$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa File: D52009B06A6311EFA96F023DC4F9AE02.roa (raw, json) Hash identifier: e6iWa8MdPky5dcW6w9CmZsq4S/fRJU/ey9ksd6cHuVs= Subject key identifier: 57:A2:01:E9:0E:21:15:8E:AF:15:65:82:2A:50:A0:08:22:DF:50:86 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 34C4 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa Signing time: Wed 04 Sep 2024 02:17:28 +0000 ROA not before: Wed 04 Sep 2024 02:17:28 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 37997 IP address blocks: 124.195.128.0/20 maxlen: 20 124.195.128.0/22 maxlen: 22 124.195.128.0/24 maxlen: 24 124.195.129.0/24 maxlen: 24 124.195.130.0/24 maxlen: 24 124.195.131.0/24 maxlen: 24 124.195.132.0/22 maxlen: 22 124.195.132.0/24 maxlen: 24 124.195.133.0/24 maxlen: 24 124.195.134.0/24 maxlen: 24 124.195.135.0/24 maxlen: 24 124.195.136.0/22 maxlen: 22 124.195.136.0/24 maxlen: 24 124.195.137.0/24 maxlen: 24 124.195.138.0/24 maxlen: 24 124.195.139.0/24 maxlen: 24 124.195.140.0/22 maxlen: 22 124.195.140.0/24 maxlen: 24 124.195.141.0/24 maxlen: 24 124.195.142.0/24 maxlen: 24 124.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Sep 4 02:17:28 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66d7c338-878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:79:58:4c:13:bd:42:65:e5:17:13:fe:4f: e1:7e:7f:62:8c:06:da:4a:63:8e:61:df:20:67:17: 5f:26:ab:ee:cb:95:9d:84:22:7a:1e:8e:a0:83:ae: 76:d0:a6:27:5c:24:b7:3c:94:32:f0:3d:62:56:21: bd:7e:5b:da:a7:79:fb:1a:95:ad:91:7d:a8:29:76: ce:8d:64:58:f8:9c:c3:bb:b2:3d:b1:06:c6:24:83: d3:26:68:1f:a8:6b:9f:d6:84:7f:6c:fe:d2:87:ce: 7a:f8:81:1c:0b:24:9b:e2:a7:7b:e4:56:15:b9:d9: 44:28:a3:6f:92:3e:63:32:e0:ef:51:87:d8:56:81: 02:ec:fc:23:a4:73:a4:5f:0d:d6:da:5e:e4:ce:6e: 77:07:e4:d3:0f:e7:a6:aa:2d:13:6e:b8:64:aa:da: 27:1f:a6:17:a2:6c:b4:1c:3f:01:19:e8:f3:f6:74: bf:ba:a3:f2:e0:62:14:47:ba:48:fb:23:26:6a:23: f3:e7:79:c0:ba:da:9a:b2:d7:5b:f0:99:3c:19:fd: e8:46:66:90:78:eb:04:10:a7:43:97:9c:3f:d3:e1: 57:62:e6:17:a6:da:e9:08:dc:7e:f5:e4:db:08:c1: 25:c5:7e:4b:3f:cc:58:c3:f0:de:2e:1c:3b:47:77: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A2:01:E9:0E:21:15:8E:AF:15:65:82:2A:50:A0:08:22:DF:50:86 X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.195.128.0/20 Signature Algorithm: sha256WithRSAEncryption d6:ea:6e:d4:69:51:1b:1d:a2:74:95:e0:9e:fd:86:15:2a:62: 68:9d:b2:25:a8:0f:8d:b4:e3:f6:38:5d:2e:7a:11:fc:ea:57: 22:54:42:96:82:fe:45:06:2a:3b:90:9f:5d:53:a3:de:5c:6a: 37:b9:a2:c5:d2:35:49:67:d4:c6:1a:57:88:10:72:c0:e6:9b: 89:e4:43:35:75:8c:23:92:f0:80:b5:99:bc:af:aa:a6:d1:eb: 0a:86:ea:6d:ab:2f:7a:62:e4:f4:7d:5f:fa:af:a4:c4:fc:de: 16:7a:14:d3:63:00:0f:d7:d7:78:bf:b1:2f:64:78:99:da:f8: d7:c6:28:3d:78:26:9d:59:7e:d5:47:cb:87:d5:cb:7a:72:d6: 98:71:5c:69:cf:6e:a1:01:d6:97:c4:91:fe:26:be:85:78:d4: ab:9a:ec:9b:be:de:37:6b:2c:0f:f5:34:99:e8:7c:a3:72:0c: 99:1f:ce:7b:de:c8:7f:82:83:15:1c:c1:6c:3b:73:40:fe:01: 32:cc:24:87:c0:a4:38:ad:cc:3f:0c:5a:49:c9:0b:69:f4:68: 1d:90:f4:ec:56:e7:dc:24:c1:2f:e2:3d:ed:42:ee:3e:12:9c: d5:27:66:4b:20:2e:92:8c:dc:10:5a:43:ca:df:07:82:5b:f1: 1b:f2:37:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjQwOTA0MDIxNzI4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ3YzMzOC04NzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Rp5WEwTvUJl5RcT/k/hfn9ijAbaSmOOYd8gZxdfJqvuy5WdhCJ6Ho6gg652 0KYnXCS3PJQy8D1iViG9flvap3n7GpWtkX2oKXbOjWRY+JzDu7I9sQbGJIPTJmgf qGuf1oR/bP7Sh856+IEcCySb4qd75FYVudlEKKNvkj5jMuDvUYfYVoEC7PwjpHOk Xw3W2l7kzm53B+TTD+emqi0TbrhkqtonH6YXomy0HD8BGejz9nS/uqPy4GIUR7pI +yMmaiPz53nAutqastdb8Jk8Gf3oRmaQeOsEEKdDl5w/0+FXYuYXptrpCNx+9eTb CMElxX5LP8xYw/DeLhw7R3d2hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFeiAekO IRWOrxVlgipQoAgi31CGMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczOTQvNEY1OTE4NkExRDZGMTFFMjlCNTQ0NkIxMDhCMDJDRDIvRDUyMDA5QjA2 QTYzMTFFRkE5NkYwMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8w4AwDQYJKoZIhvcNAQELBQADggEBANbqbtRpURsdonSV 4J79hhUqYmidsiWoD4204/Y4XS56EfzqVyJUQpaC/kUGKjuQn11To95caje5osXS NUln1MYaV4gQcsDmm4nkQzV1jCOS8IC1mbyvqqbR6wqG6m2rL3pi5PR9X/qvpMT8 3hZ6FNNjAA/X13i/sS9keJna+NfGKD14Jp1ZftVHy4fVy3py1phxXGnPbqEB1pfE kf4mvoV41Kua7Ju+3jdrLA/1NJnofKNyDJkfznveyH+CgxUcwWw7c0D+ATLMJIfA pDitzD8MWknJC2n0aB2Q9OxW59wkwS/iPe1C7j4SnNUnZksgLpKM3BBaQ8rfB4Jb 8RvyN80= -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org