$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa File: DED757CC013811EF8A7E136EC4F9AE02.roa (raw, json) Hash identifier: jtrDIzEgJPw4GA1319KiWlklWXzfvc/n6mX65D7ay5s= Subject key identifier: 7C:FE:70:B4:3F:78:FA:2B:A9:F5:5B:05:E6:92:B3:D4:25:B7:F1:A6 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 15FA Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa Signing time: Tue 23 Apr 2024 06:15:24 +0000 ROA not before: Tue 23 Apr 2024 06:15:24 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132716 IP address blocks: 155.137.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 17:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5626 (0x15fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Apr 23 06:15:24 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=662751fc-bc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:95:b0:67:f7:ca:6e:8a:ae:5e:bf:d8:8d: e2:60:cd:b3:06:79:0c:e3:44:32:43:a4:ba:2c:ce: 91:18:4b:45:83:ff:8f:18:64:4c:78:91:10:5d:00: 28:99:72:13:60:69:8d:35:96:b1:b5:23:4c:be:4f: b6:9e:65:f2:e9:68:55:10:06:e1:db:34:f8:2b:49: 3f:9b:c1:75:13:88:b4:2f:45:42:97:c9:0a:9a:bc: e6:86:c7:2f:bb:65:af:a5:87:6e:78:37:1f:3b:03: 25:32:e8:1f:e2:50:85:c1:4e:5b:48:db:ae:0c:80: fa:ab:1f:6b:64:5a:79:5c:15:49:ec:7c:7f:bf:b2: 32:3b:73:98:60:5f:f8:15:d3:d0:3c:4a:e8:63:cb: d1:7b:d7:77:8b:39:c4:01:6d:a9:3d:64:71:a4:7e: 1b:6b:37:b4:b0:90:ab:c9:63:f3:e5:ce:d2:fc:af: 8b:89:cc:2d:50:02:0c:2d:55:88:72:27:69:26:ba: ae:30:c5:dd:20:8b:23:79:12:61:c4:87:f5:3e:82: 6d:0e:29:b0:79:3c:13:5d:76:8d:33:d2:e6:d3:34: b5:72:c6:d2:c9:d6:75:da:c7:3f:66:b8:76:72:bc: 5f:77:48:bc:d0:da:2e:a9:0e:e3:3b:7a:64:87:41: 49:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FE:70:B4:3F:78:FA:2B:A9:F5:5B:05:E6:92:B3:D4:25:B7:F1:A6 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/DED757CC013811EF8A7E136EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.137.86.0/24 Signature Algorithm: sha256WithRSAEncryption 63:69:2e:28:2a:45:65:bd:9a:e7:ea:22:b1:51:93:d3:62:8a: 14:fd:be:cf:b8:38:b5:fa:41:3b:e5:39:69:68:1d:5e:ac:0e: a8:cc:23:4a:bb:f8:f1:26:47:80:02:07:f3:ae:9b:e6:20:f9: 05:a5:36:ca:14:df:a0:17:1a:38:ea:11:3a:8b:50:48:cd:7d: 45:90:d1:98:87:7b:22:53:87:c9:c8:86:eb:a7:35:ff:43:61: fa:7f:f2:1f:1f:b2:6b:dc:32:4e:2a:c9:a0:d1:37:bb:19:0e: f6:50:fe:41:b9:f2:65:4d:f7:2a:06:3d:2d:f5:8e:b7:06:0b: 5f:5b:79:66:a0:b9:21:ee:39:f6:56:43:ed:68:e8:1e:4c:ee: c8:25:0c:f7:85:97:8b:9d:4c:82:a7:e7:44:63:bb:35:cd:b8: 2e:51:01:30:6d:cc:f3:5b:49:90:9d:2f:d4:f4:98:0a:d6:17: 91:6c:d1:92:51:aa:35:fc:b5:f3:ef:17:a4:d8:6d:69:17:69: 28:7b:27:cd:07:02:bd:d1:c8:e4:c1:16:e2:09:30:3c:12:6c: 02:b6:45:01:0c:53:dd:6f:27:be:0e:78:d3:dc:19:09:97:09: 62:64:0b:76:71:d3:91:fa:fd:3a:80:50:74:25:de:5e:ef:b3: 9e:73:dd:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjQwNDIzMDYxNTI0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI3NTFmYy1iYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/+VsGf3ym6Krl6/2I3iYM2zBnkM40QyQ6S6LM6RGEtFg/+PGGRMeJEQXQAo mXITYGmNNZaxtSNMvk+2nmXy6WhVEAbh2zT4K0k/m8F1E4i0L0VCl8kKmrzmhscv u2WvpYdueDcfOwMlMugf4lCFwU5bSNuuDID6qx9rZFp5XBVJ7Hx/v7IyO3OYYF/4 FdPQPEroY8vRe9d3iznEAW2pPWRxpH4baze0sJCryWPz5c7S/K+LicwtUAIMLVWI cidpJrquMMXdIIsjeRJhxIf1PoJtDimweTwTXXaNM9Lm0zS1csbSydZ12sc/Zrh2 crxfd0i80NouqQ7jO3pkh0FJ5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHz+cLQ/ ePorqfVbBeaSs9Qlt/GmMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvREVENzU3Q0Mw MTM4MTFFRjhBN0UxMzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACbiVYwDQYJKoZIhvcNAQELBQADggEBAGNpLigqRWW9mufq IrFRk9NiihT9vs+4OLX6QTvlOWloHV6sDqjMI0q7+PEmR4ACB/Oum+Yg+QWlNsoU 36AXGjjqETqLUEjNfUWQ0ZiHeyJTh8nIhuunNf9DYfp/8h8fsmvcMk4qyaDRN7sZ DvZQ/kG58mVN9yoGPS31jrcGC19beWaguSHuOfZWQ+1o6B5M7sglDPeFl4udTIKn 50RjuzXNuC5RATBtzPNbSZCdL9T0mArWF5Fs0ZJRqjX8tfPvF6TYbWkXaSh7J80H Ar3RyOTBFuIJMDwSbAK2RQEMU91vJ74OeNPcGQmXCWJkC3Zx05H6/TqAUHQl3l7v s55z3cg= -----END CERTIFICATE-----Generated at Mon May 20 19:20:05 2024 by rpki-client on console-fra.rpki-client.org