$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa File: 87B992CE90E211EDB4035D5EC4F9AE02.roa (raw, json) Hash identifier: b9eD5YUOC0GkTQZ3rX1z2ni+yFk2yorAsctaJzuBHI0= Subject key identifier: 2D:90:46:26:30:02:E6:AC:C3:54:86:01:DE:5C:D2:BA:C5:69:B2:D3 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 244E Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa Signing time: Sat 02 Dec 2023 14:40:13 +0000 ROA not before: Sat 02 Dec 2023 14:40:13 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139888 IP address blocks: 45.157.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9294 (0x244e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Dec 2 14:40:13 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656b41cd-c994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:3b:e7:9c:ab:ea:cb:a6:96:14:64:5c:e0: 6b:2f:72:1b:b4:83:0a:ec:21:22:33:41:eb:2b:c9: 9a:20:35:12:2b:75:bd:e0:32:4f:a8:80:fc:db:f6: fa:11:65:48:cb:69:84:d7:78:45:83:b6:72:c0:7d: 7e:5d:82:b6:c1:39:81:22:d1:b6:14:fb:cc:1a:46: d6:72:18:2b:91:7a:f0:24:f3:b6:96:0d:92:32:d6: 67:ed:b9:d0:b3:10:c4:52:ee:fb:71:a3:d6:05:eb: d7:b1:e2:5b:32:cb:b5:c6:6b:a0:d5:19:2b:6a:b1: b0:89:2a:bc:dc:1f:07:f8:9d:88:12:18:36:fc:a2: c2:a2:de:41:22:33:35:a2:d8:98:1d:8c:09:91:7c: 71:c1:3d:d4:97:f3:b1:b6:13:1a:fe:29:56:5f:d5: 2c:9a:4b:2d:82:3f:b6:21:d9:e1:a7:66:8b:36:e2: 26:d7:d6:e9:6c:a0:61:b8:9c:1a:0f:cc:21:df:55: 0c:74:5d:79:39:4a:3a:eb:f3:51:43:14:0f:93:e8: 3b:65:ad:97:bc:56:3b:ff:27:35:17:a8:30:1e:b3: 66:1b:09:00:fd:de:18:55:21:10:db:af:b3:bd:b2: 65:92:c7:53:ab:e2:25:44:03:bc:2e:60:81:d7:3e: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:90:46:26:30:02:E6:AC:C3:54:86:01:DE:5C:D2:BA:C5:69:B2:D3 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.157.88.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c4:3b:76:c5:14:d8:33:29:e8:9e:d9:b4:cf:74:ab:10:74: dd:32:89:8b:b0:22:80:da:1c:2b:d7:34:d0:dd:f1:ee:05:d3: 3f:6c:89:09:e6:49:d7:86:47:f4:5c:c1:e5:ef:9e:77:3f:2e: 52:8f:1a:c6:4d:80:d0:70:fc:d1:a1:a8:32:56:e7:3f:e9:1e: d5:f8:a3:3a:2d:01:25:98:e6:15:20:c8:bc:53:d4:bd:f2:1c: d6:31:94:ea:d1:c4:6f:76:08:72:1d:41:c1:ef:cb:2c:af:c4: 27:17:da:d9:32:07:32:9e:26:f8:0c:38:1e:9d:e2:c9:12:03: 20:c4:c5:d8:cb:de:d0:e1:ac:39:2e:9b:5b:08:4d:9f:b9:c5: db:77:83:0f:88:d0:cd:a9:e2:bf:5d:b5:52:5d:1c:21:34:95: 76:43:13:d8:22:2e:13:a3:73:3e:b8:f0:96:8c:c9:1e:22:94: 52:0c:ce:c7:04:6a:3d:4c:f5:1b:43:1d:26:fa:07:05:56:4d: 22:fe:e2:f0:83:99:71:4f:08:de:26:f6:7c:18:b8:1b:a3:7f: ae:c2:a0:ec:4a:86:bf:e5:dc:80:b8:a1:4d:f2:89:1a:bc:80: a6:8b:f0:2a:68:e7:12:ee:16:c8:15:9c:c9:6a:d7:f5:f9:95: 2d:69:f9:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjMxMjAyMTQ0MDEzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZiNDFjZC1jOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiY755yr6sumlhRkXOBrL3IbtIMK7CEiM0HrK8maIDUSK3W94DJPqID82/b6 EWVIy2mE13hFg7ZywH1+XYK2wTmBItG2FPvMGkbWchgrkXrwJPO2lg2SMtZn7bnQ sxDEUu77caPWBevXseJbMsu1xmug1RkrarGwiSq83B8H+J2IEhg2/KLCot5BIjM1 otiYHYwJkXxxwT3Ul/OxthMa/ilWX9Usmkstgj+2Idnhp2aLNuIm19bpbKBhuJwa D8wh31UMdF15OUo66/NRQxQPk+g7Za2XvFY7/yc1F6gwHrNmGwkA/d4YVSEQ26+z vbJlksdTq+IlRAO8LmCB1z7TlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC2QRiYw Auasw1SGAd5c0rrFabLTMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvODdCOTkyQ0U5 MEUyMTFFREI0MDM1RDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtnVgwDQYJKoZIhvcNAQELBQADggEBAE3EO3bFFNgzKeie 2bTPdKsQdN0yiYuwIoDaHCvXNNDd8e4F0z9siQnmSdeGR/RcweXvnnc/LlKPGsZN gNBw/NGhqDJW5z/pHtX4ozotASWY5hUgyLxT1L3yHNYxlOrRxG92CHIdQcHvyyyv xCcX2tkyBzKeJvgMOB6d4skSAyDExdjL3tDhrDkum1sITZ+5xdt3gw+I0M2p4r9d tVJdHCE0lXZDE9giLhOjcz648JaMyR4ilFIMzscEaj1M9RtDHSb6BwVWTSL+4vCD mXFPCN4m9nwYuBujf67CoOxKhr/l3IC4oU3yiRq8gKaL8Cpo5xLuFsgVnMlq1/X5 lS1p+To= -----END CERTIFICATE-----Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org