$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa File: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (raw, json) Hash identifier: c9KG9vpN1QmGvwjTf9PDbnl/EQ1PMVZ2QmsDIyegpZw= Subject key identifier: B3:4C:D5:47:CF:5B:A8:1B:E8:3A:5E:A4:E5:07:1D:FC:9F:D7:70:63 Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: BB Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa Signing time: Tue 09 Apr 2024 06:39:45 +0000 ROA not before: Tue 09 Apr 2024 06:39:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 8075 IP address blocks: 155.60.224.0/24 maxlen: 24 155.60.225.0/24 maxlen: 24 155.60.226.0/24 maxlen: 24 155.60.227.0/24 maxlen: 24 155.60.228.0/24 maxlen: 24 155.60.229.0/24 maxlen: 24 155.60.230.0/24 maxlen: 24 155.60.231.0/24 maxlen: 24 155.60.232.0/24 maxlen: 24 155.60.233.0/24 maxlen: 24 155.60.234.0/24 maxlen: 24 155.60.235.0/24 maxlen: 24 155.60.236.0/24 maxlen: 24 155.60.237.0/24 maxlen: 24 155.60.238.0/24 maxlen: 24 155.60.239.0/24 maxlen: 24 155.60.240.0/24 maxlen: 24 155.60.241.0/24 maxlen: 24 155.60.242.0/24 maxlen: 24 155.60.243.0/24 maxlen: 24 155.60.244.0/24 maxlen: 24 155.60.245.0/24 maxlen: 24 155.60.246.0/24 maxlen: 24 155.60.247.0/24 maxlen: 24 155.60.248.0/24 maxlen: 24 155.60.249.0/24 maxlen: 24 155.60.250.0/24 maxlen: 24 155.60.251.0/24 maxlen: 24 155.60.252.0/24 maxlen: 24 155.60.253.0/24 maxlen: 24 155.60.254.0/24 maxlen: 24 155.60.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8 Validity Not Before: Apr 9 06:39:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6614e2b1-9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:32:5a:2e:de:f5:2f:77:b4:6c:44:bb:a2: b7:59:a9:a3:db:c1:4c:ea:de:07:ef:8f:37:9a:aa: f6:5f:c4:ed:47:10:83:f3:11:cd:54:f4:1c:99:c4: 9f:2c:57:85:91:9b:41:4d:6b:6e:45:07:79:44:84: 36:0c:70:bb:a3:29:16:83:ff:b4:bc:cf:67:af:9d: 6f:83:ab:8d:9b:e8:9c:24:71:c1:e9:6c:e3:a3:95: 41:f6:d9:64:41:fe:a1:98:47:d1:6f:17:f3:b8:ba: b6:23:66:51:a0:2b:f7:f2:9c:89:7b:d5:79:1b:cb: d0:c1:bf:b5:72:98:6b:d9:10:b0:38:86:75:bd:71: 4f:23:72:2e:4b:39:7e:31:b2:09:bd:45:10:ff:42: 2e:e3:2e:44:20:cf:23:c4:44:54:4a:cf:c1:74:6b: 46:e0:0b:d6:4d:86:3b:ef:3f:45:02:e5:2c:aa:0f: 28:ab:e1:d8:38:a7:2e:fa:d8:38:6f:82:f1:0b:af: ff:05:ff:be:0b:68:b2:16:c8:21:c0:da:f7:80:4a: a0:4c:15:05:e2:c2:d1:fc:93:5a:d9:dc:86:7b:6b: 8e:d8:74:c1:3f:07:81:a0:19:d5:5b:a3:e9:c0:ae: 11:0a:87:a5:ad:0e:70:f3:1c:76:e8:11:b7:93:a6: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4C:D5:47:CF:5B:A8:1B:E8:3A:5E:A4:E5:07:1D:FC:9F:D7:70:63 X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.60.224.0/19 Signature Algorithm: sha256WithRSAEncryption 57:98:0d:c2:33:b8:31:da:b4:3a:36:42:38:99:6a:68:95:12: 50:78:20:cb:6c:bb:8f:df:36:5d:0a:30:37:bb:c7:0c:8a:7f: 53:cb:21:94:f4:7a:8c:38:fd:83:a8:fd:c8:31:be:85:14:66: fd:a2:d5:c0:88:b0:7d:ee:7d:f1:14:78:a6:7d:58:a7:38:7e: 29:ad:47:e4:29:c5:c6:ef:a7:e3:6e:d4:12:5c:71:94:00:d6: d7:c3:a5:1b:80:7c:f2:48:00:a6:f2:17:ed:9e:11:23:f7:36: 54:54:8b:1c:8a:57:09:f7:d1:31:67:4f:9b:f7:ce:df:3e:ec: 69:15:f1:ab:f5:5d:03:46:04:99:12:15:58:33:4b:d1:a2:d5: b5:88:1d:e2:33:37:8e:bb:83:30:aa:20:ca:37:14:fd:07:c0: af:f7:fe:3c:45:58:60:37:ed:92:5b:6f:77:22:d9:72:ed:cb: ed:6e:43:b4:e7:fe:ee:ff:eb:5e:6a:5a:f0:0e:27:fa:38:69: 17:77:20:82:36:cd:30:c6:10:74:ed:02:1b:9c:52:80:1b:23: d3:c1:b5:1e:4b:16:02:79:35:e6:ff:3f:30:ad:03:7e:12:34: 9e:86:e7:6a:cd:83:93:b3:34:b8:1b:9a:bc:83:78:05:18:25: 36:34:78:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjQwNDA5MDYzOTQ1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE0ZTJiMS05NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0cyWi7e9S93tGxEu6K3Wamj28FM6t4H7483mqr2X8TtRxCD8xHNVPQcmcSf LFeFkZtBTWtuRQd5RIQ2DHC7oykWg/+0vM9nr51vg6uNm+icJHHB6Wzjo5VB9tlk Qf6hmEfRbxfzuLq2I2ZRoCv38pyJe9V5G8vQwb+1cphr2RCwOIZ1vXFPI3IuSzl+ MbIJvUUQ/0Iu4y5EIM8jxERUSs/BdGtG4AvWTYY77z9FAuUsqg8oq+HYOKcu+tg4 b4LxC6//Bf++C2iyFsghwNr3gEqgTBUF4sLR/JNa2dyGe2uO2HTBPweBoBnVW6Pp wK4RCoelrQ5w8xx26BG3k6bgRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLNM1UfP W6gb6DpepOUHHfyf13BjMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVCQzgvNTg5ODIwQzJFRjAyMTFFRDhDMkREOTFGQzRGOUFFMDIvOUJCM0ZBQjZD Q0I1MTFFRTg2MTJGQjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWbPOAwDQYJKoZIhvcNAQELBQADggEBAFeYDcIzuDHatDo2 QjiZamiVElB4IMtsu4/fNl0KMDe7xwyKf1PLIZT0eow4/YOo/cgxvoUUZv2i1cCI sH3uffEUeKZ9WKc4fimtR+Qpxcbvp+Nu1BJccZQA1tfDpRuAfPJIAKbyF+2eESP3 NlRUixyKVwn30TFnT5v3zt8+7GkV8av1XQNGBJkSFVgzS9Gi1bWIHeIzN467gzCq IMo3FP0HwK/3/jxFWGA37ZJbb3ci2XLty+1uQ7Tn/u7/615qWvAOJ/o4aRd3III2 zTDGEHTtAhucUoAbI9PBtR5LFgJ5Neb/PzCtA34SNJ6G52rNg5OzNLgbmryDeAUY JTY0ePA= -----END CERTIFICATE-----Generated at Fri Apr 4 23:19:21 2025 by rpki-client