$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa File: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (raw, json) Hash identifier: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA= Subject key identifier: 79:1C:63:1C:1A:A2:B6:6B:57:BC:8F:A1:D4:F8:5E:5B:8E:A2:BA:7E Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 0686 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa Signing time: Wed 20 Nov 2024 22:00:54 +0000 ROA not before: Wed 20 Nov 2024 22:00:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38797 IP address blocks: 125.62.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: Nov 20 22:00:54 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673e5c16-03b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:c9:d3:74:cc:44:7a:7e:2b:c2:56:9a:88: 5b:f8:c7:d3:5a:60:d6:9e:5e:0d:eb:20:2e:b1:53: f5:29:16:22:55:3d:d0:30:70:f3:8a:cc:9f:99:7b: 15:11:98:d7:17:31:99:9c:c8:a6:ed:be:ae:89:93: 06:c6:26:da:97:aa:2f:cf:f6:0f:8a:17:f2:86:d0: 5e:e5:e0:81:bc:ae:6f:3d:17:ab:89:09:37:a3:1b: 45:7d:39:49:0c:57:0f:2e:65:2e:5f:a2:f7:46:db: a8:38:67:06:80:eb:31:ee:db:78:7d:e9:95:42:32: b1:54:84:db:08:cb:dd:1b:61:47:4a:24:15:57:23: 2b:25:7c:b4:db:8b:c2:15:41:50:26:51:2b:5a:e9: 9b:5d:61:9a:40:a6:b2:3b:61:e4:85:2b:54:89:1a: 11:1d:b2:c5:25:b9:0e:d2:08:97:80:34:51:24:89: 05:14:82:12:aa:18:d0:0b:32:ca:2e:18:b0:fc:12: 6d:2e:54:c2:07:a6:1d:bc:2e:e0:a6:0b:d5:08:e2: 5e:a3:2a:22:51:bc:e4:fb:55:07:be:a0:82:24:21: 94:49:e3:a3:ce:02:34:d7:aa:5a:5a:e6:e0:8f:bd: 6d:ca:df:bb:0f:23:9f:4d:11:49:56:72:87:fc:11: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:63:1C:1A:A2:B6:6B:57:BC:8F:A1:D4:F8:5E:5B:8E:A2:BA:7E X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/3F6A3A284F1C11EB9953172CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.62.224.0/20 Signature Algorithm: sha256WithRSAEncryption aa:55:5e:f3:f6:5b:c1:25:99:4f:21:80:1e:16:68:7d:6b:c5: bd:4d:d5:48:44:b0:8f:96:f2:a4:af:6d:98:49:8e:f8:1b:df: ca:93:ec:13:22:4e:63:e4:84:9e:b9:79:81:03:eb:59:5f:76: 46:9b:c5:81:35:37:58:23:c5:35:75:23:e2:51:37:8a:ec:f5: 09:7e:ad:3a:07:54:4b:5c:a6:55:c3:f1:5e:4b:db:2a:31:7e: 03:8a:12:38:9b:81:ff:6c:92:07:e0:74:c0:0f:f3:5f:14:74: f9:bd:80:ac:3e:98:35:b2:8b:8d:a1:3e:28:ae:40:08:a5:7e: e6:2d:f0:e6:6e:34:88:35:3c:c4:09:d8:f5:c2:3c:81:ae:eb: 9d:d0:75:58:41:73:0d:a5:db:d2:11:71:42:2e:3b:b5:62:d4: 83:4e:9d:db:ed:a6:bd:8c:1a:89:55:09:bb:97:f8:1a:40:54: 80:d5:2f:26:b9:98:af:a5:35:4e:f7:70:d1:6c:67:f9:cf:21: d8:a5:5e:a7:cc:33:d0:8d:21:ef:7f:44:37:03:50:33:34:b2: f9:59:b3:5f:a1:64:1c:bb:9d:3b:4b:b7:10:b5:80:a8:09:2f: 7f:6c:f3:55:96:cb:ea:ad:c4:12:66:49:49:ed:db:7a:92:08: 39:ce:6b:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjQxMTIwMjIwMDU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlNWMxNi0wM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKvJ03TMRHp+K8JWmohb+MfTWmDWnl4N6yAusVP1KRYiVT3QMHDzisyfmXsV EZjXFzGZnMim7b6uiZMGxibal6ovz/YPihfyhtBe5eCBvK5vPReriQk3oxtFfTlJ DFcPLmUuX6L3RtuoOGcGgOsx7tt4femVQjKxVITbCMvdG2FHSiQVVyMrJXy024vC FUFQJlErWumbXWGaQKayO2HkhStUiRoRHbLFJbkO0giXgDRRJIkFFIISqhjQCzLK Lhiw/BJtLlTCB6YdvC7gpgvVCOJeoyoiUbzk+1UHvqCCJCGUSeOjzgI016paWubg j71tyt+7DyOfTRFJVnKH/BEr3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHkcYxwa orZrV7yPodT4XluOorp+MB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDQTkvRUVENzQ4RDY0RjE1MTFFQjhDN0VBQjFBQzRGOUFFMDIvM0Y2QTNBMjg0 RjFDMTFFQjk5NTMxNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR9PuAwDQYJKoZIhvcNAQELBQADggEBAKpVXvP2W8ElmU8h gB4WaH1rxb1N1UhEsI+W8qSvbZhJjvgb38qT7BMiTmPkhJ65eYED61lfdkabxYE1 N1gjxTV1I+JRN4rs9Ql+rToHVEtcplXD8V5L2yoxfgOKEjibgf9skgfgdMAP818U dPm9gKw+mDWyi42hPiiuQAilfuYt8OZuNIg1PMQJ2PXCPIGu653QdVhBcw2l29IR cUIuO7Vi1INOndvtpr2MGolVCbuX+BpAVIDVLya5mK+lNU73cNFsZ/nPIdilXqfM M9CNIe9/RDcDUDM0svlZs1+hZBy7nTtLtxC1gKgJL39s81WWy+qtxBJmSUnt23qS CDnOa7k= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org