$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa File: D52009B06A6311EFA96F023DC4F9AE02.roa (raw, json) Hash identifier: F5aTMcUYsmdixUm9yQzG1VwvhsqYUF6nPzXXk9qwa44= Subject key identifier: 93:9E:D8:59:9C:B8:E6:B2:A1:D8:FB:E8:C7:FA:1D:9E:DC:14:8A:B0 Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Certificate serial: 34F3 Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa Signing time: Tue 26 Nov 2024 14:40:11 +0000 ROA not before: Tue 26 Nov 2024 14:40:11 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 37997 IP address blocks: 124.195.128.0/20 maxlen: 20 124.195.128.0/22 maxlen: 22 124.195.128.0/24 maxlen: 24 124.195.129.0/24 maxlen: 24 124.195.130.0/24 maxlen: 24 124.195.131.0/24 maxlen: 24 124.195.132.0/22 maxlen: 22 124.195.132.0/24 maxlen: 24 124.195.133.0/24 maxlen: 24 124.195.134.0/24 maxlen: 24 124.195.135.0/24 maxlen: 24 124.195.136.0/22 maxlen: 22 124.195.136.0/24 maxlen: 24 124.195.137.0/24 maxlen: 24 124.195.138.0/24 maxlen: 24 124.195.139.0/24 maxlen: 24 124.195.140.0/22 maxlen: 22 124.195.140.0/24 maxlen: 24 124.195.141.0/24 maxlen: 24 124.195.142.0/24 maxlen: 24 124.195.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509 Validity Not Before: Nov 26 14:40:11 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6745ddcb-051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:eb:4d:a9:44:40:be:79:e4:83:e0:75:cc: b1:13:93:64:e6:49:a6:fd:52:81:1f:22:76:19:30: d5:d1:11:42:45:94:c6:f0:0e:d7:ed:60:6d:8d:14: 0f:8f:f1:76:d0:09:3b:ad:a9:bd:5d:6d:16:84:e9: e7:ae:06:0a:cb:02:25:75:f8:41:e4:87:20:66:f2: 70:ac:32:12:72:0f:94:db:05:86:4c:1d:bb:a2:ff: 3c:58:78:e2:b3:57:34:01:17:a1:16:f6:53:ff:92: c7:ba:64:3f:e3:ec:87:97:8c:29:97:02:83:17:cc: a2:b3:43:dc:7a:39:d5:69:2a:94:13:17:97:bf:2e: 75:25:4d:3f:46:8e:04:24:52:33:db:c8:10:eb:73: 7a:60:0f:67:63:9b:05:68:40:d1:22:fc:da:6c:6d: 9a:72:28:c0:15:d3:95:2a:b8:b7:7a:b0:c2:ee:b3: 0d:6f:3c:e3:3e:5b:14:81:fd:25:77:90:49:d2:c9: 4d:5c:69:50:48:9e:fe:18:e2:14:20:ea:00:6f:f8: af:35:5b:4a:df:8a:d6:6a:64:35:49:0e:d2:75:3a: 2a:66:ff:a7:5c:60:e1:53:ff:ae:56:c8:2f:e9:7a: a3:a1:4a:68:3d:20:a6:25:e9:d3:71:1f:8c:a7:fd: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9E:D8:59:9C:B8:E6:B2:A1:D8:FB:E8:C7:FA:1D:9E:DC:14:8A:B0 X509v3 Authority Key Identifier: keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/D52009B06A6311EFA96F023DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.195.128.0/20 Signature Algorithm: sha256WithRSAEncryption d5:56:3d:19:fa:06:8b:fb:5b:ef:07:72:3c:8b:3d:de:ba:64: b9:5f:fe:52:bc:49:b5:6a:c5:4b:ae:3a:40:e0:fb:ab:2e:8c: 3b:bc:b5:25:24:41:51:32:ee:b8:b6:42:72:e3:6a:bc:e8:73: 2a:fc:bd:81:69:e3:1a:c8:aa:ab:db:a4:b4:be:23:28:2b:e3: 41:1c:17:31:40:0d:6d:5b:5f:5e:62:b1:05:da:34:8c:0b:f8: 98:e4:7b:dc:89:ce:22:5b:61:11:9d:92:d6:ac:b9:db:28:a3: 83:9a:fd:31:44:b6:e5:66:47:c3:59:23:d9:b9:43:83:f7:b3: 5f:bb:72:c7:c9:0d:34:8c:83:ca:e5:5d:48:f9:22:36:46:6f: cd:2e:a4:17:7d:d1:fe:35:af:54:38:b7:f2:59:6e:0d:73:2e: 7f:cd:26:ca:74:36:42:74:c5:91:15:08:88:1c:6f:16:bc:26: d1:21:22:a2:84:53:61:08:3b:23:41:1c:0f:06:81:e2:ac:ee: bf:15:2f:40:fd:d3:77:10:82:2c:c0:e9:2a:b0:29:a7:2e:59: 8f:78:c8:ed:77:d2:ae:fb:5e:60:3d:ed:77:fb:9b:20:a2:10: f9:6e:e3:fa:28:32:87:b2:70:0d:1c:37:d3:07:f1:da:05:40: 46:14:45:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD QjhDM0I1MDkwHhcNMjQxMTI2MTQ0MDExWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ1ZGRjYi0wNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq3rTalEQL555IPgdcyxE5Nk5kmm/VKBHyJ2GTDV0RFCRZTG8A7X7WBtjRQP j/F20Ak7ram9XW0WhOnnrgYKywIldfhB5IcgZvJwrDIScg+U2wWGTB27ov88WHji s1c0ARehFvZT/5LHumQ/4+yHl4wplwKDF8yis0PcejnVaSqUExeXvy51JU0/Ro4E JFIz28gQ63N6YA9nY5sFaEDRIvzabG2acijAFdOVKri3erDC7rMNbzzjPlsUgf0l d5BJ0slNXGlQSJ7+GOIUIOoAb/ivNVtK34rWamQ1SQ7SdToqZv+nXGDhU/+uVsgv 6XqjoUpoPSCmJenTcR+Mp/3jcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJOe2Fmc uOayodj76Mf6HZ7cFIqwMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTczOTQvNEY1OTE4NkExRDZGMTFFMjlCNTQ0NkIxMDhCMDJDRDIvRDUyMDA5QjA2 QTYzMTFFRkE5NkYwMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8w4AwDQYJKoZIhvcNAQELBQADggEBANVWPRn6Bov7W+8H cjyLPd66ZLlf/lK8SbVqxUuuOkDg+6sujDu8tSUkQVEy7ri2QnLjarzocyr8vYFp 4xrIqqvbpLS+Iygr40EcFzFADW1bX15isQXaNIwL+Jjke9yJziJbYRGdktasudso o4Oa/TFEtuVmR8NZI9m5Q4P3s1+7csfJDTSMg8rlXUj5IjZGb80upBd90f41r1Q4 t/JZbg1zLn/NJsp0NkJ0xZEVCIgcbxa8JtEhIqKEU2EIOyNBHA8GgeKs7r8VL0D9 03cQgizA6SqwKacuWY94yO130q77XmA97Xf7myCiEPlu4/ooMoeycA0cN9MH8doF QEYURVY= -----END CERTIFICATE-----Generated at Sat Apr 26 09:10:17 2025 by rpki-client