$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa File: 101569A41D3111EB9ED04852C4F9AE02.roa (raw, json) Hash identifier: entf5cdmbOGbZ+euZ/7gddfFOnWF0aDj15f3ko2NjXU= Subject key identifier: 5F:26:6B:34:3C:E5:15:C2:D0:DD:25:FF:48:9E:21:14:72:F1:DF:7B Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 364E Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:47 +0000 ROA not before: Mon 02 Dec 2024 14:30:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9835 IP address blocks: 202.139.202.0/24 maxlen: 24 202.139.203.0/24 maxlen: 24 2001:c38:90a1::/48 maxlen: 48 2001:c38:90a3::/48 maxlen: 48 2001:c38:90a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13902 (0x364e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:30:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc497-b095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:13:eb:1c:9c:16:24:dc:f3:d5:88:4e:6d:e1: 36:a5:35:82:49:f0:53:96:80:dd:e9:34:d6:96:ac: cb:cd:ec:cc:7a:9b:9a:5f:71:49:bf:dc:34:a2:43: 67:09:61:c3:75:3d:ec:28:d2:33:72:f6:10:98:5a: 3a:da:c3:fe:5d:09:5a:79:2d:97:8f:e2:8c:ea:87: 58:0d:4c:64:05:5c:5c:24:0f:17:0e:1b:9f:e2:7f: 3e:67:25:16:2b:72:9b:7e:7b:c5:29:6c:c9:e2:c1: 6d:47:af:6a:0c:4d:84:ad:06:00:be:33:77:de:fe: 60:c9:a9:dc:0e:92:3b:6b:1d:2f:c8:bd:70:c3:55: 84:50:ce:ba:6f:93:0c:37:81:88:3f:a6:b1:be:fe: 58:7a:4e:60:09:ae:05:7e:8c:74:77:1c:60:b5:88: a9:4c:67:1b:a0:45:77:8d:0a:e8:49:37:fa:73:70: 69:0a:a0:96:16:02:9b:3a:c5:65:fd:83:3b:96:ea: eb:c6:e9:75:07:f8:5a:b7:8f:d1:50:da:e7:e4:87: 30:61:45:18:39:ab:89:ed:c5:ff:5e:01:9c:8b:20: 99:bf:7c:3b:30:3b:cb:39:bd:4e:72:a1:e6:38:4e: 14:c6:de:5a:95:12:b5:15:5e:94:af:93:86:8a:b7: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:26:6B:34:3C:E5:15:C2:D0:DD:25:FF:48:9E:21:14:72:F1:DF:7B X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/101569A41D3111EB9ED04852C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.139.202.0/23 IPv6: 2001:c38:90a1::/48 2001:c38:90a3::-2001:c38:90a4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 34:dc:4f:a2:a3:e5:87:0b:41:29:f7:12:2f:f3:7e:df:f6:b3: 22:33:b1:22:f7:70:5d:8f:3e:cb:08:d3:eb:f0:7e:68:3a:a1: 74:b1:66:d8:15:98:58:a4:ff:37:da:d6:27:25:93:04:39:61: ec:a1:c9:f2:50:4a:53:c1:54:bd:64:cc:b2:e1:31:ac:cb:06: 87:eb:e1:00:39:16:b9:4a:34:f3:bf:97:ce:4b:82:47:94:f8: 55:82:82:73:b7:6b:07:f0:4b:c3:11:c4:cc:60:05:cf:68:2f: 6d:66:c7:ba:cd:91:66:40:5d:ef:4a:2c:99:62:b8:56:bc:05: c0:8e:46:23:66:58:0a:0e:b2:b8:66:47:f2:ae:1f:f5:45:80: 74:58:1e:2b:f6:35:c6:f4:90:92:7f:84:1f:dc:ab:5d:1b:48: b5:1e:e9:82:e8:a9:87:bb:9e:c6:43:e7:94:49:b8:db:36:5d: ca:f7:04:b5:d6:c2:da:a2:3e:a9:bd:78:3d:ed:e6:d7:c0:68: 10:42:9c:3f:09:0a:3a:43:9f:ff:66:3d:5a:9c:79:81:bb:3f: c2:54:8b:27:89:a1:e7:7e:93:8b:67:02:04:49:28:dc:50:e7: d1:dc:7b:e4:cf:d5:6e:2c:bf:cb:d4:7b:8d:53:c7:73:07:04: 4d:0d:27:63 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICNk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ5Ny1iMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xPrHJwWJNzz1YhObeE2pTWCSfBTloDd6TTWlqzLzezMepuaX3FJv9w0okNn CWHDdT3sKNIzcvYQmFo62sP+XQlaeS2Xj+KM6odYDUxkBVxcJA8XDhuf4n8+ZyUW K3KbfnvFKWzJ4sFtR69qDE2ErQYAvjN33v5gyancDpI7ax0vyL1ww1WEUM66b5MM N4GIP6axvv5Yek5gCa4Ffox0dxxgtYipTGcboEV3jQroSTf6c3BpCqCWFgKbOsVl /YM7lurrxul1B/hat4/RUNrn5IcwYUUYOauJ7cX/XgGciyCZv3w7MDvLOb1OcqHm OE4Uxt5alRK1FV6Ur5OGiremOwIDAQABo4ICujCCArYwHQYDVR0OBBYEFF8mazQ8 5RXC0N0l/0ieIRRy8d97MB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMTAxNTY5QTQx RDMxMTFFQjlFRDA0ODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAHKi8owIwQCAAIwHQMHACABDDiQoTASAwcAIAEMOJCjAwcA IAEMOJCkMA0GCSqGSIb3DQEBCwUAA4IBAQA03E+io+WHC0Ep9xIv837f9rMiM7Ei 93Bdjz7LCNPr8H5oOqF0sWbYFZhYpP832tYnJZMEOWHsocnyUEpTwVS9ZMyy4TGs ywaH6+EAORa5SjTzv5fOS4JHlPhVgoJzt2sH8EvDEcTMYAXPaC9tZse6zZFmQF3v SiyZYrhWvAXAjkYjZlgKDrK4Zkfyrh/1RYB0WB4r9jXG9JCSf4Qf3KtdG0i1HumC 6KmHu57GQ+eUSbjbNl3K9wS11sLaoj6pvXg97ebXwGgQQpw/CQo6Q5//Zj1anHmB uz/CVIsniaHnfpOLZwIESSjcUOfR3Hvkz9VuLL/L1HuNU8dzBwRNDSdj -----END CERTIFICATE-----Generated at Sat Apr 26 09:24:37 2025 by rpki-client