$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/753F0588084611F08BEB2E2DC4F9AE02.roa File: 753F0588084611F08BEB2E2DC4F9AE02.roa (raw, json) Hash identifier: v1ibDjxmzIv2LQG97YVedEX5wevRpNJDRuNHyDfGpBg= Subject key identifier: 8B:76:A2:0F:F9:9A:2E:27:54:F2:E0:00:77:36:05:DC:59:36:EA:1E Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Certificate serial: 03 Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/753F0588084611F08BEB2E2DC4F9AE02.roa Signing time: Mon 24 Mar 2025 00:25:16 +0000 ROA not before: Mon 24 Mar 2025 00:25:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 86.54.202.0/24 maxlen: 24 86.54.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725 Validity Not Before: Mar 24 00:25:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e0a66b-81ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:0b:a4:6d:ac:40:37:fd:9d:b4:66:27:0f: 52:d1:26:80:f7:d4:af:25:13:85:0a:c6:31:93:de: ab:7b:78:3f:8a:d8:99:92:df:60:10:7f:4b:56:ec: b4:57:2f:50:0a:77:0c:a0:84:30:e4:c1:16:72:6b: c1:eb:1a:bf:f1:ab:94:7e:b3:31:08:6a:df:3a:ed: b7:0d:8f:d9:69:df:94:cc:95:b8:38:60:b2:b3:d1: 95:84:b0:50:0a:36:20:49:21:7f:9f:e4:18:80:e8: dd:15:70:b6:f9:2b:37:3a:82:28:3b:c0:f4:8a:1c: 39:a7:93:83:41:f5:4d:23:d3:bd:d3:0d:9b:a4:9a: 53:eb:c7:70:59:eb:3c:1f:ee:eb:d2:a2:eb:5c:a9: 12:94:12:fc:ab:2a:4d:5a:f5:ad:0a:71:f1:6a:b5: a8:c5:51:a7:61:02:9b:7b:ba:41:2a:42:4a:a9:b9: 28:85:c8:9e:3a:5d:0b:ef:36:e8:58:c5:09:7e:78: 35:5e:08:bd:d7:e5:f1:59:91:3b:db:0e:47:fc:e9: 7e:3d:64:ce:d4:50:5d:ff:54:91:90:3b:8e:7b:75: 8a:15:1b:4d:f3:db:a6:45:c6:e5:3b:95:8d:c3:58: 6e:de:73:d2:a3:17:2e:99:33:d4:e6:d3:4e:3a:b5: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:76:A2:0F:F9:9A:2E:27:54:F2:E0:00:77:36:05:DC:59:36:EA:1E X509v3 Authority Key Identifier: keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/753F0588084611F08BEB2E2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 86.54.202.0/23 Signature Algorithm: sha256WithRSAEncryption 16:a7:92:85:6a:b2:78:b9:4f:7e:c0:ce:dd:4e:1b:70:8c:09: 88:a9:46:8b:c4:c3:b6:20:0d:c2:e5:d3:a5:06:f5:40:ac:56: 18:6e:de:33:a3:3b:fb:2c:95:81:27:66:fc:20:5c:01:8f:26: 28:6f:56:6a:f7:f7:99:0e:88:1d:9c:18:17:ac:d9:08:a6:3c: 4d:47:2e:bf:d3:06:1e:0b:77:11:8c:18:df:6d:a1:8f:35:b6: 12:b2:36:35:8d:ef:f6:38:9c:ac:6d:6f:92:b9:10:12:3a:77: df:10:10:fd:d1:a2:58:a6:4e:f3:66:f2:ad:5c:43:ef:51:04: 52:65:1b:77:3c:d9:22:d3:73:72:5a:14:16:4d:22:50:05:3e: 73:0f:52:75:64:38:93:3a:11:e7:c1:af:bc:ad:14:42:7f:eb: 83:bd:22:89:36:b0:a7:d3:c6:0e:b3:ab:15:e5:96:31:25:82: a0:59:22:90:a5:26:c2:8a:f8:ea:2a:2f:e4:76:59:27:4c:52: 88:28:46:f8:d3:2d:8b:f0:16:e0:83:61:57:d8:6d:d0:a6:69: 42:c4:66:1f:3c:dc:b9:6f:18:ec:57:38:ca:da:8a:4e:fd:fe: b2:cd:bf:80:ba:b4:c0:b1:c6:74:74:14:69:91:7b:8c:97:c0: 62:43:19:69 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTcyNTExMC8GA1UEBRMoQjg3RkFENjU0RUM0MjE3QzY1MDBEMEYwNkIxOUJFMzE5 RDNEQURGNzAeFw0yNTAzMjQwMDI1MTVaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTBhNjZiLTgxZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4KwukbaxAN/2dtGYnD1LRJoD31K8lE4UKxjGT3qt7eD+K2JmS32AQf0tW7LRX L1AKdwyghDDkwRZya8HrGr/xq5R+szEIat867bcNj9lp35TMlbg4YLKz0ZWEsFAK NiBJIX+f5BiA6N0VcLb5Kzc6gig7wPSKHDmnk4NB9U0j073TDZukmlPrx3BZ6zwf 7uvSoutcqRKUEvyrKk1a9a0KcfFqtajFUadhApt7ukEqQkqpuSiFyJ46XQvvNuhY xQl+eDVeCL3X5fFZkTvbDkf86X49ZM7UUF3/VJGQO457dYoVG03z26ZFxuU7lY3D WG7ec9KjFy6ZM9Tm0046tWsvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUi3aiD/ma LidU8uAAdzYF3Fk26h4wHwYDVR0jBBgwFoAUuH+tZU7EIXxlANDwaxm+MZ09rfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NzI1LzgwMUJDQUE2MDgz QTExRjA5RkYxRDA3NEM0RjlBRTAyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvdUgtdFpVN0VJWHhsQU5Ed2F4bS1NWjA5cmZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi83NTNGMDU4ODA4 NDYxMUYwOEJFQjJFMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAVY2yjANBgkqhkiG9w0BAQsFAAOCAQEAFqeShWqyeLlPfsDO 3U4bcIwJiKlGi8TDtiANwuXTpQb1QKxWGG7eM6M7+yyVgSdm/CBcAY8mKG9Wavf3 mQ6IHZwYF6zZCKY8TUcuv9MGHgt3EYwY322hjzW2ErI2NY3v9jicrG1vkrkQEjp3 3xAQ/dGiWKZO82byrVxD71EEUmUbdzzZItNzcloUFk0iUAU+cw9SdWQ4kzoR58Gv vK0UQn/rg70iiTawp9PGDrOrFeWWMSWCoFkikKUmwor46iov5HZZJ0xSiChG+NMt i/AW4INhV9ht0KZpQsRmHzzcuW8Y7Fc4ytqKTv3+ss2/gLq0wLHGdHQUaZF7jJfA YkMZaQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:24 2025 by rpki-client