$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa File: DED757CC013811EF8A7E136EC4F9AE02.roa (raw, json) Hash identifier: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY= Subject key identifier: 7B:B4:4D:4C:87:ED:A1:33:F8:DC:26:96:49:1F:63:1F:1C:FF:3E:15 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 1673 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa Signing time: Wed 04 Dec 2024 16:54:26 +0000 ROA not before: Wed 04 Dec 2024 16:54:26 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132716 IP address blocks: 155.137.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 16:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5747 (0x1673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59 Validity Not Before: Dec 4 16:54:26 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67508941-0d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:c5:2a:86:9a:e8:45:c8:95:7d:0e:6b:35: 61:75:9d:0a:71:f1:e5:40:f6:f3:5b:ae:2b:0c:3d: 42:38:3d:cf:b8:4e:8d:f7:6e:4b:d4:43:e0:d5:f3: dc:4f:22:a3:ff:aa:03:60:94:19:b5:44:20:1e:82: f6:33:11:78:aa:76:80:a4:3c:61:15:36:f4:34:96: db:e5:72:4f:ac:ee:45:7f:fe:33:8f:18:3a:79:35: ad:ad:2b:d4:2e:f1:a0:c1:ad:b4:91:9f:10:bc:e3: e6:79:c1:2e:09:0a:bc:0d:d2:c9:e6:e9:76:12:29: 9e:c4:5a:53:59:1f:fe:46:55:09:5c:d1:2c:60:52: 7c:2c:a4:7f:f1:60:5b:48:90:85:b5:ac:52:ab:47: c8:c6:9a:46:1b:04:e3:32:89:ac:36:e7:30:99:6e: 21:26:3c:43:be:0f:dc:ea:96:8a:2d:41:e1:26:34: 19:3f:56:91:4d:94:8e:69:15:13:86:92:55:59:1a: e7:52:15:4e:6c:51:fc:a3:3f:e0:33:cc:bd:12:cb: 18:42:eb:27:7e:56:91:79:31:ef:84:11:2c:26:93: cc:31:10:72:0f:46:ca:52:84:43:ba:cf:d0:53:d0: 55:40:6e:da:c4:89:4e:1f:45:5c:6c:ee:05:28:df: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B4:4D:4C:87:ED:A1:33:F8:DC:26:96:49:1F:63:1F:1C:FF:3E:15 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.137.86.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:07:38:49:70:d7:0d:0d:d9:a9:1f:d6:fd:35:ef:de:d1:cc: 97:81:85:9a:a4:06:60:ee:95:44:16:e7:93:bc:03:eb:f6:cc: 1a:72:94:7e:fc:ca:9a:9b:ef:ff:40:57:30:1a:3e:c3:60:ae: 64:ae:69:a5:96:67:49:f3:72:66:ad:71:16:1b:e7:0d:a7:66: 96:76:3a:fe:65:3c:68:93:42:39:0f:55:7a:04:04:37:1c:11: 93:6c:24:1d:03:dd:ea:3c:71:e8:ba:44:65:16:db:05:33:b5: 8a:2c:7a:aa:c9:88:e2:41:0d:61:14:2f:12:fd:06:fd:de:7a: 18:84:bd:79:83:fa:7f:41:18:66:70:e5:49:df:be:d7:65:a0: 54:9b:65:ce:f5:2f:cc:a6:4b:27:a9:1a:de:63:da:6f:ce:5e: 48:e6:51:cb:a9:84:7c:3a:a1:5a:c3:f4:4a:4b:be:ce:e6:bc: 43:af:fc:b4:ad:a6:31:e7:47:86:c3:1d:8e:d4:e7:ef:15:fe: 4f:96:9f:68:07:62:5e:cb:cc:59:1a:30:8f:47:9a:51:82:b7: 30:d2:ec:ec:3a:ba:3c:5a:f0:ab:eb:a6:41:c9:e6:4d:8c:b0: f2:a8:ac:e0:16:f5:3e:ca:92:06:ea:70:cc:eb:ab:60:22:bc: 6b:84:61:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjQxMjA0MTY1NDI2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwODk0MS0wZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuXFKoaa6EXIlX0OazVhdZ0KcfHlQPbzW64rDD1COD3PuE6N925L1EPg1fPc TyKj/6oDYJQZtUQgHoL2MxF4qnaApDxhFTb0NJbb5XJPrO5Ff/4zjxg6eTWtrSvU LvGgwa20kZ8QvOPmecEuCQq8DdLJ5ul2EimexFpTWR/+RlUJXNEsYFJ8LKR/8WBb SJCFtaxSq0fIxppGGwTjMomsNucwmW4hJjxDvg/c6paKLUHhJjQZP1aRTZSOaRUT hpJVWRrnUhVObFH8oz/gM8y9EssYQusnflaReTHvhBEsJpPMMRByD0bKUoRDus/Q U9BVQG7axIlOH0VcbO4FKN/LCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHu0TUyH 7aEz+NwmlkkfYx8c/z4VMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvREVENzU3Q0Mw MTM4MTFFRjhBN0UxMzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACbiVYwDQYJKoZIhvcNAQELBQADggEBAAsHOElw1w0N2akf 1v01797RzJeBhZqkBmDulUQW55O8A+v2zBpylH78ypqb7/9AVzAaPsNgrmSuaaWW Z0nzcmatcRYb5w2nZpZ2Ov5lPGiTQjkPVXoEBDccEZNsJB0D3eo8cei6RGUW2wUz tYoseqrJiOJBDWEULxL9Bv3eehiEvXmD+n9BGGZw5UnfvtdloFSbZc71L8ymSyep Gt5j2m/OXkjmUcuphHw6oVrD9EpLvs7mvEOv/LStpjHnR4bDHY7U5+8V/k+Wn2gH Yl7LzFkaMI9HmlGCtzDS7Ow6ujxa8KvrpkHJ5k2MsPKorOAW9T7KkgbqcMzrq2Ai vGuEYSQ= -----END CERTIFICATE-----Generated at Tue Apr 8 15:50:50 2025 by rpki-client