$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa File: 101569A41D3111EB9ED04852C4F9AE02.roa (raw, json) Hash identifier: u3LgYtUZlz6BUBYFQnQYN2jVKVWcEC+l6vlIIyry9uQ= Subject key identifier: 01:EB:D2:9A:A1:3D:2A:46:5E:3B:88:58:C0:86:7D:36:1E:E9:F7:B9 Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 353C Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:38 +0000 ROA not before: Sat 02 Dec 2023 14:40:38 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9835 IP address blocks: 202.139.202.0/24 maxlen: 24 202.139.203.0/24 maxlen: 24 2001:c38:90a1::/48 maxlen: 48 2001:c38:90a3::/48 maxlen: 48 2001:c38:90a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:38 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41e6-4050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a1:d7:36:3f:77:2c:ef:d7:26:3c:53:9b:37: ce:6d:c5:ef:c4:00:76:3c:e0:a2:c4:d0:9b:24:f4: f6:c5:b0:9e:af:11:53:8b:cd:0e:b0:d5:24:aa:2c: 72:93:de:3f:0a:b3:9d:e3:ed:70:8c:a4:7a:20:20: ba:4d:5a:ae:f5:c3:b6:a1:49:67:5a:e3:0a:fd:6e: 5e:1e:fc:0c:f9:76:42:cc:d9:c3:e4:17:50:9e:85: a2:26:83:25:fe:13:c9:49:a9:10:5e:17:2f:b6:1d: 42:f2:a7:f6:6a:e6:71:3c:fe:20:72:e4:08:ad:0b: 0d:f6:87:c4:8a:b2:c7:6d:e6:43:a9:dd:c1:90:8b: b3:2a:c7:76:17:34:66:d1:43:21:02:75:b4:02:be: 10:4f:1e:59:19:a1:36:19:f0:46:97:3a:15:f5:71: a1:30:3d:31:72:18:25:55:44:1b:d6:ca:97:11:1f: fc:f4:bb:50:af:3d:6f:df:40:f9:20:06:cc:30:97: 95:d6:36:33:f7:27:46:1c:d3:0e:cf:6e:bb:77:61: 44:6f:64:54:f0:b7:bc:6a:d5:dc:28:44:64:19:63: 98:1b:40:4d:22:e3:af:bd:ad:8f:cb:57:97:43:3e: 5c:a1:03:19:7f:9b:9d:d1:5c:e4:15:af:21:7a:7c: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EB:D2:9A:A1:3D:2A:46:5E:3B:88:58:C0:86:7D:36:1E:E9:F7:B9 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.139.202.0/23 IPv6: 2001:c38:90a1::/48 2001:c38:90a3::-2001:c38:90a4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6f:aa:4c:25:55:4d:98:78:c4:b3:9a:d0:ac:49:6d:f8:1a:15: 41:ca:c6:47:8a:b4:e6:4b:72:01:45:8c:04:a2:30:c7:8c:f1: 56:0c:3f:39:ac:36:7e:24:cf:87:7f:b7:1d:aa:ab:e6:dc:16: 0a:b9:fe:ca:98:21:28:bc:e0:6e:64:22:6a:4d:7a:be:3c:e1: b6:03:26:6d:60:a5:7e:58:9a:55:06:85:27:6a:13:d2:a3:3f: 84:8b:91:c5:3c:af:60:9b:63:2a:da:12:f0:5e:d5:8d:4d:9b: 79:0a:c3:0f:c6:14:ba:8f:02:94:84:c6:87:53:a8:b8:5f:ef: 7c:a4:e3:5f:d7:65:c9:a2:65:d1:80:18:d0:8e:d0:1c:4e:d8: 8f:06:3c:ab:c2:f2:fa:0b:5b:fc:ad:d2:bf:67:c2:0c:c5:d8: 2d:a3:0b:15:1d:e6:bf:f0:5b:c8:0b:e4:a3:49:e2:3b:70:76: 99:11:65:da:51:b5:e6:59:a1:96:e2:21:cb:02:54:ba:45:97: ff:ed:2f:f5:c4:77:30:45:b7:fa:b2:38:3f:95:3a:fb:72:03: 4a:6a:33:17:6e:f0:18:0d:34:96:bc:a6:85:14:b0:44:76:fd: a9:36:f0:da:56:db:53:fc:3f:61:07:d2:ac:0e:93:29:ec:f1: a2:86:6d:61 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDM4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFlNi00MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaHXNj93LO/XJjxTmzfObcXvxAB2POCixNCbJPT2xbCerxFTi80OsNUkqixy k94/CrOd4+1wjKR6ICC6TVqu9cO2oUlnWuMK/W5eHvwM+XZCzNnD5BdQnoWiJoMl /hPJSakQXhcvth1C8qf2auZxPP4gcuQIrQsN9ofEirLHbeZDqd3BkIuzKsd2FzRm 0UMhAnW0Ar4QTx5ZGaE2GfBGlzoV9XGhMD0xchglVUQb1sqXER/89LtQrz1v30D5 IAbMMJeV1jYz9ydGHNMOz267d2FEb2RU8Le8atXcKERkGWOYG0BNIuOvva2Py1eX Qz5coQMZf5ud0VzkFa8henxpAQIDAQABo4ICujCCArYwHQYDVR0OBBYEFAHr0pqh PSpGXjuIWMCGfTYe6fe5MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMTAxNTY5QTQx RDMxMTFFQjlFRDA0ODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAHKi8owIwQCAAIwHQMHACABDDiQoTASAwcAIAEMOJCjAwcA IAEMOJCkMA0GCSqGSIb3DQEBCwUAA4IBAQBvqkwlVU2YeMSzmtCsSW34GhVBysZH irTmS3IBRYwEojDHjPFWDD85rDZ+JM+Hf7cdqqvm3BYKuf7KmCEovOBuZCJqTXq+ POG2AyZtYKV+WJpVBoUnahPSoz+Ei5HFPK9gm2Mq2hLwXtWNTZt5CsMPxhS6jwKU hMaHU6i4X+98pONf12XJomXRgBjQjtAcTtiPBjyrwvL6C1v8rdK/Z8IMxdgtowsV Hea/8FvIC+SjSeI7cHaZEWXaUbXmWaGW4iHLAlS6RZf/7S/1xHcwRbf6sjg/lTr7 cgNKajMXbvAYDTSWvKaFFLBEdv2pNvDaVttT/D9hB9KsDpMp7PGihm1h -----END CERTIFICATE-----Generated at Thu May 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org