$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa File: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: +ntbNJTzRQkXQRw/iFqef14ZT41PqgWsMwaG/XVuJ+w= Subject key identifier: 25:D4:F2:E1:60:15:AB:22:0E:2C:B2:54:5A:3F:C0:6A:E3:6B:A4:58 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1D24 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa Signing time: Tue 02 Jan 2024 16:54:20 +0000 ROA not before: Tue 02 Jan 2024 16:54:20 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 141739 IP address blocks: 125.85.64.0/18 maxlen: 18 125.85.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7460 (0x1d24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Jan 2 16:54:20 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65943fbb-3bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:9e:79:34:60:b0:92:16:72:05:da:51:80: e6:52:77:a5:22:c9:4d:a0:27:dd:9e:9b:5c:45:a9: 73:5b:0a:e4:63:f0:c8:0a:73:b5:ac:c6:b5:4b:6f: ec:72:60:06:38:8e:96:09:a9:ee:91:8f:15:4f:ec: 86:d0:a1:5c:d5:d7:18:27:d3:10:fe:8f:e2:5e:c7: 01:f7:0d:c9:36:eb:00:13:14:8e:31:09:55:a4:1f: 58:54:12:58:54:27:87:1c:91:30:1f:90:84:fd:24: eb:5d:3d:bc:c7:b6:25:28:93:2b:d8:5d:d0:0e:28: c7:77:db:ce:a1:e7:75:c3:72:92:33:f2:fd:b4:2d: 47:4e:19:c1:08:20:3e:14:f8:20:7a:c1:89:6c:31: a9:6d:40:63:01:14:16:48:ba:ed:e6:e9:11:91:02: 2b:98:d9:dc:99:5c:da:21:51:0b:68:c8:c0:aa:80: 58:31:d7:13:b9:8a:f1:a8:4e:8b:a3:5b:6d:70:49: a9:d0:2e:88:76:98:f2:64:eb:b6:a2:74:48:7a:7b: 73:16:ca:3b:7f:26:84:38:d6:7f:7e:e5:0b:c3:57: 02:31:72:7a:99:a4:28:47:44:eb:ad:53:05:06:f4: 6e:26:e7:18:48:c7:c9:e7:93:5d:4a:a9:33:78:09: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:F2:E1:60:15:AB:22:0E:2C:B2:54:5A:3F:C0:6A:E3:6B:A4:58 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.85.64.0-125.85.159.255 Signature Algorithm: sha256WithRSAEncryption 2c:c2:ef:09:9e:ea:cb:d6:1f:56:50:04:cd:c0:74:44:f7:27: 7f:63:04:65:be:64:c0:24:4d:1f:bd:68:f3:66:44:bb:68:4c: 87:ab:54:5d:7b:08:66:d9:38:29:5b:4f:6d:85:9b:5b:7a:41: cc:b6:1f:8a:ec:69:3d:08:b8:52:d8:6d:c7:e2:71:c3:5c:bf: fb:42:1f:c8:13:7e:0d:a1:11:c7:1e:52:29:58:65:8d:d4:c8: bf:58:02:1b:aa:a5:d9:e6:7d:e6:01:92:32:d3:3c:16:86:58: 2a:1c:b5:e9:7a:02:79:17:13:9d:7d:55:b4:ce:90:32:76:f3: 86:7d:0e:76:94:ad:21:c8:b6:ae:9b:e4:c8:79:35:9f:66:b9: 1a:24:02:98:d7:3b:eb:99:0a:cb:5d:5e:56:77:74:58:6f:7e: 7b:d3:14:1d:9c:47:c2:94:ec:2f:68:08:9f:15:33:58:0b:ff: 08:ca:72:cd:14:2e:9d:4c:dc:85:24:21:cf:aa:b0:02:19:23: 65:79:8f:f9:f8:39:75:dd:b8:65:28:82:1b:7a:75:b2:39:94: 7f:71:d3:91:70:5f:1a:29:41:56:6f:33:92:ee:2b:a8:09:e3: 12:27:93:0c:36:ca:83:90:7f:0a:90:3b:7c:1b:28:b6:17:3a: 4e:1a:03:ae -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICHSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwMTAyMTY1NDIwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0M2ZiYi0zYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGOeeTRgsJIWcgXaUYDmUnelIslNoCfdnptcRalzWwrkY/DICnO1rMa1S2/s cmAGOI6WCanukY8VT+yG0KFc1dcYJ9MQ/o/iXscB9w3JNusAExSOMQlVpB9YVBJY VCeHHJEwH5CE/STrXT28x7YlKJMr2F3QDijHd9vOoed1w3KSM/L9tC1HThnBCCA+ FPggesGJbDGpbUBjARQWSLrt5ukRkQIrmNncmVzaIVELaMjAqoBYMdcTuYrxqE6L o1ttcEmp0C6IdpjyZOu2onRIentzFso7fyaEONZ/fuULw1cCMXJ6maQoR0TrrVMF BvRuJucYSMfJ55NdSqkzeAnM9wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCXU8uFg FasiDiyyVFo/wGrja6RYMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNENEMkFCMkEw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBn1VQAMEBX1VgDANBgkqhkiG9w0BAQsFAAOCAQEALMLv CZ7qy9YfVlAEzcB0RPcnf2MEZb5kwCRNH71o82ZEu2hMh6tUXXsIZtk4KVtPbYWb W3pBzLYfiuxpPQi4Uthtx+Jxw1y/+0IfyBN+DaERxx5SKVhljdTIv1gCG6ql2eZ9 5gGSMtM8FoZYKhy16XoCeRcTnX1VtM6QMnbzhn0OdpStIci2rpvkyHk1n2a5GiQC mNc765kKy11eVnd0WG9+e9MUHZxHwpTsL2gInxUzWAv/CMpyzRQunUzchSQhz6qw AhkjZXmP+fg5dd24ZSiCG3p1sjmUf3HTkXBfGilBVm8zku4rqAnjEieTDDbKg5B/ CpA7fBsothc6ThoDrg== -----END CERTIFICATE-----Generated at Thu May 16 17:51:20 2024 by rpki-client on console-ams.rpki-client.org