$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa File: 1BDBCE5013A011EE91039C41C4F9AE02.roa (raw, json) Hash identifier: 22aaI99D5AWtJSeJ++1PDVBO7upMl84FHbNH+yIrm8U= Subject key identifier: 11:52:8D:EC:0F:67:8B:66:A6:28:57:32:D0:EC:F6:E9:B0:C5:F8:64 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: E9 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa Signing time: Sat 17 Aug 2024 05:26:20 +0000 ROA not before: Sat 17 Aug 2024 05:26:20 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 18081 IP address blocks: 125.2.64.0/18 maxlen: 19 2404:ec00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Aug 17 05:26:20 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c0347c-e0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:cd:a5:ab:21:9b:81:73:b9:9b:8f:d4:be: a5:6b:4c:26:a8:fb:77:37:16:d2:a2:e3:86:61:16: 57:b6:7a:f6:02:47:85:3a:15:cd:9b:52:a9:95:93: 25:ff:4b:c3:ef:7d:7e:fb:a3:6d:6f:3b:52:ec:ee: 04:c8:52:e3:c0:52:c8:f5:69:a3:6e:82:3f:25:cc: 5f:e8:a0:7e:e4:af:9e:c7:5a:0b:71:09:14:83:bc: 4a:fb:a0:c2:05:bf:73:ca:23:b0:b0:8e:85:71:e6: aa:00:6f:bd:13:42:9c:68:77:ad:14:3c:db:a7:7b: 19:e5:55:a1:0e:8d:4b:82:2d:6a:c4:d8:a5:28:23: ad:d1:da:02:1c:f8:2f:5d:7d:22:1c:bb:f5:b6:17: 5f:8d:c1:46:10:7d:eb:9d:9e:84:1d:56:74:e8:89: 17:5c:9b:63:f5:0c:80:2f:09:60:d9:f0:31:74:9b: 12:e3:a9:87:83:5c:e0:26:56:d4:df:56:b7:a4:a8: e0:36:8d:da:56:b9:a4:5d:a8:3e:21:0b:c6:43:0b: 3f:c4:a2:3a:2f:56:b7:d3:9f:0b:83:8b:80:09:19: 58:8b:a0:5e:6b:c7:3a:02:11:30:e5:0a:79:65:12: 07:6b:e9:91:3d:9c:40:ac:2c:5b:58:1c:06:f9:ab: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:8D:EC:0F:67:8B:66:A6:28:57:32:D0:EC:F6:E9:B0:C5:F8:64 X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.2.64.0/18 IPv6: 2404:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 06:2a:58:c8:ae:55:50:75:c0:4d:a3:64:8d:cd:83:a2:1c:03: 29:f0:60:c3:6f:b5:9e:f2:12:7f:24:67:9e:c2:cf:db:09:72: 46:20:fa:92:22:cf:d1:d3:50:2a:36:53:ea:cf:9a:9f:4d:95: 12:09:a5:48:6b:90:3c:4f:70:95:c8:57:99:12:3d:13:de:b2: cd:a0:67:0d:84:c2:16:9c:37:4b:51:e0:a0:c1:3a:f4:a4:6d: 5e:a7:86:83:12:6a:cf:d2:b0:9d:58:9c:95:12:1c:a4:10:7e: d2:55:6b:ca:26:ee:f4:03:65:49:b1:85:8f:1d:cd:40:fa:82: 06:f6:3e:0b:24:24:c0:98:14:ed:69:e8:de:d4:db:60:8a:c2: 65:ff:7d:3f:3b:58:1c:2f:d1:4f:37:d2:12:33:40:73:4b:d9: 69:0f:6f:99:fa:5b:59:e3:43:3b:73:93:da:b0:25:3b:40:80: e3:97:df:83:69:56:76:93:b5:d3:f0:5d:e7:f6:58:4e:11:0c: 6d:df:78:90:79:f1:cb:ab:1f:70:51:f5:9e:ba:47:bd:f7:02: fc:24:51:9e:da:86:b7:bb:6d:49:f0:25:1b:73:a2:e6:00:b5: b2:f6:15:43:5d:65:7b:f9:38:da:e5:07:ac:ca:42:12:80:5b: 92:33:21:9e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjQwODE3MDUyNjIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmMwMzQ3Yy1lMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z/Npashm4FzuZuP1L6la0wmqPt3NxbSouOGYRZXtnr2AkeFOhXNm1KplZMl /0vD731++6NtbztS7O4EyFLjwFLI9WmjboI/Jcxf6KB+5K+ex1oLcQkUg7xK+6DC Bb9zyiOwsI6FceaqAG+9E0KcaHetFDzbp3sZ5VWhDo1Lgi1qxNilKCOt0doCHPgv XX0iHLv1thdfjcFGEH3rnZ6EHVZ06IkXXJtj9QyALwlg2fAxdJsS46mHg1zgJlbU 31a3pKjgNo3aVrmkXag+IQvGQws/xKI6L1a3058Lg4uACRlYi6Bea8c6AhEw5Qp5 ZRIHa+mRPZxArCxbWBwG+av6wwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBFSjewP Z4tmpihXMtDs9umwxfhkMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwRUUvNTVDODAzQ0EwOUMwMTFFRUJFMTI1ODNBQzRGOUFFMDIvMUJEQkNFNTAx M0EwMTFFRTkxMDM5QzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAZ9AkAwDQQCAAIwBwMFACQE7AAwDQYJKoZIhvcNAQELBQAD ggEBAAYqWMiuVVB1wE2jZI3Ng6IcAynwYMNvtZ7yEn8kZ57Cz9sJckYg+pIiz9HT UCo2U+rPmp9NlRIJpUhrkDxPcJXIV5kSPRPess2gZw2EwhacN0tR4KDBOvSkbV6n hoMSas/SsJ1YnJUSHKQQftJVa8om7vQDZUmxhY8dzUD6ggb2PgskJMCYFO1p6N7U 22CKwmX/fT87WBwv0U830hIzQHNL2WkPb5n6W1njQztzk9qwJTtAgOOX34NpVnaT tdPwXef2WE4RDG3feJB58curH3BR9Z66R733AvwkUZ7ahre7bUnwJRtzouYAtbL2 FUNdZXv5ONrlB6zKQhKAW5IzIZ4= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org