$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/37132C0CB13111EE8FE79534C4F9AE02.roa File: 37132C0CB13111EE8FE79534C4F9AE02.roa (raw, json) Hash identifier: Sem5Jc62J9wkjmg8bVcZbNhb6N3vuHHxOU2KhuiWEG8= Subject key identifier: 87:84:0D:D6:39:D4:61:72:BE:32:94:A0:B9:43:28:0C:F6:B3:3A:C7 Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Certificate serial: 0285 Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/37132C0CB13111EE8FE79534C4F9AE02.roa Signing time: Sat 13 Jul 2024 03:24:30 +0000 ROA not before: Sat 13 Jul 2024 03:24:30 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 58453 IP address blocks: 45.255.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63 Validity Not Before: Jul 13 03:24:30 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6691f36d-972d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:53:83:04:68:ef:d8:d8:b0:84:7e:c9:07: 2c:c0:bb:9b:f9:22:8c:54:a1:b5:3d:2b:97:14:d0: 1f:25:31:14:95:e3:65:2e:be:22:ba:4e:b5:8b:05: 8c:4c:65:e5:1e:11:50:e0:c2:a9:2b:4a:c3:cb:6e: 0a:d8:75:f0:e7:c1:f7:b4:6c:28:97:67:5a:54:59: 8b:52:7b:af:59:f5:d9:42:d1:f9:54:24:01:b0:b4: 1d:12:01:e1:f3:c3:b9:7a:d0:68:ce:a0:d1:88:59: 42:2d:e6:eb:9f:b0:f0:59:ec:a5:7e:13:91:7b:49: b6:a5:cf:ac:2e:6b:d2:ec:63:77:80:d2:a9:dd:76: 26:75:53:0a:1e:14:08:11:b0:3a:3f:18:fe:49:06: dd:24:0a:18:7a:71:9b:d0:9f:82:c4:82:e9:6c:8c: 41:8e:7d:65:13:f2:d9:42:da:08:b6:84:50:a1:87: ec:89:e1:24:f9:07:f6:eb:04:46:7a:04:fa:86:57: 52:85:97:59:10:f0:d4:a6:1b:1d:b5:7d:89:27:d5: 78:15:31:aa:ca:95:52:21:d7:38:0a:1d:73:33:22: 3e:4f:3d:f8:be:e2:28:78:fe:cb:e4:ed:45:23:fb: 8d:94:32:f5:ea:55:ea:7b:79:e9:82:ec:de:9c:97: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:0D:D6:39:D4:61:72:BE:32:94:A0:B9:43:28:0C:F6:B3:3A:C7 X509v3 Authority Key Identifier: keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/37132C0CB13111EE8FE79534C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.255.125.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:3a:96:70:b4:d9:28:f9:76:5a:c0:72:91:0c:5a:55:48:0f: fa:78:88:db:4b:be:55:37:34:94:b1:c4:86:18:22:53:f1:e4: 42:c4:47:0f:0d:f9:ab:54:5d:45:29:6e:64:f6:cf:53:07:95: 62:0b:d9:e4:ed:df:45:3c:22:0d:68:0a:9c:32:99:b6:c3:47: 75:09:3d:69:90:5a:1a:a4:d9:b5:f0:b1:ff:36:e5:64:92:5d: 76:74:3a:bb:6a:e8:31:c4:a3:4f:1b:1d:9b:f8:20:38:b8:51: a9:58:66:11:dc:6c:49:64:f1:1e:f9:71:e8:d4:0e:60:bd:aa: d7:88:b2:20:03:7b:4b:ed:2d:50:16:8c:5e:5f:cd:1e:57:c2: aa:9d:6c:eb:e7:b7:00:19:fb:26:e3:b4:17:13:bc:d2:0a:0e: df:d7:51:54:3f:d8:eb:51:5c:fe:ad:c1:4f:53:e9:7c:b9:b1: 76:c0:27:6b:36:3c:a8:a4:dd:c4:47:f6:d5:78:81:e4:bf:d8: a4:1b:c2:49:70:cd:51:eb:46:eb:4a:b3:47:d8:40:76:32:3b: 80:0d:8e:af:40:c8:ca:29:0f:76:ab:92:29:ab:cb:24:00:4c: 3b:f2:85:bc:8f:a1:c0:57:ea:d0:a9:3c:cd:95:f5:bb:66:f3: 12:06:25:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4 MDM1NDBENjMwHhcNMjQwNzEzMDMyNDMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxZjM2ZC05NzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbVTgwRo79jYsIR+yQcswLub+SKMVKG1PSuXFNAfJTEUleNlLr4iuk61iwWM TGXlHhFQ4MKpK0rDy24K2HXw58H3tGwol2daVFmLUnuvWfXZQtH5VCQBsLQdEgHh 88O5etBozqDRiFlCLebrn7DwWeylfhORe0m2pc+sLmvS7GN3gNKp3XYmdVMKHhQI EbA6Pxj+SQbdJAoYenGb0J+CxILpbIxBjn1lE/LZQtoItoRQoYfsieEk+Qf26wRG egT6hldShZdZEPDUphsdtX2JJ9V4FTGqypVSIdc4Ch1zMyI+Tz34vuIoeP7L5O1F I/uNlDL16lXqe3npguzenJe0lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIeEDdY5 1GFyvjKUoLlDKAz2szrHMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzODYvMDZGODQwOENDQ0YxMTFFQ0JFQTk2RjI5QzRGOUFFMDIvMzcxMzJDMENC MTMxMTFFRThGRTc5NTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt/30wDQYJKoZIhvcNAQELBQADggEBAHo6lnC02Sj5dlrA cpEMWlVID/p4iNtLvlU3NJSxxIYYIlPx5ELERw8N+atUXUUpbmT2z1MHlWIL2eTt 30U8Ig1oCpwymbbDR3UJPWmQWhqk2bXwsf825WSSXXZ0Ortq6DHEo08bHZv4IDi4 UalYZhHcbElk8R75cejUDmC9qteIsiADe0vtLVAWjF5fzR5XwqqdbOvntwAZ+ybj tBcTvNIKDt/XUVQ/2OtRXP6twU9T6Xy5sXbAJ2s2PKik3cRH9tV4geS/2KQbwklw zVHrRutKs0fYQHYyO4ANjq9AyMopD3arkimryyQATDvyhbyPocBX6tCpPM2V9btm 8xIGJSE= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org