$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/C6C06E5CC18D11EEB2096833C4F9AE02.roa File: C6C06E5CC18D11EEB2096833C4F9AE02.roa (raw, json) Hash identifier: oaAB5qpX/99+WdwH6mtr0Q1RDHPmcMa4eeDmW9Aw7VM= Subject key identifier: 67:43:18:37:1E:D2:8E:28:5F:B4:7A:41:D2:27:6E:3B:02:F1:DC:B6 Certificate issuer: /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Certificate serial: 0157 Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/C6C06E5CC18D11EEB2096833C4F9AE02.roa Signing time: Fri 02 Feb 2024 05:43:12 +0000 ROA not before: Fri 02 Feb 2024 05:43:12 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 60021 IP address blocks: 125.62.68.0/24 maxlen: 24 125.62.69.0/24 maxlen: 24 125.62.70.0/24 maxlen: 24 125.62.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 04:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1 Validity Not Before: Feb 2 05:43:12 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65bc80f0-9bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:1a:40:72:df:d4:0a:6d:47:ea:76:39:f9: f6:e5:6f:cb:44:4e:f0:e6:35:14:1e:a5:b3:76:46: 42:41:02:93:18:c7:e2:7a:60:82:2b:ac:b2:bf:6c: a3:e0:c9:36:75:4a:fc:af:38:c9:8f:75:70:aa:0b: eb:3c:3b:cc:cc:24:12:dd:61:f6:2b:84:4f:2d:38: 91:fe:b4:e1:f6:34:01:1b:53:fb:d7:31:18:3b:d5: ed:fb:ef:da:13:b5:fd:0e:8b:cb:9c:82:b7:52:fb: b1:33:86:29:fa:05:67:07:ed:27:ce:63:3f:f7:0a: ee:94:85:32:51:4c:b9:00:7c:a1:f7:41:24:f0:62: 9d:fa:0e:2e:ee:f7:b9:39:6a:1c:2b:00:84:3c:3e: 1f:5e:91:7a:21:da:14:c1:c5:e5:22:03:3c:16:bf: a0:c6:fd:08:c5:ef:7a:fd:0f:b8:49:7f:08:9f:e0: 50:f1:98:4b:d0:02:4a:6f:ab:88:f1:e6:8a:d6:cb: 96:64:29:c1:b0:c1:eb:b8:03:ab:1e:d0:5c:3d:66: 10:58:03:cd:5e:9c:39:78:fa:0c:ef:32:cd:b6:17: 69:28:e8:c7:ee:e1:ea:21:01:2d:01:33:fc:5b:ad: 08:d0:09:fa:46:a9:d9:02:02:51:0e:6e:03:0c:93: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:18:37:1E:D2:8E:28:5F:B4:7A:41:D2:27:6E:3B:02:F1:DC:B6 X509v3 Authority Key Identifier: keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/C6C06E5CC18D11EEB2096833C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.62.68.0/22 Signature Algorithm: sha256WithRSAEncryption 88:dc:86:36:ac:ed:8c:9a:b6:e9:de:f1:86:b0:14:39:d7:52: ab:11:a4:da:2e:2b:bd:52:39:3e:22:71:2f:33:89:0b:c3:49: c3:de:dc:52:f7:54:09:e8:b4:ae:f2:22:ad:8a:5b:47:af:48: 44:59:67:81:93:ad:91:c1:de:1f:15:9c:e6:18:92:8d:4b:12: e0:5c:5d:d1:d7:a8:d5:45:c4:e2:a9:01:72:49:62:58:1a:9a: 90:04:6d:9b:99:68:1c:2b:53:af:9d:17:ca:6b:87:0b:f7:4e: 80:0e:11:69:1d:01:e2:0f:38:ad:1e:58:b1:b1:98:3d:71:5c: ce:f7:d9:4c:08:a4:b1:82:3c:b7:39:78:5d:de:3b:e6:50:2f: db:46:ae:a6:2d:42:65:fc:0c:1a:3c:96:c8:b1:02:68:a0:2c: 8a:6d:6d:ba:b2:c8:ff:02:39:a9:41:7d:df:61:49:55:28:fd: c0:8e:e1:89:db:97:43:77:00:64:bc:6f:7d:23:0e:de:79:a3: 14:c5:28:d0:83:b1:b3:5b:da:cc:5a:51:b2:25:ba:81:38:67: 11:47:27:77:74:b1:b7:c8:45:e1:63:34:25:2b:9f:cd:67:77: 14:72:07:2c:b4:fb:37:11:5a:6d:ad:7f:2f:20:80:22:4e:f8: 35:32:a2:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyRDcxMTAvBgNVBAUTKDRFMDczNzg2NjdFQzc5RDUzRDY1MEU1MjREMUU4Rjk4 QjA4QzI4RTEwHhcNMjQwMjAyMDU0MzEyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJjODBmMC05YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw0aQHLf1AptR+p2Ofn25W/LRE7w5jUUHqWzdkZCQQKTGMfiemCCK6yyv2yj 4Mk2dUr8rzjJj3VwqgvrPDvMzCQS3WH2K4RPLTiR/rTh9jQBG1P71zEYO9Xt++/a E7X9DovLnIK3UvuxM4Yp+gVnB+0nzmM/9wrulIUyUUy5AHyh90Ek8GKd+g4u7ve5 OWocKwCEPD4fXpF6IdoUwcXlIgM8Fr+gxv0Ixe96/Q+4SX8In+BQ8ZhL0AJKb6uI 8eaK1suWZCnBsMHruAOrHtBcPWYQWAPNXpw5ePoM7zLNthdpKOjH7uHqIQEtATP8 W60I0An6RqnZAgJRDm4DDJNDhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGdDGDce 0o4oX7R6QdInbjsC8dy2MB8GA1UdIwQYMBaAFE4HN4Zn7HnVPWUOUk0ej5iwjCjh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzJENy9GOTc5NTlDMjI0 MTcxMUVEOUMwQzcwMERDNEY5QUUwMi9UZ2MzaG1mc2VkVTlaUTVTVFI2UG1MQ01L T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RnYzNobWZzZWRVOVpRNVNUUjZQbUxDTUtPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMyRDcvRjk3OTU5QzIyNDE3MTFFRDlDMEM3MDBEQzRGOUFFMDIvQzZDMDZFNUND MThEMTFFRUIyMDk2ODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ9PkQwDQYJKoZIhvcNAQELBQADggEBAIjchjas7Yyatune 8YawFDnXUqsRpNouK71SOT4icS8ziQvDScPe3FL3VAnotK7yIq2KW0evSERZZ4GT rZHB3h8VnOYYko1LEuBcXdHXqNVFxOKpAXJJYlgampAEbZuZaBwrU6+dF8prhwv3 ToAOEWkdAeIPOK0eWLGxmD1xXM732UwIpLGCPLc5eF3eO+ZQL9tGrqYtQmX8DBo8 lsixAmigLIptbbqyyP8COalBfd9hSVUo/cCO4Ynbl0N3AGS8b30jDt55oxTFKNCD sbNb2sxaUbIluoE4ZxFHJ3d0sbfIReFjNCUrn81ndxRyByy0+zcRWm2tfy8ggCJO +DUyojE= -----END CERTIFICATE-----Generated at Tue May 7 05:34:25 2024 by rpki-client on console-ams.rpki-client.org