$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa File: F66F50628A9C11EB9B2E044BC4F9AE02.roa (raw, json) Hash identifier: iRYRVo5lbaJTFKYyTxWAHiXDjG/PpAWNzoZqTqR4jfg= Subject key identifier: 1B:33:06:1E:23:72:87:7E:3A:A2:D8:62:2E:DE:A4:3B:4A:99:66:86 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 05B6 Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa Signing time: Thu 11 Jul 2024 00:01:30 +0000 ROA not before: Thu 11 Jul 2024 00:01:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141470 IP address blocks: 124.108.24.0/21 maxlen: 21 124.108.24.0/23 maxlen: 23 124.108.26.0/23 maxlen: 23 124.108.27.0/24 maxlen: 24 124.108.28.0/23 maxlen: 23 124.108.30.0/23 maxlen: 23 124.108.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Jul 11 00:01:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=668f20da-156c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f0:5e:f3:2d:6e:64:e5:3a:dc:bc:74:19:e8: 14:8f:77:75:a4:fe:5b:27:e0:6a:d7:20:e5:70:68: 2d:cf:2f:98:e7:fb:af:77:96:22:76:89:ab:43:67: 25:31:55:39:e8:3d:a7:2e:61:37:95:6b:57:c3:de: 8c:9b:a0:07:c7:f4:28:2b:cb:e4:65:0b:20:fb:95: 1c:34:e0:32:f0:13:dc:bb:08:93:9c:8c:ce:35:c8: c1:d8:e2:25:73:28:08:58:5d:10:70:88:38:d0:d1: 18:4e:5e:66:cd:35:5f:4c:77:df:42:3c:4d:ea:4c: 80:c7:ed:ec:fd:60:3e:2c:94:c3:a5:8c:fd:92:e9: 21:99:42:0d:87:c6:f2:8f:f8:fd:6e:0c:f9:80:29: 90:7a:6d:5f:a9:4c:4c:b3:bb:82:b7:66:1d:9e:ce: 37:f5:64:33:e3:d8:07:46:1f:6e:79:67:4e:da:df: ca:c0:93:6d:cb:60:1a:63:60:49:29:60:b0:f0:a9: bb:35:4e:dd:74:29:0a:83:b2:d0:7d:d1:a3:15:39: 48:5c:5f:ca:20:a6:f2:67:88:0c:0e:5c:43:7b:f7: df:54:aa:b4:58:77:75:5a:04:7f:02:a3:31:48:f3: 60:c1:ae:83:3c:20:ac:52:f0:28:38:fc:4f:4f:38: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:06:1E:23:72:87:7E:3A:A2:D8:62:2E:DE:A4:3B:4A:99:66:86 X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.108.24.0/21 Signature Algorithm: sha256WithRSAEncryption b8:e5:d9:03:61:c3:6f:d7:44:aa:4c:54:04:96:cc:91:f9:49: 6e:1f:a5:45:35:4e:6a:a9:40:79:34:f4:26:db:2a:01:b2:b8: 64:b1:29:d1:6d:ea:71:0d:b7:8b:0f:d0:5b:8f:8b:cb:4e:9e: 44:21:ea:ee:5d:39:ab:18:f6:b7:a8:5b:93:69:cf:ce:de:cf: eb:24:10:b4:8e:61:d1:ea:40:23:35:78:2b:71:5d:59:4e:9c: d2:f5:72:1e:d7:e2:45:ee:56:82:66:72:40:8c:4f:64:5c:29: f8:14:73:ea:3a:eb:ce:90:11:01:86:80:7e:0f:a7:20:96:2c: d6:89:5c:ec:28:7a:5b:e2:a8:d3:db:0a:58:45:c6:ea:d6:1b: c2:20:10:7b:0b:0b:b3:e4:5c:96:93:68:72:2e:7b:77:e9:5a: 63:15:46:a5:b8:01:6f:45:3d:98:d3:0c:e5:19:fd:bf:7f:f8: f6:d8:18:0b:94:e9:9f:bb:14:fe:a8:ac:59:ca:07:fd:d2:87: 49:68:17:ed:f4:4e:e7:42:59:ea:61:07:17:5d:60:68:be:19: 2f:3f:0f:6c:d0:e1:ce:8c:8e:58:dc:e4:d6:e5:f6:44:b1:32: de:58:73:0f:3d:06:70:f3:93:79:b3:17:3f:97:1d:39:3d:4e: df:92:7a:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjQwNzExMDAwMTMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjhmMjBkYS0xNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/Be8y1uZOU63Lx0GegUj3d1pP5bJ+Bq1yDlcGgtzy+Y5/uvd5YidomrQ2cl MVU56D2nLmE3lWtXw96Mm6AHx/QoK8vkZQsg+5UcNOAy8BPcuwiTnIzONcjB2OIl cygIWF0QcIg40NEYTl5mzTVfTHffQjxN6kyAx+3s/WA+LJTDpYz9kukhmUINh8by j/j9bgz5gCmQem1fqUxMs7uCt2Ydns439WQz49gHRh9ueWdO2t/KwJNty2AaY2BJ KWCw8Km7NU7ddCkKg7LQfdGjFTlIXF/KIKbyZ4gMDlxDe/ffVKq0WHd1WgR/AqMx SPNgwa6DPCCsUvAoOPxPTzhDfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBszBh4j cod+OqLYYi7epDtKmWaGMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUyMjUvQ0E2OTA0NDI4QTlBMTFFQjgwQzNFRDQ3QzRGOUFFMDIvRjY2RjUwNjI4 QTlDMTFFQjlCMkUwNDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN8bBgwDQYJKoZIhvcNAQELBQADggEBALjl2QNhw2/XRKpM VASWzJH5SW4fpUU1TmqpQHk09CbbKgGyuGSxKdFt6nENt4sP0FuPi8tOnkQh6u5d OasY9reoW5Npz87ez+skELSOYdHqQCM1eCtxXVlOnNL1ch7X4kXuVoJmckCMT2Rc KfgUc+o6686QEQGGgH4PpyCWLNaJXOwoelviqNPbClhFxurWG8IgEHsLC7PkXJaT aHIue3fpWmMVRqW4AW9FPZjTDOUZ/b9/+PbYGAuU6Z+7FP6orFnKB/3Sh0loF+30 TudCWephBxddYGi+GS8/D2zQ4c6Mjljc5Nbl9kSxMt5Ycw89BnDzk3mzFz+XHTk9 Tt+Ses4= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org