$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa File: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (raw, json) Hash identifier: 1/F96Do1ZWp86GNV9DFuCHRPL+Y77dWF42AM+XS1zM0= Subject key identifier: F3:FD:6F:E8:1E:0D:2F:1E:96:11:F4:82:E4:35:20:FD:8F:68:FD:8E Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1E1A Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa Signing time: Fri 20 Sep 2024 16:34:45 +0000 ROA not before: Fri 20 Sep 2024 16:34:45 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141739 IP address blocks: 125.85.64.0/18 maxlen: 18 125.85.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7706 (0x1e1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 20 16:34:45 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eda424-78de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:1b:0f:e0:48:2e:6a:23:a2:d1:fb:b0:70: 48:8d:ee:e7:c3:24:09:bb:a0:2b:d0:28:e9:ba:c7: 24:5e:91:7a:a5:5b:37:d2:e5:4f:e3:47:f8:3c:e7: 34:df:d9:cb:08:3e:e1:eb:e7:fe:00:5f:1c:f5:b2: 3f:e0:df:ff:2f:74:63:fa:95:51:cd:d0:bb:23:0a: bc:39:34:d6:46:0d:40:cf:06:01:91:6f:d8:2c:5e: a5:30:c8:bc:a9:1f:fa:39:73:22:1a:db:58:f1:57: d2:8a:1c:81:2d:40:32:21:30:23:f0:b1:f6:c6:da: f0:8c:62:7c:18:0c:0f:66:9f:5b:98:b6:7b:8a:88: 3e:dc:ef:dd:30:90:46:44:04:68:02:a3:67:bc:f3: d7:6d:65:17:b5:35:64:c8:99:74:4c:7c:03:3d:96: 1e:77:d5:7f:f7:cd:01:cc:a9:c7:a9:6c:fc:e3:e3: 93:5f:db:6d:0b:91:0e:53:7b:d0:ec:1b:e6:f9:7e: 8c:7f:d5:85:05:50:d6:b3:fd:0d:35:00:c5:60:11: f4:f4:2c:31:2c:4c:d7:67:04:2a:4d:e1:73:a8:7b: cd:1f:99:1e:8c:c9:40:3d:a9:20:f5:43:97:88:13: 94:00:2f:5e:52:13:d1:20:87:07:76:ff:61:8f:11: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:6F:E8:1E:0D:2F:1E:96:11:F4:82:E4:35:20:FD:8F:68:FD:8E X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/4CD2AB2A066011EEA5F59657C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.85.64.0-125.85.159.255 Signature Algorithm: sha256WithRSAEncryption 42:5d:84:79:98:22:86:db:97:60:c2:bf:8e:ee:c0:cf:52:01: 8c:74:c4:ef:7c:9a:45:9d:4b:2c:26:24:07:0f:e6:eb:41:4f: 7a:f2:40:fa:91:46:d8:4e:91:34:73:0a:56:68:86:33:67:c4: a1:3e:73:f2:18:ec:48:73:1f:c8:47:47:ed:a7:8e:d6:e9:ed: e0:c6:7b:fc:89:3f:f9:6e:19:f6:9b:ec:e3:bd:7d:9e:bb:81: d0:9b:79:14:ba:4e:9d:aa:29:36:5c:82:af:0b:78:95:19:6c: d9:08:fd:35:1f:da:00:7a:35:3e:67:e6:41:28:3c:11:3c:c7: f6:bf:3e:bb:54:b5:47:70:ca:cb:4a:3d:fa:6f:2e:ea:97:ea: a0:90:6c:2a:cd:67:cc:f3:4f:c2:2c:d9:d0:4c:e8:a6:78:62: 84:e8:c2:9c:4d:2f:fa:e4:1c:24:61:73:67:e7:de:57:94:78: 51:4f:98:f7:bf:b6:81:e6:2b:c9:a7:1d:ea:20:de:35:ea:f8: a7:3c:2b:a2:49:85:df:35:da:aa:1b:81:6b:79:e3:a1:45:97: 85:76:4c:f2:35:96:9a:3c:6d:b7:8d:96:4a:b5:cf:8a:03:7b: c6:51:43:fa:40:d9:68:7d:ce:48:cd:6c:e4:1c:a8:8e:5c:96: 09:26:ae:d9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICHhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwOTIwMTYzNDQ1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkYTQyNC03OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnAbD+BILmojotH7sHBIje7nwyQJu6Ar0CjpusckXpF6pVs30uVP40f4POc0 39nLCD7h6+f+AF8c9bI/4N//L3Rj+pVRzdC7Iwq8OTTWRg1AzwYBkW/YLF6lMMi8 qR/6OXMiGttY8VfSihyBLUAyITAj8LH2xtrwjGJ8GAwPZp9bmLZ7iog+3O/dMJBG RARoAqNnvPPXbWUXtTVkyJl0THwDPZYed9V/980BzKnHqWz84+OTX9ttC5EOU3vQ 7Bvm+X6Mf9WFBVDWs/0NNQDFYBH09CwxLEzXZwQqTeFzqHvNH5kejMlAPakg9UOX iBOUAC9eUhPRIIcHdv9hjxEBgQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPP9b+ge DS8elhH0guQ1IP2PaP2OMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNENEMkFCMkEw NjYwMTFFRUE1RjU5NjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBn1VQAMEBX1VgDANBgkqhkiG9w0BAQsFAAOCAQEAQl2E eZgihtuXYMK/ju7Az1IBjHTE73yaRZ1LLCYkBw/m60FPevJA+pFG2E6RNHMKVmiG M2fEoT5z8hjsSHMfyEdH7aeO1unt4MZ7/Ik/+W4Z9pvs4719nruB0Jt5FLpOnaop NlyCrwt4lRls2Qj9NR/aAHo1PmfmQSg8ETzH9r8+u1S1R3DKy0o9+m8u6pfqoJBs Ks1nzPNPwizZ0EzopnhihOjCnE0v+uQcJGFzZ+feV5R4UU+Y97+2geYryacd6iDe Ner4pzwrokmF3zXaqhuBa3njoUWXhXZM8jWWmjxtt42WSrXPigN7xlFD+kDZaH3O SM1s5ByojlyWCSau2Q== -----END CERTIFICATE-----Generated at Fri Nov 22 09:31:42 2024 by rpki-client on console-fra.rpki-client.org