c3:6e:e7:e7:9d:3b:9e:3b:26:7f:cd:7c:ff: de:62:5e:97:78:7e:9e:8c:15:a4:d3:5d:77:2f:18: 91:d0:bb:fa:e0:f9:f2:e2:8f:a0:cb:7d:b6:0c:79: fe:6f:ce:3a:a7:3e:40:fe:6a:95:a4:4a:76:d1:f1: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7A:13:EB:00:48:92:6D:55:9B:EB:6A:7E:88:22:C7:16:CA:2E:A6 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.253.128.0/19 Signature Algorithm: sha256WithRSAEncryption 24:67:06:ab:61:21:06:e3:f8:97:99:67:09:b2:ea:bb:27:ba: 46:4c:6e:a8:9b:49:9a:0c:7a:4e:dd:3e:f6:53:9e:be:0e:94: 70:3b:0c:57:0b:0a:e4:7a:74:ce:d1:40:69:51:88:0f:62:fc: 94:76:ad:c7:53:28:43:d7:c4:ed:50:f4:9a:fb:c9:08:35:2d: a1:f6:3e:3a:a4:ec:62:a5:28:d2:87:44:cb:21:ed:73:a2:9b: 30:41:0a:8e:3a:b4:21:cf:52:3a:c9:85:00:15:38:27:b0:d6: 6c:3a:3f:47:39:1e:89:ff:b6:df:07:50:13:b0:d8:49:8b:b7: 0b:56:8a:9a:ee:ed:b9:7e:8d:d3:2f:92:29:c1:3e:70:fa:d9: d3:11:2b:28:26:f3:e1:a6:7b:40:6d:85:6a:7b:1e:8a:c4:f9: 37:a4:c9:28:3c:a7:2e:5e:81:9a:4c:04:01:16:00:09:72:5e: 72:95:d6:79:9c:5c:29:47:9b:84:10:6f:4f:ce:f8:d7:76:eb: ab:da:e1:75:1d:91:a7:65:72:22:d5:54:23:2e:7f:48:55:0f: c5:c6:5a:07:69:d6:92:5b:e3:13:a6:ba:dd:14:66:6d:1b:35: d9:22:cd:37:3f:fb:89:4e:35:37:27:ba:99:9b:66:9d:41:64: 8b:c5:7e:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjQxMjI0MTcxNTAxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZhZWMxNC04MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1Uv4D5gaJiRH97X8osLBz+468Hrv4asE6n5Eewm6p38Mmryi9wDlJJdJEag FkB+hwyrTwyuEt+74d2H/VUhfJ9cD4PcRRFdSjX4GC191ZL1TJRhRXVaQShJDfeG vQAjq5PoN9NXe3Ydn8pPCpME5mLCSTRZEbd5a/mIj2uJ4JW4qDKZ9GxNu4lLKabg orhI4QlTiOXGIznV67AEP8arWJ8DFWYx0cK2zfujV0Kp7xFEMCckU+KcHp9hI6r9 BOr6cWuvdcNu5+edO547Jn/NfP/eYl6XeH6ejBWk0113LxiR0Lv64Pny4o+gy322 DHn+b846pz5A/mqVpEp20fGW2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFH56E+sA SJJtVZvran6IIscWyi6mMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGNzIvNkY0MjkzRDRGOEQ1MTFFODgzNjMxRDdBQzRGOUFFMDIvRkVBMjJGNjBB NUYxMTFFRjlDMjMwMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAV9/YAwDQYJKoZIhvcNAQELBQADggEBACRnBqthIQbj+JeZ Zwmy6rsnukZMbqibSZoMek7dPvZTnr4OlHA7DFcLCuR6dM7RQGlRiA9i/JR2rcdT KEPXxO1Q9Jr7yQg1LaH2Pjqk7GKlKNKHRMsh7XOimzBBCo46tCHPUjrJhQAVOCew 1mw6P0c5Hon/tt8HUBOw2EmLtwtWipru7bl+jdMvkinBPnD62dMRKygm8+Gme0Bt hWp7HorE+TekySg8py5egZpMBAEWAAlyXnKV1nmcXClHm4QQb0/O+Nd266va4XUd kadlciLVVCMuf0hVD8XGWgdp1pJb4xOmut0UZm0bNdkizTc/+4lONTcnupmbZp1B ZIvFfr4= -----END CERTIFICATE-----Generated at Sun Apr 13 02:34:36 2025 by rpki-client