$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa File: 4C9925F2A4C911E782854F50C4F9AE02.roa (raw, json) Hash identifier: R2/SizcxlFy6GiKbWh9BC6IePjx7ZGaL4yUJEBHXwDg= Subject key identifier: 63:3B:CB:C7:50:0C:70:23:86:B9:99:70:96:0F:F7:73:4F:E5:90:6D Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 359D Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa Signing time: Thu 12 Dec 2024 14:30:37 +0000 ROA not before: Thu 12 Dec 2024 14:30:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 18190 IP address blocks: 111.125.84.0/24 maxlen: 24 121.58.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13725 (0x359d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454 Validity Not Before: Dec 12 14:30:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675af38c-96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:68:09:df:01:17:57:73:f0:a5:d7:e4:60: 79:38:b3:08:71:a0:1a:3c:67:60:b6:df:9e:1d:cf: 50:f7:d4:5c:ef:6f:7b:09:90:22:81:30:fe:b4:e1: 4c:49:3f:df:a3:14:d3:55:27:ae:02:88:fa:23:89: 25:a9:54:b7:a2:93:6b:a1:15:f8:bb:c3:61:be:fd: 3e:15:61:e0:74:e2:1b:13:50:e0:33:ad:59:ca:2e: 1f:e5:86:2f:a9:c8:f1:b5:ed:87:28:02:b6:9e:c0: 06:d3:5a:6f:9e:4b:73:4a:68:67:a8:bc:99:f7:ad: 53:8d:3b:98:6c:4c:81:f5:55:36:42:49:12:9f:a9: 71:e8:c2:ed:c5:0a:db:51:b9:40:39:ba:5d:5f:ea: fe:26:ef:bb:61:fa:94:f0:ba:87:59:59:a7:13:cf: db:13:ce:d6:69:49:f0:18:ce:5b:74:7a:22:53:2f: dc:23:83:c7:7a:60:8d:85:30:32:4d:59:8b:1f:26: c1:d9:75:aa:2f:ca:54:f6:47:7a:28:ca:24:a9:5d: fa:8b:94:49:10:13:21:19:a7:b1:f9:a4:d2:21:d4: 94:93:7c:62:52:68:21:c6:07:fc:26:b5:59:4b:bc: 3a:f0:de:ec:67:0b:85:1a:03:10:31:90:ef:4a:f3: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:CB:C7:50:0C:70:23:86:B9:99:70:96:0F:F7:73:4F:E5:90:6D X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4C9925F2A4C911E782854F50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.84.0/24 121.58.198.0/24 Signature Algorithm: sha256WithRSAEncryption 15:70:ca:42:93:6c:5e:ef:45:78:82:03:f0:5e:62:a4:d8:73: 92:d8:51:ae:90:5b:75:ee:7e:79:49:3d:e8:6d:ad:2a:41:dc: 2c:51:f8:72:1c:0e:14:35:ff:ba:06:d4:24:41:ca:4a:4d:ab: 27:92:1b:cf:80:7b:70:18:83:6d:21:d9:42:83:46:ee:7d:2b: 5c:0c:56:62:22:7a:ac:11:5d:26:6b:a2:4e:a2:22:99:28:34: a3:75:7e:f0:e7:fb:bd:eb:88:cb:bf:6d:02:29:64:85:25:5a: b1:05:4e:fc:9e:c1:b0:9b:38:2b:da:a2:46:24:01:07:94:8d: 7e:f3:76:51:83:e2:56:75:4d:4e:14:7e:bf:cd:9a:e4:fe:af: 8b:c7:4e:6b:b0:4b:df:ff:86:05:67:da:8d:71:86:df:80:cb: 2b:93:f6:25:23:9d:5b:32:1b:88:9e:70:6d:e9:60:ff:cc:60: 15:f2:e1:96:cd:36:d9:70:19:76:ef:e8:1d:0f:37:d9:f2:ca: ca:a7:a2:08:00:bb:0b:82:69:60:4d:fc:0b:61:42:fe:f2:13: 90:5e:27:8c:2e:56:49:b0:33:71:a0:34:2f:9b:3f:77:d4:3f: 06:c0:5e:9d:2b:74:00:d1:24:8b:66:1a:0e:eb:06:95:7a:04: 04:71:fc:a9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjQxMjEyMTQzMDM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzVhZjM4Yy05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24toCd8BF1dz8KXX5GB5OLMIcaAaPGdgtt+eHc9Q99Rc7297CZAigTD+tOFM ST/foxTTVSeuAoj6I4klqVS3opNroRX4u8Nhvv0+FWHgdOIbE1DgM61Zyi4f5YYv qcjxte2HKAK2nsAG01pvnktzSmhnqLyZ961TjTuYbEyB9VU2QkkSn6lx6MLtxQrb UblAObpdX+r+Ju+7YfqU8LqHWVmnE8/bE87WaUnwGM5bdHoiUy/cI4PHemCNhTAy TVmLHybB2XWqL8pU9kd6KMokqV36i5RJEBMhGaex+aTSIdSUk3xiUmghxgf8JrVZ S7w68N7sZwuFGgMQMZDvSvOIuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGM7y8dQ DHAjhrmZcJYP93NP5ZBtMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvNEM5OTI1RjJB NEM5MTFFNzgyODU0RjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABvfVQDBAB5OsYwDQYJKoZIhvcNAQELBQADggEBABVwykKT bF7vRXiCA/BeYqTYc5LYUa6QW3XufnlJPehtrSpB3CxR+HIcDhQ1/7oG1CRBykpN qyeSG8+Ae3AYg20h2UKDRu59K1wMVmIieqwRXSZrok6iIpkoNKN1fvDn+73riMu/ bQIpZIUlWrEFTvyewbCbOCvaokYkAQeUjX7zdlGD4lZ1TU4Ufr/NmuT+r4vHTmuw S9//hgVn2o1xht+AyyuT9iUjnVsyG4iecG3pYP/MYBXy4ZbNNtlwGXbv6B0PN9ny ysqnoggAuwuCaWBN/AthQv7yE5BeJ4wuVkmwM3GgNC+bP3fUPwbAXp0rdADRJItm Gg7rBpV6BARx/Kk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:20 2025 by rpki-client