$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa File: BA3E92207D2311EEA3696814C4F9AE02.roa (raw, json) Hash identifier: QCckKoHrm9e4eOGS9nr5xC5ujq5pBtfUnu0x7UGDanM= Subject key identifier: 53:20:FC:5C:17:F4:D3:10:30:04:27:C7:6F:AF:90:6A:5C:54:F4:36 Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 06 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa Signing time: Tue 07 Nov 2023 11:49:16 +0000 ROA not before: Tue 07 Nov 2023 11:49:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152104 IP address blocks: 180.131.132.0/23 maxlen: 23 180.131.132.0/24 maxlen: 24 180.131.133.0/24 maxlen: 24 2001:df3:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Nov 7 11:49:16 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=654a243c-49de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:12:dc:5d:b4:52:07:2d:8a:dc:68:ce:77: 64:0b:37:59:a3:82:16:ff:85:f1:59:40:7e:2f:9b: 8a:4e:91:a1:50:b3:a7:02:63:0e:4b:5f:cf:ff:a7: a5:3f:63:67:0c:db:2b:b6:49:a9:63:d2:5c:7a:a0: e2:9c:b7:16:9f:1f:30:69:89:50:84:30:9a:8b:04: 79:46:fc:bd:43:53:8e:b6:24:f5:56:8f:75:c2:22: aa:7d:02:6c:a8:b7:69:24:52:14:48:66:83:99:65: ba:0b:ee:26:74:7e:b3:2c:f2:e5:6a:ef:65:ef:68: d6:ba:c5:b8:b5:e0:6a:02:29:01:18:59:21:9d:ba: 6b:43:44:36:0c:03:86:f5:32:cf:68:8d:1d:e5:22: a0:1a:d2:63:78:db:1f:39:6e:ec:a3:53:63:9d:57: 03:e0:2e:e5:80:f7:47:a2:73:dc:c3:ad:3f:c0:ce: 63:a5:d6:0d:b6:e7:d4:c8:c5:11:8b:27:48:7c:5f: 73:e1:0f:cd:20:c3:be:e3:f9:fb:7f:be:2e:db:d6: 62:c8:59:b3:65:95:80:dc:9f:2a:38:0b:ab:51:fa: 73:bf:a6:45:1c:db:3d:63:6a:b0:22:7e:5a:da:38: f4:83:08:eb:93:ed:47:82:c2:fc:8e:be:3c:cc:f3: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:FC:5C:17:F4:D3:10:30:04:27:C7:6F:AF:90:6A:5C:54:F4:36 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.132.0/23 IPv6: 2001:df3:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 0e:6e:67:b6:97:9e:47:43:d8:c5:ad:ff:6d:45:2b:a7:f8:bc: e2:9a:d3:83:be:9b:65:24:76:b9:42:5f:45:5c:ed:78:75:d7: 0f:e9:ab:7b:28:21:6f:38:9c:95:d5:7b:57:20:b6:a6:32:56: a5:cd:be:ee:eb:a3:0e:5e:20:b8:e7:2d:93:b7:83:95:5c:56: 93:0a:93:25:0a:67:17:05:e9:02:38:40:8b:a2:ee:1a:c5:a5: 2d:f4:74:5b:03:c4:63:3f:2d:97:9b:2b:bd:40:a8:c7:35:a6: d5:6f:10:c8:4b:09:52:0d:35:11:5f:7a:fe:49:84:3f:69:20: 92:71:ce:95:c0:3a:26:16:29:5b:2f:b7:08:f1:91:5f:c1:a0: 8d:9d:62:a4:a7:ef:e6:2c:ea:31:bd:fd:b9:9c:ab:df:37:17: 42:47:33:dc:26:c6:fc:4e:87:13:90:86:85:2d:f6:92:a8:24: 5e:75:39:a7:b7:f3:11:40:91:4f:79:a2:91:d6:08:df:f0:67: 82:62:75:fc:18:f8:b5:4d:84:bb:ee:a8:b7:b3:23:26:ab:b7: 72:5b:e6:4c:6b:e0:e4:76:34:aa:e8:d5:9e:11:08:53:55:a9: 64:b3:64:16:b5:e5:78:68:9a:1a:42:42:bb:2b:50:78:b8:b2: 62:a0:b0:9f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUUxQjExMC8GA1UEBRMoODY0QzUxMzk1QTY1RDVERTcwRUNEMzBBQUQyN0E2OUY0 QjlCMjJCQzAeFw0yMzExMDcxMTQ5MTZaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NGEyNDNjLTQ5ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA5hLcXbRSBy2K3GjOd2QLN1mjghb/hfFZQH4vm4pOkaFQs6cCYw5LX8//p6U/ Y2cM2yu2Salj0lx6oOKctxafHzBpiVCEMJqLBHlG/L1DU462JPVWj3XCIqp9Amyo t2kkUhRIZoOZZboL7iZ0frMs8uVq72XvaNa6xbi14GoCKQEYWSGdumtDRDYMA4b1 Ms9ojR3lIqAa0mN42x85buyjU2OdVwPgLuWA90eic9zDrT/AzmOl1g2259TIxRGL J0h8X3PhD80gw77j+ft/vi7b1mLIWbNllYDcnyo4C6tR+nO/pkUc2z1jarAiflra OPSDCOuT7UeCwvyOvjzM87Z7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUUyD8XBf0 0xAwBCfHb6+QalxU9DYwHwYDVR0jBBgwFoAUhkxROVpl1d5w7NMKrSemn0ubIrww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RTFCLzc0OTUyNTE0N0Qy MjExRUVBN0IwNzQ2MEM0RjlBRTAyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Ykly dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGt4Uk9WcGwxZDV3N05NS3JTZW1uMHViSXJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9CQTNFOTIyMDdE MjMxMUVFQTM2OTY4MTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAbSDhDAPBAIAAjAJAwcAIAEN8x3AMA0GCSqGSIb3DQEBCwUA A4IBAQAObme2l55HQ9jFrf9tRSun+LzimtODvptlJHa5Ql9FXO14ddcP6at7KCFv OJyV1XtXILamMlalzb7u66MOXiC45y2Tt4OVXFaTCpMlCmcXBekCOECLou4axaUt 9HRbA8RjPy2Xmyu9QKjHNabVbxDISwlSDTURX3r+SYQ/aSCScc6VwDomFilbL7cI 8ZFfwaCNnWKkp+/mLOoxvf25nKvfNxdCRzPcJsb8TocTkIaFLfaSqCRedTmnt/MR QJFPeaKR1gjf8GeCYnX8GPi1TYS77qi3syMmq7dyW+ZMa+DkdjSq6NWeEQhTValk s2QWteV4aJoaQkK7K1B4uLJioLCf -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:09 2024 by rpki-client on console-ams.rpki-client.org