$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa File: 658A332E5C0311E999AF9478C4F9AE02.roa (raw, json) Hash identifier: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c= Subject key identifier: 0D:2F:27:18:BE:0E:82:2B:4C:6A:A9:3A:61:CA:31:35:A8:82:8A:E6 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 103C Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa Signing time: Mon 02 Dec 2024 17:35:45 +0000 ROA not before: Mon 02 Dec 2024 17:35:45 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4773 IP address blocks: 129.126.208.0/24 maxlen: 24 129.126.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4156 (0x103c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Dec 2 17:35:45 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674deff1-7db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:94:e7:5c:70:5d:da:a7:02:77:7b:be:f2:fd: 9f:99:d4:f4:b3:fb:cd:1b:d8:54:c7:56:a7:7a:a2: 2e:b6:6f:b9:ca:78:46:c1:38:23:2c:40:ed:cb:00: 6f:02:7a:9f:18:85:90:df:77:dd:3b:d2:3a:2a:12: a9:7c:12:58:9e:a9:53:5c:ef:0a:d1:50:78:3c:ba: dc:1a:eb:11:c7:50:4d:cd:bc:da:4f:f2:57:b3:27: 9b:59:71:9c:d4:be:bf:07:4d:4b:d1:ac:48:5f:7f: 42:63:2a:6c:5b:4c:ff:30:61:13:cd:fd:5d:db:28: 67:32:ec:51:f9:0a:2d:a1:83:1f:5d:52:02:ee:1f: 2b:72:81:24:d9:5f:ec:86:89:fa:3f:b5:24:54:54: 41:38:d3:12:62:f7:72:a1:ac:cd:0d:26:79:08:fe: d9:2a:82:f2:81:7b:21:aa:97:76:6f:e9:0e:00:9f: 2d:33:31:55:03:01:94:f6:24:c7:f9:0c:4e:eb:74: 9c:b9:f8:5f:f3:44:c4:e6:f6:85:c8:c2:81:fc:e2: b7:4c:c8:b8:de:54:f3:d2:ea:f7:84:40:57:d1:70: 8c:b4:61:79:5d:48:a5:89:14:01:1e:a1:dc:d9:77: 3d:ea:9f:aa:11:66:89:bc:e8:cc:2f:6a:82:03:3d: 17:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:27:18:BE:0E:82:2B:4C:6A:A9:3A:61:CA:31:35:A8:82:8A:E6 X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.126.208.0/23 Signature Algorithm: sha256WithRSAEncryption 03:a4:a3:af:99:7f:fd:5d:43:b7:5b:5b:ac:28:3e:54:ff:9b: fd:8a:3d:3f:de:73:3e:e6:d8:a5:0c:f3:5e:36:98:b8:37:44: b9:b4:dc:d2:b1:5b:0e:e1:d4:dd:6b:cc:59:3c:41:df:89:2e: 89:09:45:44:a5:f5:49:24:7f:55:1f:53:1a:f2:7a:22:82:be: 90:31:55:cb:56:94:ba:9c:6e:e3:2e:48:2e:07:75:4d:1e:88: 88:b5:77:3c:fa:83:41:ea:48:56:bc:d3:73:ba:6f:76:3b:03: 0b:bf:f6:29:46:39:c1:2e:b7:77:01:1d:02:53:b8:48:7d:6f: b7:65:b2:0f:6e:da:a8:32:88:b0:6f:99:4e:bc:2a:2f:73:99: 12:2c:8b:7d:ec:85:09:24:6b:19:ee:d1:28:0f:11:5c:4e:76: 83:ad:a1:ae:28:cc:76:f6:fb:40:d2:d5:b5:b4:63:98:7e:50: 4b:b6:64:d4:11:9f:1e:b2:08:61:f3:ac:58:a6:e5:06:2e:2f: b2:16:73:36:4f:6b:df:4b:9e:40:e9:65:bd:72:18:c7:e9:ad: c7:4b:fc:c0:a6:83:85:2d:ba:38:d1:e7:dc:ba:62:b2:e5:ff: 59:e0:52:9a:ee:da:64:1c:8a:f3:12:7a:40:75:30:8d:6d:68: 56:5a:91:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjQxMjAyMTczNTQ1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkZWZmMS03ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JTnXHBd2qcCd3u+8v2fmdT0s/vNG9hUx1aneqIutm+5ynhGwTgjLEDtywBv AnqfGIWQ33fdO9I6KhKpfBJYnqlTXO8K0VB4PLrcGusRx1BNzbzaT/JXsyebWXGc 1L6/B01L0axIX39CYypsW0z/MGETzf1d2yhnMuxR+QotoYMfXVIC7h8rcoEk2V/s hon6P7UkVFRBONMSYvdyoazNDSZ5CP7ZKoLygXshqpd2b+kOAJ8tMzFVAwGU9iTH +QxO63Scufhf80TE5vaFyMKB/OK3TMi43lTz0ur3hEBX0XCMtGF5XUiliRQBHqHc 2Xc96p+qEWaJvOjML2qCAz0XeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA0vJxi+ DoIrTGqpOmHKMTWogormMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZERDYvRDM2MkExQ0EzQjM3MTFFOUEwMzhBQjJBQzRGOUFFMDIvNjU4QTMzMkU1 QzAzMTFFOTk5QUY5NDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGBftAwDQYJKoZIhvcNAQELBQADggEBAAOko6+Zf/1dQ7db W6woPlT/m/2KPT/ecz7m2KUM8142mLg3RLm03NKxWw7h1N1rzFk8Qd+JLokJRUSl 9Ukkf1UfUxryeiKCvpAxVctWlLqcbuMuSC4HdU0eiIi1dzz6g0HqSFa803O6b3Y7 Awu/9ilGOcEut3cBHQJTuEh9b7dlsg9u2qgyiLBvmU68Ki9zmRIsi33shQkkaxnu 0SgPEVxOdoOtoa4ozHb2+0DS1bW0Y5h+UEu2ZNQRnx6yCGHzrFim5QYuL7IWczZP a99LnkDpZb1yGMfprcdL/MCmg4UtujjR59y6YrLl/1ngUpru2mQcivMSekB1MI1t aFZakYo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:44 2025 by rpki-client