$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa File: 396955AA902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: nZoQVuDuH+FyEiL3Acwn68hAoBcrASUOagLHcDs1AaY= Subject key identifier: 62:CB:15:43:C3:3C:5F:D4:CC:05:17:72:9C:6E:8D:D0:15:00:56:0A Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3641 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:37 +0000 ROA not before: Mon 02 Dec 2024 14:30:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 18252 IP address blocks: 61.19.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13889 (0x3641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:30:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc48c-79b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:77:5f:74:bf:de:2f:0e:7d:56:04:26:32: 2d:b8:5f:c9:50:a0:9d:f2:d6:e7:82:f9:65:b7:9b: 07:0f:69:4a:11:9c:3e:dc:ee:e1:97:f4:2a:00:81: 45:fa:3d:82:77:85:7b:6d:bd:f1:93:6a:ae:ee:ae: a7:4d:92:43:5b:03:8e:6e:cd:df:41:fe:44:66:7c: ed:c7:b0:27:e7:62:2a:01:ec:ea:24:3a:ab:24:71: 25:40:ed:30:f2:9b:03:49:a6:1f:2a:f7:f1:a4:fa: d6:8b:45:67:5a:3b:4c:d1:de:c4:8b:3e:1d:7f:9f: a1:12:bc:02:ef:35:9f:2b:87:10:61:f0:73:d7:81: d7:52:57:4e:37:e3:d9:08:5d:3c:1a:0a:46:50:51: 4b:41:f4:00:83:3d:f1:14:dd:ee:8e:83:e7:d0:a6: 09:d6:64:e3:50:ba:63:58:35:43:37:53:d7:7a:4a: ec:dd:80:ae:d1:31:52:bb:76:30:8b:26:e2:10:c5: 54:2b:8b:7e:4d:8b:5d:19:88:52:f3:03:7e:ec:96: 06:18:4a:b6:b8:0c:c3:07:6d:1f:13:49:1b:8b:2f: 9e:46:f2:ff:47:85:2f:4a:22:db:e6:86:c7:8d:a1: 02:cd:1f:a1:b4:3b:73:b6:b9:37:cc:b3:9b:5f:04: 45:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CB:15:43:C3:3C:5F:D4:CC:05:17:72:9C:6E:8D:D0:15:00:56:0A X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/396955AA902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.128.0/20 Signature Algorithm: sha256WithRSAEncryption 52:95:1e:a6:a8:08:be:8a:04:67:b4:2c:9d:72:51:f3:79:d2: 8d:11:a1:21:4f:93:f6:c0:fb:21:b0:13:46:26:8b:e0:f2:f4: 45:f2:a0:a3:ae:85:6b:2c:34:da:6a:c9:73:ba:45:15:7a:5a: a7:3b:00:06:f8:7a:6c:51:da:34:64:cc:6a:1d:e5:75:88:55: 6c:79:51:d9:ee:62:64:54:70:34:3b:66:e4:36:71:b1:26:7c: 65:cb:1f:3c:26:b4:58:1f:95:9b:cd:fa:9f:6a:3e:6a:6f:c8: 20:3c:32:d5:17:35:bf:59:61:b5:0c:c2:19:d2:20:04:1f:2f: 37:d1:12:ef:ac:4b:08:46:04:5d:94:72:c3:9a:16:66:98:ae: 7b:4a:36:7e:87:8f:d7:27:02:84:60:5f:e7:aa:e7:3c:80:b9: 56:f9:f0:2b:87:80:35:53:f5:5b:d0:3a:01:cd:1e:b9:28:20: c4:a3:6d:3d:85:79:09:ba:fa:4d:10:19:5c:4b:3a:6a:32:1c: 48:67:4b:1d:f2:3a:94:9d:cf:85:4c:70:14:97:c3:89:a2:1e: bd:61:a3:d0:c4:a8:6b:c3:76:b6:06:6a:9c:fa:ec:ff:74:f1: f4:cc:3b:c0:80:98:bb:66:db:1b:20:7e:be:b6:00:e8:bc:8a: b5:1b:a8:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ4Yy03OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4x3X3S/3i8OfVYEJjItuF/JUKCd8tbngvllt5sHD2lKEZw+3O7hl/QqAIFF +j2Cd4V7bb3xk2qu7q6nTZJDWwOObs3fQf5EZnztx7An52IqAezqJDqrJHElQO0w 8psDSaYfKvfxpPrWi0VnWjtM0d7Eiz4df5+hErwC7zWfK4cQYfBz14HXUldON+PZ CF08GgpGUFFLQfQAgz3xFN3ujoPn0KYJ1mTjULpjWDVDN1PXekrs3YCu0TFSu3Yw iybiEMVUK4t+TYtdGYhS8wN+7JYGGEq2uAzDB20fE0kbiy+eRvL/R4UvSiLb5obH jaECzR+htDtztrk3zLObXwRFBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGLLFUPD PF/UzAUXcpxujdAVAFYKMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMzk2OTU1QUE5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAQ9E4AwDQYJKoZIhvcNAQELBQADggEBAFKVHqaoCL6KBGe0 LJ1yUfN50o0RoSFPk/bA+yGwE0Ymi+Dy9EXyoKOuhWssNNpqyXO6RRV6Wqc7AAb4 emxR2jRkzGod5XWIVWx5UdnuYmRUcDQ7ZuQ2cbEmfGXLHzwmtFgflZvN+p9qPmpv yCA8MtUXNb9ZYbUMwhnSIAQfLzfREu+sSwhGBF2UcsOaFmaYrntKNn6Hj9cnAoRg X+eq5zyAuVb58CuHgDVT9VvQOgHNHrkoIMSjbT2FeQm6+k0QGVxLOmoyHEhnSx3y OpSdz4VMcBSXw4miHr1ho9DEqGvDdrYGapz67P908fTMO8CAmLtm2xsgfr62AOi8 irUbqNg= -----END CERTIFICATE-----Generated at Sat Apr 26 09:30:42 2025 by rpki-client