$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa File: FEA22F60A5F111EF9C230280C4F9AE02.roa (raw, json) Hash identifier: OVhcL1qGKO0GHZa+RR3G51dO/fgNzTcB12exXffOgIs= Subject key identifier: 23:D8:70:82:6F:B1:26:C2:B1:89:D6:FE:4F:94:85:63:29:5B:B8:94 Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 112E Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa Signing time: Mon 18 Nov 2024 21:13:45 +0000 ROA not before: Mon 18 Nov 2024 21:13:45 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 38056 IP address blocks: 125.253.128.0/19 maxlen: 19 125.253.134.0/23 maxlen: 23 125.253.138.0/24 maxlen: 24 125.253.145.0/24 maxlen: 24 125.253.152.0/24 maxlen: 24 125.253.153.0/24 maxlen: 24 125.253.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4398 (0x112e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Nov 18 21:13:45 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=673bae09-7de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:64:51:c2:1d:9a:c9:e0:34:2c:f3:ad:a2: da:7c:40:60:03:3c:b3:91:52:fe:a1:3e:e7:d7:f4: 7b:b8:f4:e7:5b:a7:34:44:85:9c:51:f6:c0:2e:16: 85:83:87:5b:f0:37:15:67:f5:9d:43:44:c4:4e:af: 6a:6a:d2:b4:73:2a:5d:21:03:e0:5b:99:50:a9:74: da:3c:9a:dc:d8:ad:bb:03:c2:43:e2:f4:e1:8b:6b: 3e:a4:50:1a:be:60:6f:82:b6:c5:50:af:d4:d9:63: 09:df:08:81:4e:82:5a:79:b1:df:d0:09:0c:cc:13: 9a:9e:b6:da:87:48:a2:db:ba:3c:b2:7b:fc:ad:4e: ee:71:cd:6e:27:ee:76:9e:55:14:91:9a:93:58:e4: a9:39:9c:70:e0:30:9f:5f:37:2f:84:b6:83:d0:0f: 7c:ad:3e:07:c0:03:d5:4a:18:fc:51:b5:78:02:36: 23:fc:a1:d2:79:9b:2e:71:c8:c5:a0:45:52:cf:a3: d7:1d:84:80:7b:c4:10:27:48:4a:ea:8a:0a:24:94: a2:9f:7d:6f:82:52:cd:8b:1c:a2:23:1c:88:c6:db: 43:09:75:c2:56:29:73:94:c5:95:b7:fc:b2:4b:58: 8b:f3:9e:ec:cb:6d:3c:eb:cd:6d:fa:5c:fa:4e:16: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D8:70:82:6F:B1:26:C2:B1:89:D6:FE:4F:94:85:63:29:5B:B8:94 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/FEA22F60A5F111EF9C230280C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.253.128.0/19 Signature Algorithm: sha256WithRSAEncryption 89:b9:8e:47:d0:82:e5:dc:68:32:07:0c:ee:84:cc:8a:09:7a: 30:c3:6a:68:0c:b4:ab:e4:e7:3b:bb:d9:25:9a:b7:95:16:f3: a8:a4:55:86:1f:46:77:e0:8f:95:26:76:5e:41:c8:70:b1:66: 06:06:07:bf:b5:57:1d:9f:b1:79:a6:bd:01:cc:13:dd:06:d5: ac:97:fb:dd:30:5d:62:57:b5:0c:2c:94:43:38:a2:6b:43:be: c7:eb:c5:dc:ba:b5:eb:2b:ef:c8:7b:be:3b:e5:56:86:b8:92: 0c:34:1f:22:bd:e8:89:d2:9b:0b:bc:50:e5:e2:f6:9a:af:9c: 67:62:96:5a:0d:35:6a:f6:44:22:6f:ab:e7:62:3e:33:f2:80: 01:8c:a3:6f:7d:b5:6c:7f:0d:ef:21:9e:f0:07:1a:87:72:f1: 7f:c8:3e:07:06:f8:a1:08:c3:a5:6e:7b:15:1f:cf:cd:3a:2a: c8:6b:1a:a4:ed:d5:3a:e3:2d:da:dc:4c:98:f5:95:63:ed:97: 5a:95:25:9e:61:c8:4d:c5:e3:dd:b6:02:7e:8f:1c:a1:0e:d4: 75:f0:29:fb:63:d9:d4:dd:62:6f:b6:40:de:da:68:cd:1a:22: 1f:e5:0e:ba:bf:4c:45:45:63:d7:54:29:9a:bc:4a:b4:6d:9d: 98:1b:c3:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICES4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjQxMTE4MjExMzQ1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiYWUwOS03ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXFkUcIdmsngNCzzraLafEBgAzyzkVL+oT7n1/R7uPTnW6c0RIWcUfbALhaF g4db8DcVZ/WdQ0TETq9qatK0cypdIQPgW5lQqXTaPJrc2K27A8JD4vThi2s+pFAa vmBvgrbFUK/U2WMJ3wiBToJaebHf0AkMzBOanrbah0ii27o8snv8rU7ucc1uJ+52 nlUUkZqTWOSpOZxw4DCfXzcvhLaD0A98rT4HwAPVShj8UbV4AjYj/KHSeZsuccjF oEVSz6PXHYSAe8QQJ0hK6ooKJJSin31vglLNixyiIxyIxttDCXXCVilzlMWVt/yy S1iL857sy208681t+lz6ThYtjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPYcIJv sSbCsYnW/k+UhWMpW7iUMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGNzIvNkY0MjkzRDRGOEQ1MTFFODgzNjMxRDdBQzRGOUFFMDIvRkVBMjJGNjBB NUYxMTFFRjlDMjMwMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAV9/YAwDQYJKoZIhvcNAQELBQADggEBAIm5jkfQguXcaDIH DO6EzIoJejDDamgMtKvk5zu72SWat5UW86ikVYYfRnfgj5Umdl5ByHCxZgYGB7+1 Vx2fsXmmvQHME90G1ayX+90wXWJXtQwslEM4omtDvsfrxdy6tesr78h7vjvlVoa4 kgw0HyK96InSmwu8UOXi9pqvnGdilloNNWr2RCJvq+diPjPygAGMo299tWx/De8h nvAHGody8X/IPgcG+KEIw6VuexUfz806KshrGqTt1TrjLdrcTJj1lWPtl1qVJZ5h yE3F4922An6PHKEO1HXwKftj2dTdYm+2QN7aaM0aIh/lDrq/TEVFY9dUKZq8SrRt nZgbw7I= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:16 2024 by rpki-client on console-fra.rpki-client.org