$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3DF267D8902C11EA898EFD7FC4F9AE02.roa File: 3DF267D8902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: /BMcxQygi9tpG4o82bbosjeUrZyeDbkq+vG+fFZRz5o= Subject key identifier: B4:89:74:9C:7F:74:BF:A1:56:25:E9:EA:AD:53:5D:8D:DE:C8:77:BE Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3536 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3DF267D8902C11EA898EFD7FC4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:32 +0000 ROA not before: Sat 02 Dec 2023 14:40:32 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45806 IP address blocks: 61.7.193.0/24 maxlen: 24 122.155.68.0/24 maxlen: 24 122.155.140.0/24 maxlen: 24 122.155.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 14:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13622 (0x3536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:40:32 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41e0-bbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:26:01:e8:b7:65:90:3f:e6:a9:7d:23:2b: ca:54:ab:8a:6c:58:d5:82:5a:ef:22:90:81:84:52: 5c:cc:cb:13:42:2c:fb:ee:17:b8:a0:42:b1:72:d2: e4:2b:13:1d:19:34:5d:72:57:ea:21:e0:3c:a8:b2: 78:34:19:e3:98:3a:19:83:a4:0a:1e:6c:e4:a1:06: 80:2c:c6:35:72:71:68:71:96:15:cd:d3:6e:d1:23: 88:88:05:b2:ab:d0:3d:69:6a:21:02:ed:b5:ef:db: a2:77:08:7e:30:2c:48:03:44:05:6f:97:30:df:bd: c5:d5:e5:da:82:45:8d:e9:eb:7b:c4:7d:5b:ab:ac: 67:ec:0b:5a:13:11:4a:04:6a:2c:21:d7:81:45:21: c2:b2:92:b5:f5:11:09:0c:27:a0:b9:a0:36:54:75: 35:4b:91:3b:f1:1c:43:f3:e6:63:ba:74:13:99:74: 29:0c:70:86:1b:5e:96:ab:b8:fc:38:9f:6a:ba:2a: f6:bd:9e:2c:21:57:ee:f0:b4:19:57:f5:19:a3:16: cb:63:d7:0a:fa:e1:7e:9a:70:08:09:ce:b2:d4:77: 98:31:61:fe:f3:27:06:41:db:0c:45:64:40:b8:cb: 46:95:cd:1b:16:d0:0e:eb:75:b2:98:20:54:f2:48: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:74:9C:7F:74:BF:A1:56:25:E9:EA:AD:53:5D:8D:DE:C8:77:BE X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3DF267D8902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.7.193.0/24 122.155.68.0/24 122.155.140.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:91:80:54:02:ab:3f:b6:28:1d:48:27:77:60:1e:2a:15:26: 9b:18:95:a1:ea:d1:dc:77:90:1f:37:9f:b8:75:49:57:09:2a: ea:b6:bd:5a:b3:70:81:0a:fa:57:1a:38:97:ad:2d:17:f1:7c: 39:45:5e:18:f0:d2:68:57:a0:0d:b3:8e:6f:9b:7f:d1:e7:78: 70:f0:92:b7:b2:36:b9:fc:22:46:78:1b:7b:a4:0c:f2:42:c5: a0:c6:b6:41:86:f3:89:90:ff:dd:e6:a9:71:47:8a:85:fd:9b: df:7e:0a:e6:fb:20:a7:d3:da:1a:fa:fa:4f:48:66:d2:1b:43: 63:7a:0e:5d:d7:64:44:97:b0:7b:75:ae:08:bc:a2:c6:0d:5d: a9:12:37:85:2e:b6:c5:78:7e:8d:ff:10:ec:37:3a:6d:4f:4c: 48:28:a2:09:ca:77:72:11:bc:9f:7e:35:41:2b:49:b8:35:18: 27:4a:5d:17:d5:0c:37:09:dc:d7:6b:e0:83:bd:24:98:8f:b8: 29:7b:48:2f:1e:9d:c5:3b:a1:74:70:c2:00:8f:13:c1:16:08: 6d:71:90:cf:39:c4:20:20:b6:b5:a1:0e:5e:4c:79:9c:0a:11: e6:ae:cc:de:9f:7b:f4:c7:95:a0:02:7a:b0:58:b2:6e:bb:0e: 3a:37:e7:02 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjMxMjAyMTQ0MDMyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFlMC1iYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmekmAei3ZZA/5ql9IyvKVKuKbFjVglrvIpCBhFJczMsTQiz77he4oEKxctLk KxMdGTRdclfqIeA8qLJ4NBnjmDoZg6QKHmzkoQaALMY1cnFocZYVzdNu0SOIiAWy q9A9aWohAu2179uidwh+MCxIA0QFb5cw373F1eXagkWN6et7xH1bq6xn7AtaExFK BGosIdeBRSHCspK19REJDCeguaA2VHU1S5E78RxD8+ZjunQTmXQpDHCGG16Wq7j8 OJ9quir2vZ4sIVfu8LQZV/UZoxbLY9cK+uF+mnAICc6y1HeYMWH+8ycGQdsMRWRA uMtGlc0bFtAO63WymCBU8khE/QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLSJdJx/ dL+hViXp6q1TXY3eyHe+MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvM0RGMjY3RDg5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAA9B8EDBAB6m0QDBAF6m4wwDQYJKoZIhvcNAQELBQADggEB AFqRgFQCqz+2KB1IJ3dgHioVJpsYlaHq0dx3kB83n7h1SVcJKuq2vVqzcIEK+lca OJetLRfxfDlFXhjw0mhXoA2zjm+bf9HneHDwkreyNrn8IkZ4G3ukDPJCxaDGtkGG 84mQ/93mqXFHioX9m99+Cub7IKfT2hr6+k9IZtIbQ2N6Dl3XZESXsHt1rgi8osYN XakSN4UutsV4fo3/EOw3Om1PTEgoognKd3IRvJ9+NUErSbg1GCdKXRfVDDcJ3Ndr 4IO9JJiPuCl7SC8encU7oXRwwgCPE8EWCG1xkM85xCAgtrWhDl5MeZwKEeauzN6f e/THlaACerBYsm67Djo35wI= -----END CERTIFICATE-----Generated at Thu May 16 15:21:28 2024 by rpki-client on console-ams.rpki-client.org