$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3C9733B4902C11EA898EFD7FC4F9AE02.roa File: 3C9733B4902C11EA898EFD7FC4F9AE02.roa (raw, json) Hash identifier: cMGzkNENcwWtthckGQElOO1VH7S7ntfFmpA2CK0pUCA= Subject key identifier: D7:C4:18:5C:73:44:9B:F1:C5:81:A3:64:07:0E:D0:AB:73:1A:74:D8 Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E Certificate serial: 3647 Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3C9733B4902C11EA898EFD7FC4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:42 +0000 ROA not before: Mon 02 Dec 2024 14:30:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38296 IP address blocks: 122.155.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13895 (0x3647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475 Validity Not Before: Dec 2 14:30:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc491-2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:14:01:6f:d2:d6:39:2e:1a:61:29:59:ac: b8:d9:be:08:0c:27:0a:44:8a:ea:73:2f:d9:3a:eb: 93:19:f1:4d:8d:74:5e:6c:57:d1:38:3f:83:3d:f6: db:e9:18:76:2c:2f:cc:8a:2b:7c:45:cb:b5:3b:75: 6b:16:75:4b:bb:6e:7c:40:a0:20:ff:6b:01:82:d7: a9:69:19:fc:e0:e9:43:12:6a:ff:b6:a8:e1:f0:e8: 6b:84:b8:67:43:56:7b:98:37:74:db:94:4e:2d:ab: 43:81:da:97:47:fa:72:3d:73:18:2b:99:19:bd:13: 7d:af:91:f2:96:31:0f:d1:ca:95:c0:46:ce:9d:ed: 81:4a:2d:4d:f0:43:57:82:b7:48:91:93:d0:82:a5: d8:e3:64:32:25:0c:02:ad:03:58:e6:67:54:10:7b: 0f:75:51:db:32:cf:e6:40:1f:a9:0d:4d:45:ba:a4: c7:ee:ac:c7:58:98:a6:5f:3c:99:e7:7f:49:5f:7e: ba:f8:6b:6a:ff:fd:fa:61:46:95:c8:6f:bc:c7:48: dc:49:c4:bc:85:26:02:01:c8:84:db:d7:18:72:50: ed:95:eb:5b:a5:9f:b2:96:2f:08:29:0c:ab:be:92: 38:7c:be:1a:c0:26:55:d1:15:de:ba:ae:38:67:d4: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:18:5C:73:44:9B:F1:C5:81:A3:64:07:0E:D0:AB:73:1A:74:D8 X509v3 Authority Key Identifier: keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/3C9733B4902C11EA898EFD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.155.95.0/24 Signature Algorithm: sha256WithRSAEncryption b8:2c:7f:c0:61:a7:45:d0:fa:44:df:66:b6:12:b2:4f:b2:30: 65:79:54:22:21:99:5e:95:53:79:8e:92:b1:ee:cd:1c:fa:9f: b5:94:9b:25:b1:10:ca:9a:43:27:cc:0d:11:db:fe:0b:5a:7d: f9:8d:23:df:c6:b6:96:c3:09:c1:4d:31:9e:0b:36:07:69:78: a2:8c:c9:48:4a:ac:dd:e4:80:c1:00:6f:7c:80:22:ee:a8:b0: 0f:b0:20:2b:27:bf:4a:1c:52:c5:f9:7c:b0:74:c3:ed:33:c5: 5d:48:67:c9:24:c5:3c:ce:88:c5:dc:f4:5d:c7:bf:d6:f7:dc: 6d:c0:c3:17:6a:c3:86:df:17:0f:d2:e3:f8:18:96:15:3e:96: 8c:3e:e6:41:1a:e4:60:28:44:c2:e1:8c:ab:76:d7:1b:98:78: 57:cf:47:1a:73:d1:a6:ca:24:25:76:d5:13:b6:ad:dd:f4:26: 09:18:e5:bd:b9:94:06:70:e2:6d:bf:55:19:cd:e8:d1:06:f7: 3e:f8:51:87:c3:da:58:ac:8b:02:7f:bc:81:6d:b6:3c:45:66: 5d:00:1f:e2:68:74:16:05:5b:7d:95:8c:79:b3:07:8b:c9:5e: 95:26:80:f5:83:f8:6f:d6:e9:00:75:ce:54:7f:0a:6d:61:27: 59:5d:be:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ5MS0yMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvioUAW/S1jkuGmEpWay42b4IDCcKRIrqcy/ZOuuTGfFNjXRebFfROD+DPfbb 6Rh2LC/Miit8Rcu1O3VrFnVLu258QKAg/2sBgtepaRn84OlDEmr/tqjh8OhrhLhn Q1Z7mDd025ROLatDgdqXR/pyPXMYK5kZvRN9r5HyljEP0cqVwEbOne2BSi1N8ENX grdIkZPQgqXY42QyJQwCrQNY5mdUEHsPdVHbMs/mQB+pDU1FuqTH7qzHWJimXzyZ 539JX366+Gtq//36YUaVyG+8x0jcScS8hSYCAciE29cYclDtletbpZ+yli8IKQyr vpI4fL4awCZV0RXeuq44Z9Ql3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNfEGFxz RJvxxYGjZAcO0KtzGnTYMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvM0M5NzMzQjQ5 MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6m18wDQYJKoZIhvcNAQELBQADggEBALgsf8Bhp0XQ+kTf ZrYSsk+yMGV5VCIhmV6VU3mOkrHuzRz6n7WUmyWxEMqaQyfMDRHb/gtaffmNI9/G tpbDCcFNMZ4LNgdpeKKMyUhKrN3kgMEAb3yAIu6osA+wICsnv0ocUsX5fLB0w+0z xV1IZ8kkxTzOiMXc9F3Hv9b33G3Awxdqw4bfFw/S4/gYlhU+low+5kEa5GAoRMLh jKt21xuYeFfPRxpz0abKJCV21RO2rd30JgkY5b25lAZw4m2/VRnN6NEG9z74UYfD 2lisiwJ/vIFttjxFZl0AH+JodBYFW32VjHmzB4vJXpUmgPWD+G/W6QB1zlR/Cm1h J1ldvuA= -----END CERTIFICATE-----Generated at Mon Apr 7 11:16:05 2025 by rpki-client