$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/374334EE902C11EA898EFD7FC4F9AE02.roa File: 374334EE902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: 6BUJ398DYxae+E4fooIIYkNzcIAYv4On9peI34/Pr+I= Subject key identifier: 22:EF:D6:A6:9C:48:52:AB:D3:9C:59:BE:B1:CA:85:F0:98:72:63:4E Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 352A Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/374334EE902C11EA898EFD7FC4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:23 +0000 ROA not before: Sat 02 Dec 2023 14:40:23 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138427 IP address blocks: 122.154.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:23 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41d6-7111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:e6:01:76:a8:d1:4a:5c:25:03:e5:84:c2: 40:bf:c0:4e:33:d7:19:93:14:54:5a:44:fd:6a:fb: 67:35:fc:26:6f:02:af:fe:1f:fd:13:12:06:6c:0b: 9f:54:76:61:bf:54:a0:9c:dc:00:4e:4b:20:bf:6a: 4a:04:f3:76:aa:2b:6a:0f:df:a8:e1:c1:2c:5a:00: 5f:f7:45:d9:b3:b6:6b:9d:0a:30:ab:f5:97:10:18: 37:da:db:ba:71:6d:8a:30:92:e3:14:1b:29:c0:10: 61:9b:a0:0a:d1:b7:08:35:82:4b:76:e1:7f:0a:35: 41:24:93:66:bf:e6:ea:dd:ef:a2:90:53:b2:40:72: d2:65:eb:b1:66:a6:0c:3d:2f:81:ac:84:16:27:b3: c4:3f:34:75:11:fd:2a:6c:65:b4:67:ca:c0:67:38: 67:1b:99:b3:33:de:2d:19:54:b0:f9:4e:f5:3e:bf: 3e:91:1b:d9:f7:b8:06:e4:b4:1c:d7:38:6e:f4:b4: 07:ec:97:d9:b8:77:6b:16:45:78:64:4a:03:43:a8: 4d:88:b3:5e:3d:59:fe:03:ec:00:57:aa:aa:b0:b0: 3b:4c:d7:05:2b:6d:5c:a7:58:38:9f:53:56:0b:e2: 1c:f3:fc:be:3d:f0:fe:5c:b3:da:e5:2e:0f:cb:fe: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:D6:A6:9C:48:52:AB:D3:9C:59:BE:B1:CA:85:F0:98:72:63:4E X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/374334EE902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:b5:9e:1f:11:93:71:a8:f6:6f:91:8e:a3:9e:02:ca:d5:a2: c1:2a:7b:40:c9:e4:46:c4:87:46:55:e3:80:fe:bc:d0:17:bd: c6:c3:06:23:32:96:03:d1:ff:ee:73:e2:11:0f:39:ca:35:3d: bf:43:88:1a:f0:c4:86:13:b9:39:8f:59:50:7f:70:6b:84:55: 1f:30:cc:e9:98:b7:f3:5c:3a:96:a2:6a:2e:c5:eb:20:c2:83: 86:fa:65:4a:33:96:8d:47:10:c3:d9:45:61:ae:47:91:55:8f: 17:af:b8:08:f4:51:d4:ac:62:3a:b2:66:a0:88:2f:3f:e1:77: 3e:e4:5d:db:d6:43:5b:a0:9e:f2:43:fd:d0:dc:b5:67:68:4f: fb:ff:5b:01:ce:ca:4a:5f:27:61:cf:c5:e9:00:a6:72:0f:9b: 1d:4c:db:08:d7:b5:49:3b:fe:71:19:ab:d0:e9:53:f1:09:0f: 8a:5f:27:36:bc:ae:e8:c6:bb:1a:f5:31:3b:45:f3:2f:86:f2: c7:10:3c:9f:55:94:82:90:0f:3e:cf:3a:e4:59:24:2b:d1:94: 68:1c:6f:12:76:85:2d:0f:91:fb:06:c0:70:71:86:3d:09:10: e7:b6:ee:d8:c9:50:66:32:0b:03:af:81:39:11:f9:85:17:6d: 99:b8:8d:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDIzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFkNi03MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMbmAXao0UpcJQPlhMJAv8BOM9cZkxRUWkT9avtnNfwmbwKv/h/9ExIGbAuf VHZhv1SgnNwATksgv2pKBPN2qitqD9+o4cEsWgBf90XZs7ZrnQowq/WXEBg32tu6 cW2KMJLjFBspwBBhm6AK0bcINYJLduF/CjVBJJNmv+bq3e+ikFOyQHLSZeuxZqYM PS+BrIQWJ7PEPzR1Ef0qbGW0Z8rAZzhnG5mzM94tGVSw+U71Pr8+kRvZ97gG5LQc 1zhu9LQH7JfZuHdrFkV4ZEoDQ6hNiLNePVn+A+wAV6qqsLA7TNcFK21cp1g4n1NW C+Ic8/y+PfD+XLPa5S4Py/6u9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCLv1qac SFKr05xZvrHKhfCYcmNOMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMzc0MzM0RUU5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6mg0wDQYJKoZIhvcNAQELBQADggEBAA21nh8Rk3Go9m+R jqOeAsrVosEqe0DJ5EbEh0ZV44D+vNAXvcbDBiMylgPR/+5z4hEPOco1Pb9DiBrw xIYTuTmPWVB/cGuEVR8wzOmYt/NcOpaiai7F6yDCg4b6ZUozlo1HEMPZRWGuR5FV jxevuAj0UdSsYjqyZqCILz/hdz7kXdvWQ1ugnvJD/dDctWdoT/v/WwHOykpfJ2HP xekApnIPmx1M2wjXtUk7/nEZq9DpU/EJD4pfJza8rujGuxr1MTtF8y+G8scQPJ9V lIKQDz7POuRZJCvRlGgcbxJ2hS0PkfsGwHBxhj0JEOe27tjJUGYyCwOvgTkR+YUX bZm4jSI= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:23 2024 by rpki-client on console-fra.rpki-client.org