$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa File: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (raw, json) Hash identifier: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g= Subject key identifier: 12:2A:DF:57:32:C6:3D:F7:63:AE:BB:38:0C:95:57:A3:AD:EE:29:A4 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 1674 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa Signing time: Wed 04 Dec 2024 16:54:27 +0000 ROA not before: Wed 04 Dec 2024 16:54:27 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 18190 IP address blocks: 155.137.88.0/24 maxlen: 24 155.137.89.0/24 maxlen: 24 155.137.90.0/24 maxlen: 24 209.141.8.0/24 maxlen: 24 209.141.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5748 (0x1674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Dec 4 16:54:27 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67508942-d3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:e4:f2:c3:ab:60:89:60:eb:93:5c:a5:72: 14:fb:a4:95:dc:1b:2a:0f:f0:58:3f:35:cd:25:4a: d0:99:bc:39:2f:b5:35:64:d1:37:c8:60:51:25:68: 25:08:94:07:28:7a:fc:aa:62:6c:e1:1d:f1:45:e7: a3:0a:fc:0b:66:ae:5f:51:d2:9f:66:89:d2:0c:3e: ba:db:2b:0e:3a:10:5c:8e:30:ca:89:e7:73:f5:82: 7a:8e:7a:7e:72:62:a8:6a:40:c1:0b:61:85:cf:85: e0:e2:a2:c1:e3:b2:46:77:d8:0a:f9:69:22:69:76: ef:0e:e6:d5:d0:43:fd:70:f4:e4:78:eb:41:83:74: 72:0a:47:4f:e4:ff:06:83:00:79:80:bf:e1:93:a9: 2b:2c:3e:4a:8d:30:44:53:a4:d5:e0:3d:51:31:d1: 79:d0:e3:93:3b:dd:d7:2a:86:83:00:02:21:95:2e: 69:d3:36:3d:2c:d8:ce:86:bd:26:b8:57:8f:78:83: e5:35:cb:0e:9f:cf:b5:e6:6f:bb:71:b3:7e:03:98: db:c8:87:30:7d:25:92:39:82:b9:9a:f0:6c:45:89: 05:dc:09:2d:2c:09:00:f0:64:61:2e:ea:d7:9f:8b: 9a:b0:7e:97:c7:8c:ec:58:a4:dc:60:fc:bc:68:e3: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:DF:57:32:C6:3D:F7:63:AE:BB:38:0C:95:57:A3:AD:EE:29:A4 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.137.88.0-155.137.90.255 209.141.8.0/24 209.141.12.0/23 Signature Algorithm: sha256WithRSAEncryption 30:d2:1a:c0:b1:0d:15:a5:0d:4b:88:d6:3d:f3:45:2f:14:cb: 61:72:84:bd:d7:a8:e0:ee:0c:b1:85:14:6b:fc:ff:5f:ce:40: a9:c2:9e:c8:43:4c:d2:e8:df:84:d4:d2:aa:57:f6:3b:9b:6e: 6f:91:9d:f9:71:90:af:c5:4b:96:91:84:86:39:46:0f:36:dd: 3d:67:72:87:3b:42:d8:28:a2:6d:a8:e4:5f:36:95:91:1c:84: a8:0a:42:5e:0c:59:fb:ec:8c:71:47:e1:2d:dc:da:e1:09:b9: e2:01:68:81:ba:ec:97:c5:b4:14:14:39:29:57:08:60:7b:f1: 17:a5:c0:5d:b3:b0:6c:5e:dd:d7:7e:db:e9:ce:3f:bd:b4:2c: db:cd:41:39:60:85:60:02:4f:20:b7:d1:68:26:f2:7f:68:56: 31:f9:1e:01:d2:ec:c0:43:4a:cf:28:0d:5f:f7:4a:19:e7:11: 94:80:87:12:6a:d8:da:9a:98:ca:8c:28:2c:a5:07:65:b6:0f: 48:2a:90:35:59:bb:8a:b8:9c:6b:9d:80:73:a4:60:47:84:04: 8f:91:95:5b:1e:8c:d7:86:b4:b8:28:14:1b:f0:b4:1c:54:97: a2:07:fe:c1:21:4f:cb:ea:79:9f:47:a7:0f:ff:0f:3c:06:61: 7d:7a:93:da -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICFnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjQxMjA0MTY1NDI3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwODk0Mi1kM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/Pk8sOrYIlg65NcpXIU+6SV3BsqD/BYPzXNJUrQmbw5L7U1ZNE3yGBRJWgl CJQHKHr8qmJs4R3xReejCvwLZq5fUdKfZonSDD662ysOOhBcjjDKiedz9YJ6jnp+ cmKoakDBC2GFz4Xg4qLB47JGd9gK+WkiaXbvDubV0EP9cPTkeOtBg3RyCkdP5P8G gwB5gL/hk6krLD5KjTBEU6TV4D1RMdF50OOTO93XKoaDAAIhlS5p0zY9LNjOhr0m uFePeIPlNcsOn8+15m+7cbN+A5jbyIcwfSWSOYK5mvBsRYkF3AktLAkA8GRhLurX n4uasH6Xx4zsWKTcYPy8aOMnjwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFBIq31cy xj33Y667OAyVV6Ot7imkMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvQUZCNTBEN0Ey QUFEMTFFRUE1RDk3MDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEA5uJWAMEAJuJWgMEANGNCAMEAdGNDDANBgkqhkiG9w0B AQsFAAOCAQEAMNIawLENFaUNS4jWPfNFLxTLYXKEvdeo4O4MsYUUa/z/X85AqcKe yENM0ujfhNTSqlf2O5tub5Gd+XGQr8VLlpGEhjlGDzbdPWdyhztC2CiibajkXzaV kRyEqApCXgxZ++yMcUfhLdza4Qm54gFogbrsl8W0FBQ5KVcIYHvxF6XAXbOwbF7d 137b6c4/vbQs281BOWCFYAJPILfRaCbyf2hWMfkeAdLswENKzygNX/dKGecRlICH EmrY2pqYyowoLKUHZbYPSCqQNVm7irica52Ac6RgR4QEj5GVWx6M14a0uCgUG/C0 HFSXogf+wSFPy+p5n0enD/8PPAZhfXqT2g== -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:14 2025 by rpki-client