$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/75A4B2D4084611F08BEB2E2DC4F9AE02.roa File: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (raw, json) Hash identifier: JronbENc2C4chw8Lr5GoQXHOGuejfoIjiKRSNDdiR4Q= Subject key identifier: 6E:B2:36:8B:3E:75:12:07:20:E7:F1:B4:0B:03:A7:B7:09:FA:84:4D Certificate issuer: /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7 Certificate serial: 04 Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/75A4B2D4084611F08BEB2E2DC4F9AE02.roa Signing time: Mon 24 Mar 2025 00:25:16 +0000 ROA not before: Mon 24 Mar 2025 00:25:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153661 IP address blocks: 86.54.202.0/24 maxlen: 24 86.54.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155725 Validity Not Before: Mar 24 00:25:16 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e0a66c-5143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:e5:b3:29:74:70:5d:b0:50:58:02:7e:69: 63:37:0a:56:35:be:23:f9:49:cf:f5:13:ea:35:45: 3d:02:aa:80:d8:07:fd:18:b3:52:ac:59:76:7f:95: 25:f6:5d:0d:48:3f:ca:e8:d2:56:97:3e:b7:b1:cd: 2b:fe:7b:66:dd:46:3d:f6:b3:60:5f:05:8d:4e:5c: 0c:86:29:33:8d:ff:25:4e:0d:d9:6f:34:01:6f:00: 4a:c3:8a:5e:1e:cd:30:46:4f:8a:d2:b2:fd:95:00: 98:b2:44:c6:03:1d:e7:ab:01:ef:05:9d:7b:4d:6a: 02:83:3d:47:da:58:9a:f8:0f:04:e5:ae:4e:c2:eb: a5:46:49:0e:d7:c1:0f:91:7d:aa:51:c8:ae:c1:c3: 55:67:17:cc:c7:5c:df:20:ff:ff:88:8e:77:cf:56: 77:cb:2a:bf:76:54:be:a7:2f:7e:b5:21:7b:4e:37: 0c:e0:fc:3e:cc:64:13:31:ba:36:a3:19:6b:45:a9: 81:7b:09:2a:29:2e:ea:d9:50:b7:e8:28:00:f8:ab: a4:b8:0d:e9:2a:cd:03:24:67:30:9d:66:7f:79:d3: 56:36:9d:ff:d2:a7:c0:48:70:35:4c:6e:36:00:16: 61:42:27:62:fb:0f:6c:f9:c3:af:19:b0:08:57:2e: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:36:8B:3E:75:12:07:20:E7:F1:B4:0B:03:A7:B7:09:FA:84:4D X509v3 Authority Key Identifier: keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/75A4B2D4084611F08BEB2E2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 86.54.202.0/23 Signature Algorithm: sha256WithRSAEncryption a1:18:cd:ab:f2:9a:03:de:82:6b:b0:94:da:28:30:00:76:a6: 92:f3:7d:4f:d6:1f:81:79:76:3b:0b:c5:bb:f3:3a:b0:6b:8f: 52:bb:1e:4d:28:98:10:f6:e0:63:e5:71:a3:d2:57:54:82:0b: 35:cd:3d:6f:45:2f:9b:97:1f:70:8c:3d:d3:b8:8f:56:a4:df: 1e:ac:16:03:07:bb:14:93:a6:c4:7e:57:60:11:ff:85:65:a5: a1:4f:a7:81:6b:59:b4:e1:4f:c2:a8:32:01:e1:63:40:d8:09: 2f:1b:9a:c1:84:76:84:e3:a7:8d:a2:70:9c:c8:b5:6c:0c:42: 7e:69:a4:03:80:bc:30:3f:17:01:7b:3a:21:cc:05:b2:51:03: 58:eb:4a:43:78:a2:5c:31:e6:b2:78:70:c6:c8:da:63:65:6d: 37:d6:b9:34:90:70:1e:97:3d:06:8b:04:b8:af:f3:7f:e0:2d: 0c:b7:61:7f:83:f5:71:48:54:02:b0:6f:d1:f3:1a:82:c1:32: 34:94:3a:ec:6f:ba:c3:b1:f3:a8:cf:08:d2:b2:21:52:0a:27: e9:fa:6a:73:1e:1d:bd:6b:16:65:83:07:99:c5:ce:4b:37:80: 56:c3:c2:bb:97:f6:a4:8f:4c:b5:52:4c:32:b9:ff:19:7a:74: 8c:9e:83:3b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTcyNTExMC8GA1UEBRMoQjg3RkFENjU0RUM0MjE3QzY1MDBEMEYwNkIxOUJFMzE5 RDNEQURGNzAeFw0yNTAzMjQwMDI1MTZaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTBhNjZjLTUxNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZC+WzKXRwXbBQWAJ+aWM3ClY1viP5Sc/1E+o1RT0CqoDYB/0Ys1KsWXZ/lSX2 XQ1IP8ro0laXPrexzSv+e2bdRj32s2BfBY1OXAyGKTON/yVODdlvNAFvAErDil4e zTBGT4rSsv2VAJiyRMYDHeerAe8FnXtNagKDPUfaWJr4DwTlrk7C66VGSQ7XwQ+R fapRyK7Bw1VnF8zHXN8g//+IjnfPVnfLKr92VL6nL361IXtONwzg/D7MZBMxujaj GWtFqYF7CSopLurZULfoKAD4q6S4DekqzQMkZzCdZn9501Y2nf/Sp8BIcDVMbjYA FmFCJ2L7D2z5w68ZsAhXLtt9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbrI2iz51 Egcg5/G0CwOntwn6hE0wHwYDVR0jBBgwFoAUuH+tZU7EIXxlANDwaxm+MZ09rfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NzI1LzgwMUJDQUE2MDgz QTExRjA5RkYxRDA3NEM0RjlBRTAyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvdUgtdFpVN0VJWHhsQU5Ed2F4bS1NWjA5cmZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi83NUE0QjJENDA4 NDYxMUYwOEJFQjJFMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAVY2yjANBgkqhkiG9w0BAQsFAAOCAQEAoRjNq/KaA96Ca7CU 2igwAHamkvN9T9YfgXl2OwvFu/M6sGuPUrseTSiYEPbgY+Vxo9JXVIILNc09b0Uv m5cfcIw907iPVqTfHqwWAwe7FJOmxH5XYBH/hWWloU+ngWtZtOFPwqgyAeFjQNgJ LxuawYR2hOOnjaJwnMi1bAxCfmmkA4C8MD8XAXs6IcwFslEDWOtKQ3iiXDHmsnhw xsjaY2VtN9a5NJBwHpc9BosEuK/zf+AtDLdhf4P1cUhUArBv0fMagsEyNJQ67G+6 w7HzqM8I0rIhUgon6fpqcx4dvWsWZYMHmcXOSzeAVsPCu5f2pI9MtVJMMrn/GXp0 jJ6DOw== -----END CERTIFICATE-----Generated at Mon Apr 7 00:11:53 2025 by rpki-client