$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F63554A0AC6411EF85E4707CC4F9AE02.roa File: F63554A0AC6411EF85E4707CC4F9AE02.roa (raw, json) Hash identifier: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI= Subject key identifier: 0F:40:68:9C:FD:AD:C7:15:6F:7F:12:83:68:7C:B8:EA:45:E5:6C:D2 Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 37 Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F63554A0AC6411EF85E4707CC4F9AE02.roa Signing time: Thu 27 Feb 2025 09:32:08 +0000 ROA not before: Thu 27 Feb 2025 09:32:08 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 146.116.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Validity Not Before: Feb 27 09:32:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c03118-2c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:ce:d0:3b:bf:14:f4:b3:88:db:a9:b0:80: f3:14:30:38:d0:fe:db:b0:52:cc:3b:47:80:bf:77: 65:12:a2:b7:ca:0c:f2:a7:cc:c4:4c:69:6f:be:e5: 1c:fa:3e:f9:fd:3e:ad:c5:b3:62:ee:9a:8f:f9:fd: 28:fc:a4:fd:1b:fa:8b:f1:b7:99:a2:55:45:e5:a0: 93:dc:c7:75:95:64:69:ea:a2:2e:1b:42:40:01:71: 0d:8b:4d:27:e0:e7:e4:7e:a7:6a:00:41:43:4b:6e: 62:cd:f0:ae:20:b4:87:67:43:fe:7f:db:6d:cc:9d: a9:49:dc:c9:09:2c:63:e5:55:2f:aa:96:1c:89:96: cd:99:56:c9:ce:2a:47:cf:4d:c8:db:81:87:76:f9: 5b:f3:5a:9d:b3:a7:40:3c:66:82:94:e8:97:9c:4f: f3:73:21:11:a7:9a:10:7f:2e:1b:e3:16:f7:c7:95: 15:2c:af:83:3d:bb:a7:fd:89:c4:5f:77:51:6a:8f: 02:9c:ba:da:ee:46:1e:f2:ba:53:ad:52:4e:ff:af: e9:47:d1:81:40:77:c2:03:25:c5:08:31:db:0c:4f: 51:07:ba:b0:76:47:45:f9:2b:ae:dc:40:e5:26:7d: 53:e5:72:89:b8:63:7d:66:34:f4:64:cb:0c:98:f5: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:40:68:9C:FD:AD:C7:15:6F:7F:12:83:68:7C:B8:EA:45:E5:6C:D2 X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F63554A0AC6411EF85E4707CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.116.248.0/24 Signature Algorithm: sha256WithRSAEncryption bd:21:20:af:c7:f2:ee:3e:2d:ae:10:27:97:13:9d:75:b7:33: ad:51:85:b9:e3:bc:37:95:44:f2:f6:92:9e:b0:26:2c:35:5b: 5f:3b:b1:20:15:04:5a:e3:c6:38:1f:65:34:86:11:40:c9:e8: db:aa:26:3f:cc:69:89:11:3e:e7:fb:1f:f3:d7:b6:9f:d6:11: 11:f4:a5:40:37:53:df:6b:36:01:29:d6:c6:a2:82:11:7a:53: 2b:eb:ed:20:57:59:44:ce:11:21:3e:91:67:36:a2:32:18:ca: c6:73:b5:b0:33:8d:70:43:a0:79:e2:1b:ec:61:86:f4:f5:36: 65:17:1c:21:80:3a:b6:61:5e:46:7b:81:e7:01:d7:ca:0f:e4: 5b:2f:5a:83:54:1d:8e:30:76:00:f1:7d:37:f7:4a:4a:1a:98: 38:cb:f3:04:2b:8d:cc:af:4d:f7:d1:cf:ba:c5:1e:b1:c2:e8: 2e:56:cb:51:46:5b:83:14:9a:bd:8f:5d:4f:80:04:0f:1e:64: 3f:1f:26:94:9c:f8:73:1e:eb:9e:6d:eb:8c:f3:96:c3:1a:e6: 70:13:61:e1:db:c9:75:1a:47:f9:3b:c7:2a:33:60:a2:7c:23: e1:45:77:6b:82:f5:fc:89:c2:12:c0:55:67:7b:c5:cc:23:77: af:1b:05:47 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoNDkzOTdFMzNCMzFDMEE4RjY4RkNEMjA3MkJEQTlBQ0NC NjVEMDJFQzAeFw0yNTAyMjcwOTMyMDhaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzAzMTE4LTJjOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk6M7QO78U9LOI26mwgPMUMDjQ/tuwUsw7R4C/d2USorfKDPKnzMRMaW++5Rz6 Pvn9Pq3Fs2Lumo/5/Sj8pP0b+ovxt5miVUXloJPcx3WVZGnqoi4bQkABcQ2LTSfg 5+R+p2oAQUNLbmLN8K4gtIdnQ/5/223MnalJ3MkJLGPlVS+qlhyJls2ZVsnOKkfP TcjbgYd2+VvzWp2zp0A8ZoKU6JecT/NzIRGnmhB/LhvjFvfHlRUsr4M9u6f9icRf d1FqjwKcutruRh7yulOtUk7/r+lH0YFAd8IDJcUIMdsMT1EHurB2R0X5K67cQOUm fVPlcom4Y31mNPRkywyY9ZohAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD0BonP2t xxVvfxKDaHy46kXlbNIwHwYDVR0jBBgwFoAUSTl+M7McCo9o/NIHK9qazLZdAuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2Lzg2NDdFNDFFQUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1RsLU03TWNDbzlvX05JSEs5cWF6TFpkQXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84NjQ3RTQxRUFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9GNjM1NTRBMEFD NjQxMUVGODVFNDcwN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJJ0+DANBgkqhkiG9w0BAQsFAAOCAQEAvSEgr8fy7j4trhAn lxOddbczrVGFueO8N5VE8vaSnrAmLDVbXzuxIBUEWuPGOB9lNIYRQMno26omP8xp iRE+5/sf89e2n9YREfSlQDdT32s2ASnWxqKCEXpTK+vtIFdZRM4RIT6RZzaiMhjK xnO1sDONcEOgeeIb7GGG9PU2ZRccIYA6tmFeRnuB5wHXyg/kWy9ag1QdjjB2APF9 N/dKShqYOMvzBCuNzK9N99HPusUescLoLlbLUUZbgxSavY9dT4AEDx5kPx8mlJz4 cx7rnm3rjPOWwxrmcBNh4dvJdRpH+TvHKjNgonwj4UV3a4L1/InCEsBVZ3vFzCN3 rxsFRw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:18 2025 by rpki-client