$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa File: 3E054AE6D94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: O46yRWtaBt7gT5jw3rWvmde7FWI34FL8+oUWRCBV8ck= Subject key identifier: 5F:1C:CB:AC:B0:AD:3A:AF:BC:CE:CE:AC:3C:01:0E:98:22:1D:D6:29 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 25F7 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa Signing time: Thu 26 Sep 2024 15:52:53 +0000 ROA not before: Thu 26 Sep 2024 15:52:53 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 24221 IP address blocks: 125.5.125.0/24 maxlen: 24 125.5.126.0/24 maxlen: 24 202.57.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9719 (0x25f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446 Validity Not Before: Sep 26 15:52:53 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f58355-767c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:5b:2f:22:59:f1:e3:b1:6a:0e:96:7b:03: 1f:80:a2:ab:5e:1b:97:74:99:7f:f5:f3:87:59:78: be:00:7d:2c:e9:4d:d1:ec:c2:dc:bb:0e:4e:eb:59: 59:e2:e0:40:4e:6d:e4:25:e8:94:dc:c9:ae:1d:41: 38:8f:08:72:40:f6:1e:3b:d5:42:d2:cb:99:07:9a: 75:e7:2d:54:46:a5:9c:e8:91:d2:76:7a:5a:34:f0: 72:f4:51:d2:56:d3:6b:4e:e1:03:a9:5c:f8:6b:61: fe:14:8c:55:aa:90:1f:73:2a:ee:a9:2d:87:b8:14: 25:67:fb:93:aa:c8:1e:3c:6f:5f:9b:6e:32:63:b2: 62:6d:be:56:6b:11:c7:05:e8:8b:21:7b:00:dc:7c: 90:b1:a3:9c:bd:0a:bb:eb:83:45:27:22:97:fd:e2: 0f:b6:33:1b:d6:88:d9:94:0d:f7:9b:88:a5:d0:75: c2:ad:12:60:67:ef:91:22:5b:9f:41:ad:86:cf:97: d6:7f:32:18:73:09:67:a4:52:6a:19:88:52:86:f7: e1:15:62:c8:99:47:85:07:cf:c6:d0:19:8b:74:f0: f7:ba:d9:25:cc:ef:78:76:9c:75:9d:bb:93:df:bd: 43:c4:62:a5:36:2f:24:a2:77:42:c4:9d:9d:4f:cc: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1C:CB:AC:B0:AD:3A:AF:BC:CE:CE:AC:3C:01:0E:98:22:1D:D6:29 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3E054AE6D94411E98E28CD85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.5.125.0-125.5.126.255 202.57.109.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:64:b4:96:5e:fd:c3:47:92:67:c1:74:04:81:a1:3d:56:90: 91:1b:f0:97:7c:77:0b:50:90:ea:f0:8e:67:5a:50:7b:2c:6a: 75:a3:8b:18:cf:f0:08:e0:ae:47:f4:a8:84:48:4f:68:d2:66: ac:09:e0:cf:ba:5a:c4:54:3e:f2:27:80:bd:48:30:95:f6:f4: a8:ae:fd:f0:97:d7:c1:b3:76:60:d2:c8:ec:b7:43:9f:9d:bc: e6:5a:fc:db:91:2b:82:d5:c1:90:32:c1:66:0e:70:46:41:7c: c2:6f:f4:3e:2f:83:91:57:bf:8d:f8:29:c0:a0:6a:93:03:2b: ef:2b:cc:96:0e:de:f9:75:b1:ba:6d:cc:9a:4b:cf:71:21:08: 5e:2a:6b:84:ea:85:c7:00:b0:04:42:73:97:36:31:27:a9:b5: c5:9b:c7:07:dd:58:c8:66:89:96:25:e4:31:1e:06:45:c1:04: 4c:df:4f:6f:17:e3:1a:00:6b:e6:2b:75:e0:9f:6a:86:7f:12: 31:d5:27:8a:26:e4:f5:53:36:9b:32:81:89:dd:85:01:be:eb: 82:fe:24:3a:47:9a:2c:f8:e5:ce:ca:80:59:a6:25:85:ac:65: 0b:07:e6:82:6d:c7:4f:be:54:5c:30:ba:c3:eb:6f:5b:3f:cd: d9:c9:75:9d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICJfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjQwOTI2MTU1MjUzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY1ODM1NS03NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVJbLyJZ8eOxag6WewMfgKKrXhuXdJl/9fOHWXi+AH0s6U3R7MLcuw5O61lZ 4uBATm3kJeiU3MmuHUE4jwhyQPYeO9VC0suZB5p15y1URqWc6JHSdnpaNPBy9FHS VtNrTuEDqVz4a2H+FIxVqpAfcyruqS2HuBQlZ/uTqsgePG9fm24yY7Jibb5WaxHH BeiLIXsA3HyQsaOcvQq764NFJyKX/eIPtjMb1ojZlA33m4il0HXCrRJgZ++RIluf Qa2Gz5fWfzIYcwlnpFJqGYhShvfhFWLImUeFB8/G0BmLdPD3utklzO94dpx1nbuT 371DxGKlNi8kondCxJ2dT8y+TwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFF8cy6yw rTqvvM7OrDwBDpgiHdYpMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0UwNTRBRTZE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAH0FfQMEAH0FfgMEAMo5bTANBgkqhkiG9w0BAQsFAAOC AQEAjmS0ll79w0eSZ8F0BIGhPVaQkRvwl3x3C1CQ6vCOZ1pQeyxqdaOLGM/wCOCu R/SohEhPaNJmrAngz7paxFQ+8ieAvUgwlfb0qK798JfXwbN2YNLI7LdDn5285lr8 25ErgtXBkDLBZg5wRkF8wm/0Pi+DkVe/jfgpwKBqkwMr7yvMlg7e+XWxum3MmkvP cSEIXiprhOqFxwCwBEJzlzYxJ6m1xZvHB91YyGaJliXkMR4GRcEETN9PbxfjGgBr 5it14J9qhn8SMdUniibk9VM2mzKBid2FAb7rgv4kOkeaLPjlzsqAWaYlhaxlCwfm gm3HT75UXDC6w+tvWz/N2cl1nQ== -----END CERTIFICATE-----Generated at Sat Apr 5 08:15:42 2025 by rpki-client