$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3FD8443C902C11EA898EFD7FC4F9AE02.roa File: 3FD8443C902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: vUrwv+6kEekRbhTQoflGyy3FaNmEldWn2IbfzPLoC5I= Subject key identifier: 66:CF:33:5B:65:C8:48:F4:A1:A0:C4:27:8E:1A:61:03:85:C3:97:82 Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 364D Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3FD8443C902C11EA898EFD7FC4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:47 +0000 ROA not before: Mon 02 Dec 2024 14:30:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9464 IP address blocks: 122.154.60.0/23 maxlen: 23 2001:c38:9718::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13901 (0x364d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Validity Not Before: Dec 2 14:30:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc496-6fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:be:dd:b2:65:5a:b0:32:0b:76:4d:98:88: 0a:25:36:fe:28:02:23:b9:b3:2f:06:49:43:f1:b9: 8b:5f:f9:20:5f:3e:75:61:e8:79:e0:7d:e5:c7:44: 74:2d:43:ad:fb:36:56:53:31:de:8d:1e:02:c1:75: 08:66:82:7c:9e:f8:03:82:2d:fd:59:e7:bf:75:5c: 12:30:15:25:61:4e:8f:16:d2:91:e1:64:92:1d:a7: 32:97:d1:c5:73:ed:98:fd:56:4f:6e:ff:60:1c:be: 50:11:f6:d6:a8:4b:ea:0d:99:7e:0f:49:b7:2d:99: 9b:b8:5e:af:97:61:2e:c8:8b:8c:2d:32:ee:a5:aa: e3:c0:2c:e4:45:43:ca:a7:4b:2c:32:69:ac:f4:fa: ae:52:19:b2:47:60:78:be:95:7c:2e:88:8e:54:84: cf:ad:67:5e:f5:51:0d:24:31:57:d9:6c:fd:88:ea: 7a:94:44:cf:d8:0d:f6:60:ad:17:71:24:70:45:fe: 52:29:c1:a6:a7:d5:fe:7e:39:35:34:05:30:4a:91: 50:fb:8d:c1:cd:1a:da:8d:fc:8e:4f:9b:c8:24:4e: fd:9d:d1:16:d1:f3:bb:97:8d:e0:98:37:cc:f7:ea: 0a:69:5c:d6:0a:f5:a0:f1:7a:60:69:34:6e:83:9b: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:33:5B:65:C8:48:F4:A1:A0:C4:27:8E:1A:61:03:85:C3:97:82 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3FD8443C902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.154.60.0/23 IPv6: 2001:c38:9718::/48 Signature Algorithm: sha256WithRSAEncryption 01:a7:30:3b:c4:9e:d8:b5:09:c8:1f:d0:5c:e4:1b:6a:ad:e0: a8:94:0b:d0:82:82:57:fb:67:94:a0:15:03:20:63:f3:9a:47: 75:23:a8:20:ef:72:59:82:ee:9d:a9:ce:70:42:04:91:02:c3: 8d:f9:90:fa:34:bb:ee:f5:8c:9c:c9:d8:36:0b:d0:76:43:15: c9:41:3f:96:db:2b:ad:e1:03:c3:1b:48:db:81:91:22:af:62: 82:4b:0b:10:ed:df:95:5d:9c:76:96:1f:11:0d:ba:f8:25:c1: 24:94:26:0b:84:29:2c:24:b6:de:d3:94:91:84:1e:23:dd:67: d2:da:ff:fa:e0:5b:43:2a:57:6a:ae:bf:e4:4a:4b:ac:74:33: 70:c7:49:d5:e3:da:a4:3d:9b:61:5c:28:ef:a3:fb:d0:1b:f4: 1d:5b:5b:7e:7a:96:6d:a6:9e:ad:be:f4:fa:ac:44:a5:eb:7c: 95:90:fe:e9:67:b4:15:fd:2d:22:ee:29:64:df:a0:10:4f:ba: a3:21:41:d0:54:2e:e4:de:4f:ea:6f:47:23:cf:ae:dc:fe:c9: e4:f8:a3:3f:a8:0e:c0:f3:b1:b3:95:cd:d3:39:7c:24:de:69: e1:ce:03:da:26:f1:ff:2f:07:ab:06:99:a1:e1:10:9e:be:a9: a2:46:cb:ad -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ5Ni02ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcG+3bJlWrAyC3ZNmIgKJTb+KAIjubMvBklD8bmLX/kgXz51Yeh54H3lx0R0 LUOt+zZWUzHejR4CwXUIZoJ8nvgDgi39Wee/dVwSMBUlYU6PFtKR4WSSHacyl9HF c+2Y/VZPbv9gHL5QEfbWqEvqDZl+D0m3LZmbuF6vl2EuyIuMLTLuparjwCzkRUPK p0ssMmms9PquUhmyR2B4vpV8LoiOVITPrWde9VENJDFX2Wz9iOp6lETP2A32YK0X cSRwRf5SKcGmp9X+fjk1NAUwSpFQ+43BzRrajfyOT5vIJE79ndEW0fO7l43gmDfM 9+oKaVzWCvWg8XpgaTRug5syhwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGbPM1tl yEj0oaDEJ44aYQOFw5eCMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvM0ZEODQ0M0M5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAF6mjwwDwQCAAIwCQMHACABDDiXGDANBgkqhkiG9w0BAQsF AAOCAQEAAacwO8Se2LUJyB/QXOQbaq3gqJQL0IKCV/tnlKAVAyBj85pHdSOoIO9y WYLunanOcEIEkQLDjfmQ+jS77vWMnMnYNgvQdkMVyUE/ltsrreEDwxtI24GRIq9i gksLEO3flV2cdpYfEQ26+CXBJJQmC4QpLCS23tOUkYQeI91n0tr/+uBbQypXaq6/ 5EpLrHQzcMdJ1ePapD2bYVwo76P70Bv0HVtbfnqWbaaerb70+qxEpet8lZD+6We0 Ff0tIu4pZN+gEE+6oyFB0FQu5N5P6m9HI8+u3P7J5PijP6gOwPOxs5XN0zl8JN5p 4c4D2ibx/y8HqwaZoeEQnr6pokbLrQ== -----END CERTIFICATE-----Generated at Sat Apr 26 09:22:22 2025 by rpki-client