$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa File: FB9C6A1A77CA11EA95ECC830C4F9AE02.roa (raw, json) Hash identifier: 0nN9mR6Movdpj9mFe9MyLylah55uw7sKp19/HTYnsn0= Subject key identifier: 18:BF:16:96:11:AA:32:BB:89:18:4C:37:1D:DB:E9:A9:3F:6C:A9:CC Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Certificate serial: 0DBD Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:45 +0000 ROA not before: Thu 28 Dec 2023 18:56:45 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 26344 IP address blocks: 125.252.78.0/24 maxlen: 24 210.57.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8 Validity Not Before: Dec 28 18:56:45 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4ed-fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:f3:43:2f:9b:10:67:16:f2:f8:de:b4:c5: b2:d7:dc:61:14:fe:93:94:a1:3a:22:6f:b7:f3:75: f2:d5:ca:95:60:2b:ca:c8:04:3d:1d:21:19:67:b4: 21:97:a2:75:5b:6a:09:9a:1f:e3:2d:f3:59:b1:23: c8:57:16:b1:0a:ca:e5:72:ee:43:89:68:af:35:89: ab:57:99:b6:30:2e:f2:5b:a6:40:b5:e6:49:cd:2e: 20:d7:e6:1e:ca:65:f8:2a:ce:b6:e3:7f:f1:74:7e: 78:c5:ad:25:9b:45:93:ea:00:2e:2c:2a:1d:99:78: f6:10:ff:e8:70:62:44:b3:86:c4:68:3b:cf:40:38: c6:25:ae:7c:8e:79:b2:a9:6f:71:f3:05:54:21:cb: cd:99:4c:68:f7:fb:f9:0c:09:09:26:27:19:31:cc: 5c:f2:a9:ca:12:8e:17:a8:3a:cc:56:73:f5:75:e5: ca:5f:87:5f:24:2d:24:24:ca:7f:a8:b1:b9:ec:30: 61:9b:c0:ab:f6:e2:58:ef:59:fe:c9:a4:ae:ac:af: 35:85:7e:f3:91:ac:f2:dd:59:88:27:5e:49:3f:d3: ec:5d:bc:cd:06:35:38:ab:c1:d3:1b:36:5e:63:69: 0c:66:57:00:19:5a:b1:39:c7:2a:33:9c:28:f1:eb: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:16:96:11:AA:32:BB:89:18:4C:37:1D:DB:E9:A9:3F:6C:A9:CC X509v3 Authority Key Identifier: keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/FB9C6A1A77CA11EA95ECC830C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.252.78.0/24 210.57.15.0/24 Signature Algorithm: sha256WithRSAEncryption 53:e8:36:a6:a2:ac:7c:f3:bd:57:66:6b:21:27:23:2e:e8:67: 7d:6e:ea:51:23:d0:da:6b:9f:50:06:30:59:78:f1:c3:a9:e9: 82:13:cd:de:ba:9e:e0:5b:5e:6b:29:7a:f3:82:c6:f6:e2:07: 77:e1:27:e5:4f:a8:85:ab:48:9e:da:1b:25:f4:18:66:58:34: 21:ea:da:6e:39:3f:06:a5:ed:b6:4a:ca:b7:2c:9c:c5:ba:0a: fd:7e:da:d2:f4:1d:e8:43:5f:8c:cb:61:40:77:ed:9d:16:2a: 9b:5c:be:d7:76:77:e3:b2:70:77:23:51:92:3c:57:70:6d:21: 07:df:9f:60:b2:3e:5b:43:c8:8f:8b:d9:52:79:83:74:75:92: a2:1c:10:07:f0:13:f1:20:fe:d2:bf:2b:00:ad:8f:66:73:c1: 26:6e:50:7a:ab:65:a8:c3:ff:66:76:2a:53:24:14:4a:d4:24: 25:27:9b:7e:88:d1:97:af:1d:9c:39:75:21:dd:be:da:23:5a: bb:f2:c2:96:0e:3e:53:bf:41:6b:79:a3:28:43:ad:85:6c:36: ec:3a:e2:fe:d2:79:1a:c3:64:bd:fd:85:87:d1:48:b0:69:2b: 34:57:fb:01:3e:63:bd:f0:7d:c1:da:5b:bc:16:41:61:e9:e7: d0:89:28:97 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKEFERDk0MThGMEY5QjU1RjNCNzM3NkEwOTNEQjExREJB RDNBRUZFQzgwHhcNMjMxMjI4MTg1NjQ1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlZC1mY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xDzQy+bEGcW8vjetMWy19xhFP6TlKE6Im+383Xy1cqVYCvKyAQ9HSEZZ7Qh l6J1W2oJmh/jLfNZsSPIVxaxCsrlcu5DiWivNYmrV5m2MC7yW6ZAteZJzS4g1+Ye ymX4Ks6243/xdH54xa0lm0WT6gAuLCodmXj2EP/ocGJEs4bEaDvPQDjGJa58jnmy qW9x8wVUIcvNmUxo9/v5DAkJJicZMcxc8qnKEo4XqDrMVnP1deXKX4dfJC0kJMp/ qLG57DBhm8Cr9uJY71n+yaSurK81hX7zkazy3VmIJ15JP9PsXbzNBjU4q8HTGzZe Y2kMZlcAGVqxOccqM5wo8etHHQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBi/FpYR qjK7iRhMNx3b6ak/bKnMMB8GA1UdIwQYMBaAFK3ZQY8Pm1XztzdqCT2xHbrTrv7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xRDY2RDQ4NkQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9yZGxCanctYlZmTzNOMm9KUGJFZHV0T3Vf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkbEJqdy1iVmZPM04yb0pQYkVkdXRPdV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMUQ2NkQ0ODZEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvRkI5QzZBMUE3 N0NBMTFFQTk1RUNDODMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB9/E4DBADSOQ8wDQYJKoZIhvcNAQELBQADggEBAFPoNqai rHzzvVdmayEnIy7oZ31u6lEj0Nprn1AGMFl48cOp6YITzd66nuBbXmspevOCxvbi B3fhJ+VPqIWrSJ7aGyX0GGZYNCHq2m45Pwal7bZKyrcsnMW6Cv1+2tL0HehDX4zL YUB37Z0WKptcvtd2d+OycHcjUZI8V3BtIQffn2CyPltDyI+L2VJ5g3R1kqIcEAfw E/Eg/tK/KwCtj2ZzwSZuUHqrZajD/2Z2KlMkFErUJCUnm36I0ZevHZw5dSHdvtoj WrvywpYOPlO/QWt5oyhDrYVsNuw64v7SeRrDZL39hYfRSLBpKzRX+wE+Y73wfcHa W7wWQWHp59CJKJc= -----END CERTIFICATE-----Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org