$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa File: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (raw, json) Hash identifier: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI= Subject key identifier: 64:96:01:08:00:63:1A:DC:3B:59:F4:12:AF:7A:00:58:08:F5:B1:77 Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 38 Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa Signing time: Thu 27 Feb 2025 09:32:09 +0000 ROA not before: Thu 27 Feb 2025 09:32:09 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 8075 IP address blocks: 146.116.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Validity Not Before: Feb 27 09:32:09 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c03119-894f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:b1:bb:9a:84:a4:20:0d:50:89:07:f5:90: 51:fa:00:1c:2d:6e:64:77:2b:30:69:ff:66:98:47: 32:c9:0f:66:0a:f3:24:05:3d:96:bb:d5:33:f2:d5: a3:ff:57:48:44:83:00:dc:4c:4a:be:63:19:13:a3: 03:81:90:73:48:9e:95:1c:19:81:b3:29:87:65:0a: ce:5e:54:4b:f9:28:c4:fb:f1:7d:52:18:84:bf:9b: 3d:0b:42:c8:3d:67:06:03:83:9a:10:fb:77:84:20: 34:46:a8:a0:5d:00:f2:1e:51:32:f1:76:2d:9d:05: 5a:5b:2e:05:9b:b0:eb:0b:75:95:60:c8:aa:21:9f: 2f:82:06:f7:73:3a:1e:d7:b4:b4:7a:e3:1f:8c:92: 27:c9:85:f7:d1:42:ef:a2:a6:43:ca:ed:67:a0:49: f4:d3:b8:26:8d:df:51:14:18:94:65:8d:06:a9:36: 9d:d7:03:df:dd:08:f0:7e:db:fc:26:db:44:70:95: 5d:e2:b6:f3:72:b6:0a:fe:92:8c:94:07:5c:29:ad: 71:98:bc:36:1d:a2:a3:9e:90:a2:3e:de:11:55:b7: 5a:c3:5b:71:5f:01:5d:03:46:9f:07:16:47:41:71: d9:97:cd:9f:4d:08:68:d7:8d:2e:22:f1:87:52:6e: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:01:08:00:63:1A:DC:3B:59:F4:12:AF:7A:00:58:08:F5:B1:77 X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.116.249.0/24 Signature Algorithm: sha256WithRSAEncryption 80:fb:c1:d5:40:eb:ed:bc:9b:73:aa:7e:15:b2:8c:a2:25:53: 00:aa:af:8a:25:b9:24:24:d5:0d:94:5f:a5:36:bc:6b:50:13: d9:2d:bc:14:71:0b:43:7a:dc:04:8f:d1:f6:e1:47:a7:1b:c7: 19:9c:86:ad:47:9c:51:7f:a9:fc:6b:80:46:12:52:3a:1d:32: 41:4e:7f:40:12:f9:12:7b:8f:f6:c9:10:ae:05:72:d6:f4:e8: 63:bb:8f:0d:a4:c4:2f:98:0d:b8:f6:0f:3e:e2:d7:60:21:f6: 03:71:aa:3e:be:c8:e1:4c:8f:64:22:0a:6c:65:2b:67:e4:98: 90:3b:c2:1a:ff:9c:89:80:07:0b:f4:63:0d:7e:e1:e8:3a:c1: 85:39:09:f6:9f:7f:60:05:d9:3f:1e:69:e8:bb:e9:fe:30:ac: e9:ef:e0:11:7b:17:97:1f:f5:88:24:93:d5:2b:83:d3:3a:d9: c8:5f:41:a3:b2:d8:b7:d1:de:7c:4c:0b:65:50:06:b5:94:2b: d3:76:4c:4a:69:93:36:23:99:56:ea:44:9e:ce:65:8c:cf:07: 5f:a2:3b:da:c3:11:75:0f:36:dc:f6:73:ee:d5:85:9e:d5:b3: 82:cb:c8:fc:87:32:1c:e1:b0:60:19:01:6f:2a:f8:ba:6b:0b: 8c:a8:35:42 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoNDkzOTdFMzNCMzFDMEE4RjY4RkNEMjA3MkJEQTlBQ0NC NjVEMDJFQzAeFw0yNTAyMjcwOTMyMDlaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzAzMTE5LTg5NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0w7G7moSkIA1QiQf1kFH6ABwtbmR3KzBp/2aYRzLJD2YK8yQFPZa71TPy1aP/ V0hEgwDcTEq+YxkTowOBkHNInpUcGYGzKYdlCs5eVEv5KMT78X1SGIS/mz0LQsg9 ZwYDg5oQ+3eEIDRGqKBdAPIeUTLxdi2dBVpbLgWbsOsLdZVgyKohny+CBvdzOh7X tLR64x+MkifJhffRQu+ipkPK7WegSfTTuCaN31EUGJRljQapNp3XA9/dCPB+2/wm 20RwlV3itvNytgr+koyUB1wprXGYvDYdoqOekKI+3hFVt1rDW3FfAV0DRp8HFkdB cdmXzZ9NCGjXjS4i8YdSboOjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZJYBCABj Gtw7WfQSr3oAWAj1sXcwHwYDVR0jBBgwFoAUSTl+M7McCo9o/NIHK9qazLZdAuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2Lzg2NDdFNDFFQUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1RsLU03TWNDbzlvX05JSEs5cWF6TFpkQXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84NjQ3RTQxRUFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9GNkJEQkJFMkFD NjQxMUVGODVFNDcwN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJJ0+TANBgkqhkiG9w0BAQsFAAOCAQEAgPvB1UDr7bybc6p+ FbKMoiVTAKqviiW5JCTVDZRfpTa8a1AT2S28FHELQ3rcBI/R9uFHpxvHGZyGrUec UX+p/GuARhJSOh0yQU5/QBL5EnuP9skQrgVy1vToY7uPDaTEL5gNuPYPPuLXYCH2 A3GqPr7I4UyPZCIKbGUrZ+SYkDvCGv+ciYAHC/RjDX7h6DrBhTkJ9p9/YAXZPx5p 6Lvp/jCs6e/gEXsXlx/1iCST1SuD0zrZyF9Bo7LYt9HefEwLZVAGtZQr03ZMSmmT NiOZVupEns5ljM8HX6I72sMRdQ823PZz7tWFntWzgsvI/IcyHOGwYBkBbyr4umsL jKg1Qg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:51 2025 by rpki-client