$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa File: BA3E92207D2311EEA3696814C4F9AE02.roa (raw, json) Hash identifier: UKOODE+aPAFflvFmKVNYOJaCaH8V6bUeZIgoCqj/k80= Subject key identifier: FE:D2:44:79:1B:51:68:5D:20:9A:05:EA:E6:E0:DF:54:88:97:79:4F Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: D6 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa Signing time: Sun 15 Dec 2024 04:18:29 +0000 ROA not before: Sun 15 Dec 2024 04:18:29 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152104 IP address blocks: 180.131.132.0/23 maxlen: 23 180.131.132.0/24 maxlen: 24 180.131.133.0/24 maxlen: 24 2001:df3:1dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B Validity Not Before: Dec 15 04:18:29 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=675e5895-7f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:6f:9f:67:46:f8:c6:1b:41:5d:66:66:c5: b5:c6:40:ff:38:73:a2:05:3a:1d:7b:da:7d:62:4d: f8:61:e8:a9:38:69:52:cd:4f:c0:07:45:04:6e:8f: 20:88:ca:6f:98:42:1b:26:18:3a:f9:e1:a7:6b:72: e2:ce:f7:e7:5f:ac:c0:6e:b8:a8:9b:af:f9:ce:f1: 6b:c5:e0:11:d5:3e:d8:91:80:d2:23:49:cf:1e:4d: b7:d4:45:cf:49:af:71:49:04:07:00:57:f2:db:f3: 59:15:f6:b1:0b:86:1c:a8:36:87:e9:14:c3:cd:e7: 57:19:d3:56:f4:f6:a4:9a:81:4b:37:b3:37:a4:94: 1d:a1:3e:6b:54:c4:0d:c0:0d:df:f0:11:db:e1:00: a4:d5:e0:0c:6b:bd:67:bb:ef:21:29:25:f0:3c:4e: 20:21:95:60:8c:e7:fb:91:9d:2d:c2:ab:38:ba:d3: 25:0a:e7:11:26:20:05:67:d2:bc:f2:a1:f7:a8:b0: 8a:4f:22:61:99:9b:f1:c1:9e:98:23:bb:63:7b:8d: 90:b6:18:f5:64:4b:bd:c3:ff:92:78:37:3a:d3:fc: b5:da:3f:9c:6f:90:4e:6f:86:2c:93:a0:5e:ed:1a: 8b:55:28:5c:0c:dc:fb:db:e7:c7:a3:42:7f:8a:00: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:44:79:1B:51:68:5D:20:9A:05:EA:E6:E0:DF:54:88:97:79:4F X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/BA3E92207D2311EEA3696814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.131.132.0/23 IPv6: 2001:df3:1dc0::/48 Signature Algorithm: sha256WithRSAEncryption 99:ae:16:cd:6d:62:0f:e2:79:c3:af:65:4e:c4:00:12:18:16: 5d:53:ba:7d:0e:4e:49:f8:e5:74:ae:22:68:8c:9d:e9:6f:1e: 7c:4f:9e:cd:b9:e9:a8:a2:69:12:23:5b:37:2a:55:33:1a:b5: 4e:ee:fa:8a:da:5f:2a:06:1d:1a:a0:6f:4d:78:93:85:ba:8b: 04:f2:fb:96:9b:aa:2b:79:c8:8c:57:13:18:5e:ce:d1:13:d8: 5f:9c:48:a8:3a:0a:94:8a:1d:41:65:8a:f7:4e:e1:a3:34:0e: 60:a1:5e:c9:0a:fc:4e:29:5a:0c:a4:37:93:a1:84:3a:b3:3e: 46:df:d2:6b:b8:32:2a:7d:54:7e:d3:68:cf:57:bd:6a:6b:cc: dd:12:ca:00:f5:23:59:75:16:6f:a2:67:6e:7c:af:21:35:b9: 5a:b8:55:4a:19:7f:e1:84:d8:be:66:e6:36:65:9f:96:81:ce: 3f:e9:91:ba:0e:54:d9:bc:9e:e7:37:83:29:f0:75:eb:70:d6: ba:52:b2:56:ab:7c:39:b4:a6:8a:40:ef:df:a1:6c:bc:12:87: 28:3c:0a:9c:ec:d1:54:6e:9b:aa:33:12:2e:31:d2:a6:a5:84: c6:12:a3:88:69:2f:27:66:ba:b2:c3:2f:af:76:fa:08:dc:bc: 47:56:f9:56 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjQxMjE1MDQxODI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVlNTg5NS03ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS5vn2dG+MYbQV1mZsW1xkD/OHOiBTode9p9Yk34YeipOGlSzU/AB0UEbo8g iMpvmEIbJhg6+eGna3LizvfnX6zAbriom6/5zvFrxeAR1T7YkYDSI0nPHk231EXP Sa9xSQQHAFfy2/NZFfaxC4YcqDaH6RTDzedXGdNW9PakmoFLN7M3pJQdoT5rVMQN wA3f8BHb4QCk1eAMa71nu+8hKSXwPE4gIZVgjOf7kZ0twqs4utMlCucRJiAFZ9K8 8qH3qLCKTyJhmZvxwZ6YI7tje42Qthj1ZEu9w/+SeDc60/y12j+cb5BOb4Ysk6Be 7RqLVShcDNz72+fHo0J/igBC/QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP7SRHkb UWhdIJoF6ubg31SIl3lPMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjVFMUIvNzQ5NTI1MTQ3RDIyMTFFRUE3QjA3NDYwQzRGOUFFMDIvQkEzRTkyMjA3 RDIzMTFFRUEzNjk2ODE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAG0g4QwDwQCAAIwCQMHACABDfMdwDANBgkqhkiG9w0BAQsF AAOCAQEAma4WzW1iD+J5w69lTsQAEhgWXVO6fQ5OSfjldK4iaIyd6W8efE+ezbnp qKJpEiNbNypVMxq1Tu76itpfKgYdGqBvTXiThbqLBPL7lpuqK3nIjFcTGF7O0RPY X5xIqDoKlIodQWWK907hozQOYKFeyQr8TilaDKQ3k6GEOrM+Rt/Sa7gyKn1UftNo z1e9amvM3RLKAPUjWXUWb6JnbnyvITW5WrhVShl/4YTYvmbmNmWfloHOP+mRug5U 2bye5zeDKfB163DWulKyVqt8ObSmikDv36FsvBKHKDwKnOzRVG6bqjMSLjHSpqWE xhKjiGkvJ2a6ssMvr3b6CNy8R1b5Vg== -----END CERTIFICATE-----Generated at Wed Apr 9 11:04:44 2025 by rpki-client