$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa File: 87B992CE90E211EDB4035D5EC4F9AE02.roa (raw, json) Hash identifier: 9Mx2YbXgiyB8AIZIQ7AHexIPVIu7UgKFpNuf1xsWr8w= Subject key identifier: 6F:4A:58:97:F2:F3:A0:6B:65:22:EE:18:05:7F:29:A7:2D:9D:77:6E Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 251B Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa Signing time: Mon 02 Dec 2024 14:30:18 +0000 ROA not before: Mon 02 Dec 2024 14:30:18 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139888 IP address blocks: 45.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9499 (0x251b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Dec 2 14:30:18 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674dc47a-5a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:38:04:f0:c5:17:e1:0c:b4:6d:17:72:b8: 36:f9:a7:9a:87:5e:5e:be:e6:6c:1a:03:ad:23:4b: 38:34:16:c1:e7:4f:43:a8:14:00:96:82:07:95:22: 88:16:db:a1:7e:f3:90:27:91:90:2f:9c:ab:8c:33: 09:44:a1:86:e0:af:e2:10:de:3c:66:45:99:c8:db: 4e:76:96:8b:79:9a:05:b5:1c:c1:dd:5b:c9:c1:a2: bb:b2:c3:87:99:89:ca:a3:44:35:27:bb:11:0c:91: fd:9b:63:2f:85:1a:0f:63:44:70:3d:0e:12:ca:a1: f0:8d:ee:e5:d1:85:4b:74:3c:08:9f:5a:b9:7c:ea: 20:d9:e1:ed:46:ba:10:bb:11:a7:5c:6a:a6:42:20: a1:8f:5e:67:6d:ea:65:fc:55:8a:d4:b5:ec:81:f1: 64:03:76:52:da:25:78:8f:a1:4e:f9:0a:cc:cc:32: 2b:e9:0d:38:53:2f:3a:00:e8:5a:22:0b:7c:0b:8c: 5d:4d:08:0a:d8:55:74:7f:23:11:34:08:65:c3:05: b4:52:2a:5d:25:8f:ce:1d:8f:69:82:18:42:ae:1a: 39:57:21:8d:32:18:ad:13:28:30:ec:d3:43:5a:36: d5:85:cf:f8:3d:1b:e6:e1:3f:25:a5:fb:99:63:09: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4A:58:97:F2:F3:A0:6B:65:22:EE:18:05:7F:29:A7:2D:9D:77:6E X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.157.88.0/24 Signature Algorithm: sha256WithRSAEncryption a4:77:94:35:19:74:39:3b:52:d3:4d:06:7d:4e:2e:87:13:43: 3f:14:10:3f:17:6f:0d:f8:d5:53:ff:f0:d9:80:57:a9:61:ae: 7f:28:fe:2a:70:3c:17:78:88:8f:03:84:7c:bd:64:4d:0d:d5: c8:57:0b:6d:41:05:8b:2b:c1:41:e0:e4:e9:fd:0e:b3:f7:76: 28:2d:8c:ea:9d:73:60:6d:04:23:14:b4:92:69:37:6c:5c:4e: 0d:71:ea:94:8e:a5:71:a2:f3:82:51:f6:37:16:1c:40:cd:e8: d5:ae:b5:47:0e:ea:4a:d3:83:4b:9b:ae:ee:7d:f7:e8:47:8e: 10:fd:55:41:b6:89:60:0a:2e:7a:bf:fd:41:d8:a7:60:c3:ef: 7f:8b:04:6a:80:9d:50:c4:d8:04:e5:49:03:1f:5a:31:e5:9e: 2b:b9:ee:e9:e3:0b:07:da:be:7b:24:05:7e:72:09:07:b2:c1: bf:3d:50:37:da:f4:67:94:a5:8c:b5:13:cd:f7:8c:b3:d6:12: 52:1a:00:e0:74:58:e1:a9:44:9b:ca:8c:06:48:a6:74:70:1d: fe:b2:dd:33:2a:77:a3:d6:b5:b1:48:b1:ae:d3:df:1b:fc:ef: 67:95:ea:2c:e3:9f:f6:dc:28:a8:6b:e9:a6:6e:a8:bf:db:ce: 31:0f:55:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjQxMjAyMTQzMDE4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkYzQ3YS01YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywk4BPDFF+EMtG0Xcrg2+aeah15evuZsGgOtI0s4NBbB509DqBQAloIHlSKI FtuhfvOQJ5GQL5yrjDMJRKGG4K/iEN48ZkWZyNtOdpaLeZoFtRzB3VvJwaK7ssOH mYnKo0Q1J7sRDJH9m2MvhRoPY0RwPQ4SyqHwje7l0YVLdDwIn1q5fOog2eHtRroQ uxGnXGqmQiChj15nbepl/FWK1LXsgfFkA3ZS2iV4j6FO+QrMzDIr6Q04Uy86AOha Igt8C4xdTQgK2FV0fyMRNAhlwwW0UipdJY/OHY9pghhCrho5VyGNMhitEygw7NND WjbVhc/4PRvm4T8lpfuZYwnjIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG9KWJfy 86BrZSLuGAV/KactnXduMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvODdCOTkyQ0U5 MEUyMTFFREI0MDM1RDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtnVgwDQYJKoZIhvcNAQELBQADggEBAKR3lDUZdDk7UtNN Bn1OLocTQz8UED8Xbw341VP/8NmAV6lhrn8o/ipwPBd4iI8DhHy9ZE0N1chXC21B BYsrwUHg5On9DrP3digtjOqdc2BtBCMUtJJpN2xcTg1x6pSOpXGi84JR9jcWHEDN 6NWutUcO6krTg0ubru599+hHjhD9VUG2iWAKLnq//UHYp2DD73+LBGqAnVDE2ATl SQMfWjHlniu57unjCwfavnskBX5yCQeywb89UDfa9GeUpYy1E833jLPWElIaAOB0 WOGpRJvKjAZIpnRwHf6y3TMqd6PWtbFIsa7T3xv872eV6izjn/bcKKhr6aZuqL/b zjEPVcU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:10:40 2025 by rpki-client