$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa File: C40F099A1E7411EF818FAE6CC4F9AE02.roa (raw, json) Hash identifier: B3CcjXzeJ4dABXXB8sqhv86VgPvTtQb+NKigWAQp3Ao= Subject key identifier: 40:32:57:2C:86:3A:C8:A8:8C:D3:48:7C:3F:CC:39:3B:67:5A:27:8A Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 251A Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:18 +0000 ROA not before: Mon 02 Dec 2024 14:30:18 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139591 IP address blocks: 209.15.120.0/24 maxlen: 24 209.15.121.0/24 maxlen: 24 209.15.122.0/24 maxlen: 24 209.15.123.0/24 maxlen: 24 209.15.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 14:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9498 (0x251a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Dec 2 14:30:18 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc479-7cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:36:d3:82:05:51:9a:ad:61:4a:aa:d7:1b: 2d:a8:ff:fa:67:3c:e7:7b:b8:83:e2:7a:c3:b8:00: f1:14:2e:81:d4:55:fd:ca:c9:d7:8a:1c:d5:a3:82: 8e:9e:bd:fc:b6:7a:c2:7a:9f:98:c2:55:3d:27:cb: 4d:61:ba:e1:dc:f2:c3:ab:8a:46:dd:d5:be:6e:27: 45:fb:7c:8d:8b:43:d6:66:82:ca:52:cf:6c:50:9d: 8e:53:73:cf:a0:cf:80:7d:50:5e:cb:34:d1:8d:24: 25:3e:45:4d:dd:fd:2c:90:6a:9b:1b:6f:92:74:ff: c6:02:32:89:e8:d2:59:92:4d:b2:ed:da:85:a7:6f: 54:c5:52:e5:e0:f4:e4:58:51:3e:0e:ef:57:7d:34: 96:84:31:5e:a4:76:5d:71:e7:c1:a9:64:ec:20:c8: 9c:dd:dc:af:36:b0:17:6b:af:28:18:8a:23:1e:88: 2a:0b:5e:8f:d8:67:a6:b9:2b:c2:c5:19:eb:ea:19: 46:18:6a:5e:b1:92:ed:10:93:42:f3:62:8d:48:10: 67:7b:ca:2f:f7:2d:86:ee:66:9b:b7:58:48:27:27: 71:1f:5c:69:54:39:88:35:d2:89:20:d8:0e:e8:e8: 92:4e:78:25:16:8b:25:49:8d:b8:fb:a1:51:1a:36: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:32:57:2C:86:3A:C8:A8:8C:D3:48:7C:3F:CC:39:3B:67:5A:27:8A X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/C40F099A1E7411EF818FAE6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.15.120.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:44:95:df:8c:e2:7b:aa:7f:ec:64:79:df:9f:a9:2c:9f:bb: 26:db:a5:f1:03:89:12:d4:46:1b:39:2a:0b:27:a5:49:bf:86: 10:45:ba:61:07:b2:72:48:08:f5:fc:ab:c3:ca:62:5d:d1:8c: c4:5c:74:df:81:2c:fa:93:cd:38:97:a8:fd:c3:4c:10:04:ee: 5d:4e:48:21:9f:4b:30:46:17:20:41:11:bb:8c:85:ca:47:44: cc:5f:72:8d:27:4b:d0:20:68:21:c3:96:d0:72:ca:0f:c1:ea: 25:39:49:9d:d9:4e:ce:2e:8e:49:68:77:7f:b7:67:e2:e6:94: be:79:8e:aa:e2:7d:af:1a:36:ad:d6:00:d9:8d:e4:fa:53:88: 40:3f:1e:7c:f9:01:fb:c1:c3:aa:08:ea:c5:93:c5:60:2e:88: af:b1:4c:15:9f:5f:90:ab:42:e2:85:8e:8b:58:b2:fa:5d:6f: c2:71:0a:f7:67:8c:ab:87:4b:4b:b3:41:70:85:e2:21:b1:12: ea:a3:52:22:1c:fd:88:14:f5:c5:37:1d:5e:ed:3a:6a:a3:cc: 93:ab:df:d4:94:84:e2:04:20:e6:f9:73:60:ca:60:a7:63:ef: 72:e5:e3:67:6d:61:86:1f:94:ab:79:4b:ea:17:6e:ab:91:ba: 59:b8:9d:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjQxMjAyMTQzMDE4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ3OS03Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaw204IFUZqtYUqq1xstqP/6Zzzne7iD4nrDuADxFC6B1FX9ysnXihzVo4KO nr38tnrCep+YwlU9J8tNYbrh3PLDq4pG3dW+bidF+3yNi0PWZoLKUs9sUJ2OU3PP oM+AfVBeyzTRjSQlPkVN3f0skGqbG2+SdP/GAjKJ6NJZkk2y7dqFp29UxVLl4PTk WFE+Du9XfTSWhDFepHZdcefBqWTsIMic3dyvNrAXa68oGIojHogqC16P2GemuSvC xRnr6hlGGGpesZLtEJNC82KNSBBne8ov9y2G7mabt1hIJydxH1xpVDmINdKJINgO 6OiSTnglFoslSY24+6FRGjY1CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEAyVyyG OsiojNNIfD/MOTtnWieKMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvQzQwRjA5OUEx RTc0MTFFRjgxOEZBRTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPRD3gwDQYJKoZIhvcNAQELBQADggEBAGtEld+M4nuqf+xk ed+fqSyfuybbpfEDiRLURhs5KgsnpUm/hhBFumEHsnJICPX8q8PKYl3RjMRcdN+B LPqTzTiXqP3DTBAE7l1OSCGfSzBGFyBBEbuMhcpHRMxfco0nS9AgaCHDltByyg/B 6iU5SZ3ZTs4ujklod3+3Z+LmlL55jqrifa8aNq3WANmN5PpTiEA/Hnz5AfvBw6oI 6sWTxWAuiK+xTBWfX5CrQuKFjotYsvpdb8JxCvdnjKuHS0uzQXCF4iGxEuqjUiIc /YgU9cU3HV7tOmqjzJOr39SUhOIEIOb5c2DKYKdj73Ll42dtYYYflKt5S+oXbquR ulm4nU8= -----END CERTIFICATE-----Generated at Tue Apr 15 13:15:49 2025 by rpki-client