$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa File: AD1655A2DFEF11EB8486545FC4F9AE02.roa (raw, json) Hash identifier: wIyrFZVCRyVjiLRR2zYfkd9OzdUfRihQWq6QQuZjBOE= Subject key identifier: A2:FC:20:EF:1C:40:96:68:3B:65:1F:AF:F2:06:C6:EB:EB:EC:4A:4A Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Certificate serial: 1811 Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa Signing time: Fri 12 Jan 2024 17:04:46 +0000 ROA not before: Fri 12 Jan 2024 17:04:46 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 35994 IP address blocks: 125.56.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6161 (0x1811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Validity Not Before: Jan 12 17:04:46 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a1712e-3521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:da:d5:91:a0:c1:07:e9:83:cf:ea:f0:dd: 8e:8e:2d:d8:18:f6:b2:5e:5e:90:cb:91:80:86:64: c5:e7:be:0d:dc:40:fd:63:b3:8b:31:2e:22:3c:d4: 23:d9:85:2a:2f:6c:2c:35:db:f9:05:13:a7:38:80: 80:69:17:b5:42:2d:58:25:d7:91:8e:fd:8c:10:51: 51:4c:e9:c6:94:9f:bb:a7:17:8a:89:37:0c:82:46: 18:03:6c:ca:68:28:42:7b:44:0f:84:1d:ec:fc:e7: 97:9b:94:b8:d4:97:66:f2:c4:da:1c:5d:7f:ad:3d: 6b:71:6e:ee:70:b6:38:f4:f7:c2:ee:6e:a7:28:02: 33:ce:90:6b:33:dc:0a:85:ba:9e:46:32:52:2c:34: 97:d1:61:83:aa:02:00:67:e7:a4:50:c1:18:bc:01: b1:5a:84:21:da:fd:f7:5c:c2:e5:a2:83:6a:16:0b: 02:1e:ee:e9:0d:7b:b8:60:7d:29:dc:40:2e:3b:a2: bf:7e:5f:f4:b4:85:eb:14:73:00:00:db:d7:6f:b2: 9f:6d:4d:d8:e3:1a:49:36:8a:ce:f3:cb:5f:ca:e8: b7:0d:98:ce:5e:c6:34:e7:e6:b3:c0:1b:c9:2e:d4: 36:f4:75:d8:0e:4c:54:55:b5:a7:60:75:6f:dd:b5: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:20:EF:1C:40:96:68:3B:65:1F:AF:F2:06:C6:EB:EB:EC:4A:4A X509v3 Authority Key Identifier: keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.56.191.0/24 Signature Algorithm: sha256WithRSAEncryption 54:3e:fb:29:bd:2a:45:d5:2d:a1:24:a0:0f:15:45:2c:20:fa: db:01:8b:4c:26:63:ff:26:b8:1c:25:57:13:1e:34:f8:e8:b7: dd:71:4e:fc:93:4f:6a:36:c0:97:f4:71:bd:cc:ea:9e:ce:c2: 59:f8:55:d4:ff:51:18:8d:d0:54:e1:62:ae:66:1e:9e:e8:d8: 9e:33:9b:bb:c9:71:50:01:64:64:84:4c:21:e2:32:ca:f5:86: ad:cf:ac:4a:22:c6:c0:f1:93:1c:e5:af:a8:3e:2d:2a:f8:8d: 23:4c:a3:8e:14:e2:6d:41:c4:f8:cf:7d:a7:c2:d8:7a:6c:45: 92:b8:6f:16:26:1e:96:14:05:0f:ab:ec:30:d4:23:09:cb:80: 66:fb:df:a8:3b:4b:8d:eb:d8:36:e5:02:49:a4:93:97:be:1c: 61:07:24:f5:57:f5:cf:be:fd:4a:7d:1d:38:e2:84:57:5f:96: f1:1a:51:6c:78:0e:98:b6:00:b1:ab:3c:a9:66:f0:f2:90:56: 65:f4:23:46:57:9c:90:0f:9e:1b:1c:97:83:7c:89:38:d1:c3: 66:7f:83:88:f4:5a:5e:f2:79:6f:c0:40:6b:c3:52:31:ad:63: d1:12:63:ba:92:97:9f:68:9b:f9:d5:c8:d0:74:23:94:8e:84: a2:40:32:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD NTQyQTBEOTEwHhcNMjQwMTEyMTcwNDQ2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWExNzEyZS0zNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hHa1ZGgwQfpg8/q8N2Oji3YGPayXl6Qy5GAhmTF574N3ED9Y7OLMS4iPNQj 2YUqL2wsNdv5BROnOICAaRe1Qi1YJdeRjv2MEFFRTOnGlJ+7pxeKiTcMgkYYA2zK aChCe0QPhB3s/OeXm5S41Jdm8sTaHF1/rT1rcW7ucLY49PfC7m6nKAIzzpBrM9wK hbqeRjJSLDSX0WGDqgIAZ+ekUMEYvAGxWoQh2v33XMLlooNqFgsCHu7pDXu4YH0p 3EAuO6K/fl/0tIXrFHMAANvXb7KfbU3Y4xpJNorO88tfyui3DZjOXsY05+azwBvJ LtQ29HXYDkxUVbWnYHVv3bX7QwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKL8IO8c QJZoO2Ufr/IGxuvr7EpKMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvQUQxNjU1QTJE RkVGMTFFQjg0ODY1NDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9OL8wDQYJKoZIhvcNAQELBQADggEBAFQ++ym9KkXVLaEk oA8VRSwg+tsBi0wmY/8muBwlVxMeNPjot91xTvyTT2o2wJf0cb3M6p7Owln4VdT/ URiN0FThYq5mHp7o2J4zm7vJcVABZGSETCHiMsr1hq3PrEoixsDxkxzlr6g+LSr4 jSNMo44U4m1BxPjPfafC2HpsRZK4bxYmHpYUBQ+r7DDUIwnLgGb736g7S43r2Dbl Akmkk5e+HGEHJPVX9c++/Up9HTjihFdflvEaUWx4Dpi2ALGrPKlm8PKQVmX0I0ZX nJAPnhscl4N8iTjRw2Z/g4j0Wl7yeW/AQGvDUjGtY9ESY7qSl59om/nVyNB0I5SO hKJAMmQ= -----END CERTIFICATE-----Generated at Mon May 20 19:59:39 2024 by rpki-client on console-ams.rpki-client.org