$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa File: 38B031A6902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: o0Xzmzbz0xyjbqUATOIGkUtO8VdHsr23GjZ6H5xYJsI= Subject key identifier: 23:0F:D7:F2:5A:BF:90:35:10:D3:18:DB:BE:60:A8:10:81:48:86:FB Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 352E Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:25 +0000 ROA not before: Sat 02 Dec 2023 14:40:25 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 18197 IP address blocks: 61.7.194.0/24 maxlen: 24 110.78.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13614 (0x352e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:25 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41d9-2c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:55:5f:8d:bc:49:36:d2:53:1b:1c:40:e8: 0d:f7:31:5c:f8:62:c9:e6:1e:e8:20:02:e2:e7:aa: 44:29:c6:b1:df:26:a4:53:90:cd:31:f6:de:a5:99: 57:ca:6e:3e:b2:96:a3:0c:75:97:86:2a:20:10:17: 66:b4:6e:2b:06:47:bd:07:b7:09:cd:6a:23:b2:2c: 3f:74:1a:70:1f:63:38:cc:a4:d6:7e:ea:61:67:40: d7:a9:23:c6:74:29:94:15:e4:07:c9:63:6e:b6:3b: 42:93:ed:3b:9b:af:69:90:f1:29:79:1e:78:60:84: 04:fe:8b:0c:a8:12:5a:7f:f7:fd:83:e9:b0:4a:c7: 15:ba:94:99:58:b3:cb:2b:a2:9e:ad:8c:83:af:51: b5:a0:47:6e:bb:93:d1:1e:b0:bf:5f:8f:6b:6d:7b: 2c:ad:6c:88:c8:03:b9:67:bb:94:80:e7:80:bf:7d: 12:fe:ec:91:cb:2f:33:b6:d5:4a:eb:82:d6:b3:5b: b1:66:84:83:71:59:e3:4f:fc:7b:5d:f4:24:b3:30: 9d:93:da:58:09:6c:0a:13:4b:09:f2:6d:35:4e:fb: 84:e9:13:40:c9:85:81:60:4f:2e:53:69:4a:b1:f8: 6e:90:e0:b6:3c:18:16:10:56:3c:e7:0b:f3:ce:f5: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0F:D7:F2:5A:BF:90:35:10:D3:18:DB:BE:60:A8:10:81:48:86:FB X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/38B031A6902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.7.194.0/24 110.78.7.0/24 Signature Algorithm: sha256WithRSAEncryption c0:6a:e5:67:11:d7:67:8e:1d:57:5e:fe:dc:33:c3:77:d2:a8: 30:29:4b:b8:8e:25:5b:8d:ae:5b:a9:00:72:19:c6:df:a8:46: f1:da:89:ea:10:5f:7e:04:cc:6a:48:0d:45:66:9e:ab:ca:c7: 21:e5:ec:f0:d7:a5:89:ee:c4:a4:b1:b5:fb:36:11:1f:e8:9b: 88:a5:c7:14:75:ae:a8:2e:0a:01:6c:18:bd:fc:89:47:b9:58: f7:87:95:cc:25:34:c1:f3:f1:9b:be:c5:02:5d:44:03:57:cd: 41:e5:04:d1:49:49:ff:e7:46:46:75:33:84:be:ab:ee:96:18: f6:67:1b:81:68:45:d1:8c:6b:5d:a0:3d:b9:b0:e9:f1:d7:00: 59:a9:74:68:86:f1:c4:a1:ef:4e:0f:5f:ac:54:cc:fc:08:aa: 46:c9:f6:97:cc:34:71:91:f4:5b:fc:ce:3d:b6:fc:30:65:25: 5d:7e:94:e2:c8:61:2f:31:84:d3:b3:16:f3:17:94:c3:cb:7b: c6:a2:9a:3c:d5:b8:90:ac:c4:b6:b0:ea:c5:25:32:ac:13:2f: a3:4f:d8:aa:af:e3:b6:0d:f0:4e:5f:cf:73:e6:a3:a2:1f:55: a6:0e:93:51:d4:fe:ac:b9:5a:70:ef:52:d7:9c:1a:78:1a:b8: ac:c9:85:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDI1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFkOS0yYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvURVX428STbSUxscQOgN9zFc+GLJ5h7oIALi56pEKcax3yakU5DNMfbepZlX ym4+spajDHWXhiogEBdmtG4rBke9B7cJzWojsiw/dBpwH2M4zKTWfuphZ0DXqSPG dCmUFeQHyWNutjtCk+07m69pkPEpeR54YIQE/osMqBJaf/f9g+mwSscVupSZWLPL K6KerYyDr1G1oEduu5PRHrC/X49rbXssrWyIyAO5Z7uUgOeAv30S/uyRyy8zttVK 64LWs1uxZoSDcVnjT/x7XfQkszCdk9pYCWwKE0sJ8m01TvuE6RNAyYWBYE8uU2lK sfhukOC2PBgWEFY85wvzzvXS6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCMP1/Ja v5A1ENMY275gqBCBSIb7MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMzhCMDMxQTY5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA9B8IDBABuTgcwDQYJKoZIhvcNAQELBQADggEBAMBq5WcR 12eOHVde/twzw3fSqDApS7iOJVuNrlupAHIZxt+oRvHaieoQX34EzGpIDUVmnqvK xyHl7PDXpYnuxKSxtfs2ER/om4ilxxR1rqguCgFsGL38iUe5WPeHlcwlNMHz8Zu+ xQJdRANXzUHlBNFJSf/nRkZ1M4S+q+6WGPZnG4FoRdGMa12gPbmw6fHXAFmpdGiG 8cSh704PX6xUzPwIqkbJ9pfMNHGR9Fv8zj22/DBlJV1+lOLIYS8xhNOzFvMXlMPL e8aimjzVuJCsxLaw6sUlMqwTL6NP2Kqv47YN8E5fz3Pmo6IfVaYOk1HU/qy5WnDv UtecGngauKzJhcs= -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org