$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa File: B945666A66B111EEA69EB059C4F9AE02.roa (raw, json) Hash identifier: ug4SEhvnAqbSYEe7ct15W9ugaJNCA2I1XU9Vd+d4qYI= Subject key identifier: 17:CC:55:3F:09:C1:3C:0D:2F:FA:EF:A6:01:06:7F:4D:B1:46:F8:36 Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3521 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:15 +0000 ROA not before: Sat 02 Dec 2023 14:40:15 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 131089 IP address blocks: 61.19.16.0/24 maxlen: 24 110.78.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13601 (0x3521) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:15 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41cf-eb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:bc:ea:96:4e:81:31:e2:0f:06:01:f8:e0: 01:ac:c7:47:d0:bb:ce:2f:b4:35:42:fc:79:8b:36: 6d:ba:7b:11:ca:b9:1e:f6:09:5a:70:0a:46:16:7a: ce:1d:94:19:d8:ac:f2:98:55:f9:2c:46:c1:59:a0: b3:f6:44:2d:88:66:3d:8d:f4:46:fa:30:2d:a1:32: 54:4b:24:a1:21:42:b4:9e:f4:5a:74:99:12:7b:e0: e0:55:27:f2:7a:3d:52:71:34:62:be:9d:a1:73:72: 69:42:82:75:cd:b8:02:b7:9f:71:23:26:0f:b0:34: a0:b3:eb:d7:45:60:ed:3e:5b:c1:06:87:1d:55:21: 16:35:65:b6:75:06:8b:71:aa:11:92:4c:12:6c:8a: 1b:25:71:5b:f4:28:02:09:09:69:45:f4:08:5a:eb: 6d:a2:7a:81:cd:e9:a3:02:40:4b:f7:8e:b6:5c:94: 1e:cc:be:c4:9f:74:71:2e:f6:8a:de:35:2a:63:08: 0e:7b:e4:ae:64:83:eb:c8:53:f4:b3:f9:87:20:99: f6:bc:2f:03:65:72:de:fb:8a:85:96:73:71:72:ba: e2:a2:77:9e:c7:a9:c8:c5:97:9a:09:51:85:5b:bd: 38:f1:38:3c:c2:04:b2:4c:38:c8:cd:52:e7:f2:9d: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CC:55:3F:09:C1:3C:0D:2F:FA:EF:A6:01:06:7F:4D:B1:46:F8:36 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/B945666A66B111EEA69EB059C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.16.0/24 110.78.25.0/24 Signature Algorithm: sha256WithRSAEncryption ab:0d:1d:ce:c4:1b:2d:8e:0f:86:97:02:7f:8b:fe:0b:2a:94: df:a3:6e:b5:fd:83:8c:d2:90:c3:87:05:84:4f:66:ae:27:a2: 8e:23:4e:77:97:4b:7b:07:6a:4e:a3:27:49:ed:43:dd:e6:2f: 13:5c:5b:ed:37:20:a3:cc:29:d4:fd:f3:b4:57:76:e3:4d:c3: f4:70:5c:ba:b1:ae:ec:64:0a:1f:b5:d5:1c:1e:22:9a:93:ac: ac:1e:32:05:1a:62:4f:4c:74:62:dd:fd:02:f7:74:0e:0d:c2: f2:aa:3f:15:d8:78:76:e2:68:71:9f:27:e7:eb:ae:a9:de:63: 8e:b4:02:e1:ba:76:a7:64:4f:41:8e:d5:e3:6a:20:04:5a:00: 4c:a6:3c:d1:e7:2f:be:94:0d:e5:db:5a:48:b9:a3:c6:a0:9f: 77:4f:4e:b5:aa:52:e6:6f:1f:1c:56:82:3c:83:a6:1b:75:34: ad:43:6b:cb:27:c2:6a:e3:b2:3d:86:cc:9b:5c:f1:ca:dc:d2: c4:e4:e6:6a:51:35:79:10:e8:d7:3c:26:7a:7e:f7:26:47:6c: f1:9c:42:ed:09:7c:5d:a4:d8:d7:c9:a0:f3:23:eb:55:71:63: 6d:ce:1d:f2:ff:e7:b0:2e:f2:86:d8:c8:d4:be:c0:ff:43:ae: ad:c3:22:2e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDE1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFjZi1lYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdC86pZOgTHiDwYB+OABrMdH0LvOL7Q1Qvx5izZtunsRyrke9glacApGFnrO HZQZ2KzymFX5LEbBWaCz9kQtiGY9jfRG+jAtoTJUSyShIUK0nvRadJkSe+DgVSfy ej1ScTRivp2hc3JpQoJ1zbgCt59xIyYPsDSgs+vXRWDtPlvBBocdVSEWNWW2dQaL caoRkkwSbIobJXFb9CgCCQlpRfQIWuttonqBzemjAkBL9462XJQezL7En3RxLvaK 3jUqYwgOe+SuZIPryFP0s/mHIJn2vC8DZXLe+4qFlnNxcrrioneex6nIxZeaCVGF W7048Tg8wgSyTDjIzVLn8p3eGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBfMVT8J wTwNL/rvpgEGf02xRvg2MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvQjk0NTY2NkE2 NkIxMTFFRUE2OUVCMDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA9ExADBABuThkwDQYJKoZIhvcNAQELBQADggEBAKsNHc7E Gy2OD4aXAn+L/gsqlN+jbrX9g4zSkMOHBYRPZq4noo4jTneXS3sHak6jJ0ntQ93m LxNcW+03IKPMKdT987RXduNNw/RwXLqxruxkCh+11RweIpqTrKweMgUaYk9MdGLd /QL3dA4NwvKqPxXYeHbiaHGfJ+frrqneY460AuG6dqdkT0GO1eNqIARaAEymPNHn L76UDeXbWki5o8agn3dPTrWqUuZvHxxWgjyDpht1NK1Da8snwmrjsj2GzJtc8crc 0sTk5mpRNXkQ6Nc8Jnp+9yZHbPGcQu0JfF2k2NfJoPMj61VxY23OHfL/57Au8obY yNS+wP9Drq3DIi4= -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:14 2024 by rpki-client on console-fra.rpki-client.org