$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3BBFB7D6902C11EA898EFD7FC4F9AE02.roa File: 3BBFB7D6902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: Wu1/IYLojPRNTANVKAdnUNwPWyOv0pzlQsxpke9jvTI= Subject key identifier: 39:3F:A6:23:1D:AC:13:D1:3F:CB:65:FC:4B:1F:FE:5E:F2:23:88:64 Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3534 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3BBFB7D6902C11EA898EFD7FC4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:31 +0000 ROA not before: Sat 02 Dec 2023 14:40:31 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 38265 IP address blocks: 122.154.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13620 (0x3534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:31 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41de-42f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:d1:d4:a7:3e:8c:5b:55:b8:8b:24:32:08: b0:9f:a2:fb:c8:44:d2:59:37:36:18:09:46:e9:da: 87:ac:4b:1e:6d:ed:2c:84:ca:e2:1a:75:a6:7a:04: e6:ab:1f:0b:0e:bf:3f:4a:b5:54:b5:89:d3:7f:4f: f9:01:09:ff:cd:d7:77:e2:16:2e:65:50:c8:8c:22: b6:90:f8:a8:dc:62:c3:05:dc:91:ae:fd:74:30:a7: 9d:19:b5:96:38:6f:6e:bc:9c:e2:1e:5e:cd:b3:91: 9b:89:8e:52:da:f8:6a:6c:b1:f7:e5:a8:5b:e5:41: 12:fd:6c:7d:3d:7b:98:e8:e0:80:b4:81:19:08:fa: e8:9f:fc:2b:c7:c3:dc:09:b7:37:d8:cd:2d:ee:88: 91:7e:58:e1:45:bb:d9:de:c7:c9:1e:e5:30:30:cf: 7d:c2:d3:3b:74:8a:f4:bf:ad:84:37:b4:7c:79:14: 39:ec:d0:e4:ed:d7:c3:18:93:72:ef:a8:38:78:12: e1:e2:34:2a:87:41:39:9f:52:49:e0:cf:f9:5e:dd: 5f:bc:d8:8b:aa:bf:39:74:6a:86:b3:bb:e5:9e:df: 0e:e2:62:c0:22:5d:f1:00:af:e5:12:6f:cc:35:83: 00:26:3b:36:6d:02:cd:71:6d:80:5d:4a:d5:94:2e: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3F:A6:23:1D:AC:13:D1:3F:CB:65:FC:4B:1F:FE:5E:F2:23:88:64 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3BBFB7D6902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.153.0/24 Signature Algorithm: sha256WithRSAEncryption a5:c6:d9:60:f8:7b:40:f3:16:61:b6:fb:79:70:3f:fe:d9:ca: 17:c6:d2:c9:cc:40:b1:9f:70:aa:f3:c7:68:29:ac:39:28:01: b0:c0:b8:de:87:0f:19:26:7f:4a:75:3d:16:27:f8:e0:a7:66: 94:87:8a:c9:8b:b5:87:32:f6:90:c5:c9:5a:6f:63:8e:28:8c: 6a:ef:d0:cd:32:c1:46:82:e9:72:94:48:81:28:48:d4:d4:16: b9:ef:fa:8a:1f:e2:1e:b4:16:2f:c8:54:a8:54:86:a8:57:89: 57:6f:63:78:1a:3c:bf:a7:5d:9b:8e:06:90:1b:a0:78:20:f5: 2e:5a:67:dd:40:9e:48:18:de:c5:1f:87:5d:d1:2b:86:bb:9c: ae:c1:ca:e2:ad:05:71:82:ac:24:df:09:cc:11:0c:7e:5e:f0: 0c:c4:b0:29:b7:9e:a4:8f:d0:98:eb:31:f7:b2:68:24:46:9c: af:44:63:38:1d:0b:a9:e6:89:71:29:a8:f9:4e:a1:35:8f:8d: 2a:c6:59:1b:3f:34:43:f3:17:81:73:68:82:0c:47:55:1d:0f: 4e:64:d8:79:4e:be:ed:0f:e0:7c:0f:72:09:23:07:eb:8a:d1: 39:3c:2e:36:58:52:6c:ce:9d:dd:85:af:37:e1:25:fd:53:9e: a7:0e:e7:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFkZS00MmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrHR1Kc+jFtVuIskMgiwn6L7yETSWTc2GAlG6dqHrEsebe0shMriGnWmegTm qx8LDr8/SrVUtYnTf0/5AQn/zdd34hYuZVDIjCK2kPio3GLDBdyRrv10MKedGbWW OG9uvJziHl7Ns5GbiY5S2vhqbLH35ahb5UES/Wx9PXuY6OCAtIEZCPron/wrx8Pc Cbc32M0t7oiRfljhRbvZ3sfJHuUwMM99wtM7dIr0v62EN7R8eRQ57NDk7dfDGJNy 76g4eBLh4jQqh0E5n1JJ4M/5Xt1fvNiLqr85dGqGs7vlnt8O4mLAIl3xAK/lEm/M NYMAJjs2bQLNcW2AXUrVlC5ASQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDk/piMd rBPRP8tl/Esf/l7yI4hkMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvM0JCRkI3RDY5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6mpkwDQYJKoZIhvcNAQELBQADggEBAKXG2WD4e0DzFmG2 +3lwP/7ZyhfG0snMQLGfcKrzx2gprDkoAbDAuN6HDxkmf0p1PRYn+OCnZpSHismL tYcy9pDFyVpvY44ojGrv0M0ywUaC6XKUSIEoSNTUFrnv+oof4h60Fi/IVKhUhqhX iVdvY3gaPL+nXZuOBpAboHgg9S5aZ91AnkgY3sUfh13RK4a7nK7ByuKtBXGCrCTf CcwRDH5e8AzEsCm3nqSP0JjrMfeyaCRGnK9EYzgdC6nmiXEpqPlOoTWPjSrGWRs/ NEPzF4FzaIIMR1UdD05k2HlOvu0P4HwPcgkjB+uK0Tk8LjZYUmzOnd2FrzfhJf1T nqcO5w0= -----END CERTIFICATE-----Generated at Thu May 16 15:21:28 2024 by rpki-client on console-ams.rpki-client.org