$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/0171064E1E7511EFA136126DC4F9AE02.roa File: 0171064E1E7511EFA136126DC4F9AE02.roa (raw, json) Hash identifier: nm+kHfyC5pL3nxicILBiWuqSt5lkaYXXN88vKMWBFYo= Subject key identifier: 2A:C5:67:50:82:94:A4:36:6D:8F:58:BC:8D:91:6E:53:F7:74:10:C1 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 24B2 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/0171064E1E7511EFA136126DC4F9AE02.roa Signing time: Thu 30 May 2024 11:08:55 +0000 ROA not before: Thu 30 May 2024 11:08:55 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 64777 IP address blocks: 209.15.120.0/24 maxlen: 24 209.15.121.0/24 maxlen: 24 209.15.122.0/24 maxlen: 24 209.15.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9394 (0x24b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: May 30 11:08:55 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66585e47-1210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:5e:48:a3:a1:19:c4:ca:c9:2e:81:f3:4f: b1:6c:34:81:a6:c4:62:69:a0:22:f5:14:87:64:c7: 7d:ac:bd:de:ea:87:ff:c4:b1:63:7e:14:6a:e5:95: 42:ea:e0:ac:2a:9a:bb:ef:86:90:cd:8e:c5:3c:b4: 24:31:4c:36:c3:db:02:6e:0a:1f:ab:88:82:d6:97: 52:d5:97:ea:09:03:a4:0e:43:33:60:f3:07:ae:a7: 49:26:a5:0e:3d:a2:41:f6:0d:ce:c4:ce:04:34:d9: cb:4b:45:0a:fe:07:6d:03:1b:02:66:90:fb:c2:94: 32:e3:f2:2b:97:62:a8:2e:94:bc:67:46:92:3a:29: 98:b1:f4:c6:bd:b5:01:53:2e:27:86:81:e6:48:b6: e3:5b:80:58:61:01:5a:56:3a:69:9d:88:28:a2:d5: 53:0a:09:63:27:15:4d:08:57:a6:9e:75:44:c2:dd: 17:a4:dc:a2:f7:c9:86:d3:5e:65:44:16:5a:ee:91: 88:9c:b3:ff:32:bb:4b:ca:81:e8:62:b5:1a:c4:6d: 68:cb:d1:ea:99:42:d6:15:84:70:6b:34:b3:53:e3: f2:4a:3a:2f:79:7e:d8:c5:4e:35:4a:17:92:4a:e4: 78:c3:4a:73:95:25:da:16:71:33:f7:75:1e:42:d8: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:67:50:82:94:A4:36:6D:8F:58:BC:8D:91:6E:53:F7:74:10:C1 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/0171064E1E7511EFA136126DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.15.120.0/22 Signature Algorithm: sha256WithRSAEncryption 88:56:6d:a7:cb:9c:1f:9d:5a:1c:9b:08:90:c4:c8:d2:0f:7d: dd:65:07:d2:32:51:14:09:c0:83:77:d4:df:2d:71:5a:f1:78: 01:f7:c1:00:c7:6d:57:14:65:fb:d8:34:d3:cb:f9:07:19:a6: e2:a8:3a:3b:91:98:31:61:10:38:ea:6f:d5:45:e7:4a:94:89: f3:7b:11:39:6a:3c:ee:fb:d7:5c:a7:47:d1:78:a2:2f:db:1a: 2d:14:da:bb:82:5c:79:66:0c:95:78:2e:94:26:86:e5:6b:f3: 0c:96:98:a4:e6:03:86:ac:da:d7:b2:c8:03:95:5e:d4:f9:e6: 5d:6b:74:14:ad:ea:c4:eb:14:c7:da:af:74:9b:d0:00:c4:fb: e1:87:c6:ad:25:62:d4:af:df:8f:12:b9:28:31:f8:fd:2f:a8: de:11:41:07:28:35:9e:47:6f:7a:4a:3c:a9:15:ac:aa:d4:43: 64:fe:6e:42:54:1b:71:67:01:af:a7:46:bc:5b:9f:d3:f5:19: c7:cb:1e:ee:99:05:9c:c4:7e:75:da:f6:1f:7e:f9:2f:88:6e: eb:ea:05:43:22:0f:c8:79:87:f2:13:86:ee:20:63:9f:d9:83: d3:8e:69:20:8a:c5:88:9e:2e:fc:20:c3:c3:f5:6a:fd:32:0d: 1d:67:0c:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjQwNTMwMTEwODU1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4NWU0Ny0xMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkJeSKOhGcTKyS6B80+xbDSBpsRiaaAi9RSHZMd9rL3e6of/xLFjfhRq5ZVC 6uCsKpq774aQzY7FPLQkMUw2w9sCbgofq4iC1pdS1ZfqCQOkDkMzYPMHrqdJJqUO PaJB9g3OxM4ENNnLS0UK/gdtAxsCZpD7wpQy4/Irl2KoLpS8Z0aSOimYsfTGvbUB Uy4nhoHmSLbjW4BYYQFaVjppnYgootVTCgljJxVNCFemnnVEwt0XpNyi98mG015l RBZa7pGInLP/MrtLyoHoYrUaxG1oy9HqmULWFYRwazSzU+PySjoveX7YxU41SheS SuR4w0pzlSXaFnEz93UeQti36wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCrFZ1CC lKQ2bY9YvI2RblP3dBDBMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvMDE3MTA2NEUx RTc1MTFFRkExMzYxMjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALRD3gwDQYJKoZIhvcNAQELBQADggEBAIhWbafLnB+dWhyb CJDEyNIPfd1lB9IyURQJwIN31N8tcVrxeAH3wQDHbVcUZfvYNNPL+QcZpuKoOjuR mDFhEDjqb9VF50qUifN7ETlqPO7711ynR9F4oi/bGi0U2ruCXHlmDJV4LpQmhuVr 8wyWmKTmA4as2teyyAOVXtT55l1rdBSt6sTrFMfar3Sb0ADE++GHxq0lYtSv348S uSgx+P0vqN4RQQcoNZ5Hb3pKPKkVrKrUQ2T+bkJUG3FnAa+nRrxbn9P1GcfLHu6Z BZzEfnXa9h9++S+IbuvqBUMiD8h5h/IThu4gY5/Zg9OOaSCKxYieLvwgw8P1av0y DR1nDDw= -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:06 2024 by rpki-client on console-ams.rpki-client.org