$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa File: F120EB84C6D911EFA447E849C4F9AE02.roa (raw, json) Hash identifier: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o= Subject key identifier: EE:E3:94:43:E4:23:99:F5:D9:97:C9:DE:AB:D8:9C:BE:68:B7:04:84 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 06 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa Signing time: Mon 30 Dec 2024 18:14:43 +0000 ROA not before: Mon 30 Dec 2024 18:14:43 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 215355 IP address blocks: 161.248.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C Validity Not Before: Dec 30 18:14:43 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6772e312-fc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:97:53:38:95:86:34:05:4b:48:e5:d1:a2: 7d:37:18:2e:05:7c:29:a9:11:67:7d:79:dd:e9:68: 2d:f6:4e:0a:62:b3:3f:ff:f9:fb:44:ed:30:fd:80: 6c:4c:a4:59:b3:61:67:db:78:51:9f:fa:21:1c:00: 5b:1c:25:4a:f0:db:c1:74:f7:a2:c3:d3:91:16:08: 14:3c:5b:56:ff:46:73:e2:97:74:34:b5:49:9b:d9: 74:3e:83:1a:5a:e0:60:b5:12:f1:95:86:ac:2b:f4: f5:af:5b:5a:c3:9d:14:cd:05:fd:6b:a6:25:23:47: af:de:07:0a:9f:4e:92:90:c0:4d:c5:98:e3:d2:ad: 90:02:ad:6d:fc:42:9d:63:c0:45:db:ad:77:cd:c8: 8b:e7:4f:c8:d4:76:f1:b1:c3:a1:98:a1:21:d9:ae: 8a:69:75:7d:50:85:0f:2f:7b:32:4f:e0:36:c8:b2: 28:4c:0b:1c:97:50:be:a2:39:44:0c:1b:69:18:87: 27:6b:66:f1:76:97:40:0a:b4:8f:12:71:6a:5a:04: b4:fb:54:92:30:58:56:4f:77:7d:13:d9:0e:4d:fd: 9e:1e:5f:aa:76:f5:cb:2a:77:33:80:03:f3:f0:2b: 06:f5:ec:c1:c6:85:9c:06:4d:51:e6:83:33:03:a6: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E3:94:43:E4:23:99:F5:D9:97:C9:DE:AB:D8:9C:BE:68:B7:04:84 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/F120EB84C6D911EFA447E849C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.62.0/23 Signature Algorithm: sha256WithRSAEncryption 30:5b:78:98:c8:30:32:c5:89:f4:45:9c:42:20:6e:37:5f:4b: 92:cf:bf:bf:4e:00:61:d3:96:e3:fc:35:d5:78:54:fe:33:1c: ac:eb:c5:96:66:57:de:ac:36:68:69:2f:cb:7c:71:8c:44:5f: 8a:15:44:40:b7:34:93:68:1e:c4:23:f2:d1:42:fc:9a:9e:13: 0f:4a:e4:d7:9f:c1:81:7b:8a:2f:21:37:ad:ac:04:a8:2e:20: e9:c5:9e:4f:cc:56:0c:dc:c6:fe:02:f1:28:55:b1:3b:15:82: 13:05:32:c0:93:40:f7:30:a8:58:7a:2e:ab:d9:6e:12:79:8a: 4e:9e:34:5e:c9:7e:8e:fc:b7:9d:87:d4:ac:ac:98:51:11:9f: e4:4e:74:a9:a4:71:e5:e4:64:64:14:0d:75:17:7a:7f:05:ab: 66:68:df:59:ff:bb:28:36:4d:c1:4e:c9:91:f4:c1:56:7a:ec: 85:c0:c3:e2:da:5e:c4:60:f3:ff:e3:ec:34:11:b4:05:ca:1a: af:38:5e:13:9c:5d:4c:56:ca:31:61:da:91:66:bc:80:93:5b: 6c:3a:52:4d:7e:e9:e4:65:3b:44:75:cc:71:be:68:94:d2:c5: 29:1e:1a:07:b7:4e:b7:a6:dd:ff:db:41:c7:d1:ae:8e:39:10: ab:ff:03:78 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNDEyMzAxODE0NDNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzJlMzEyLWZjNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/8ZdTOJWGNAVLSOXRon03GC4FfCmpEWd9ed3paC32Tgpisz//+ftE7TD9gGxM pFmzYWfbeFGf+iEcAFscJUrw28F096LD05EWCBQ8W1b/RnPil3Q0tUmb2XQ+gxpa 4GC1EvGVhqwr9PWvW1rDnRTNBf1rpiUjR6/eBwqfTpKQwE3FmOPSrZACrW38Qp1j wEXbrXfNyIvnT8jUdvGxw6GYoSHZroppdX1QhQ8vezJP4DbIsihMCxyXUL6iOUQM G2kYhydrZvF2l0AKtI8ScWpaBLT7VJIwWFZPd30T2Q5N/Z4eX6p29csqdzOAA/Pw Kwb17MHGhZwGTVHmgzMDppgTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7uOUQ+Qj mfXZl8neq9icvmi3BIQwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83MzkwQjM0QUM2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9GMTIwRUI4NEM2 RDkxMUVGQTQ0N0U4NDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4PjANBgkqhkiG9w0BAQsFAAOCAQEAMFt4mMgwMsWJ9EWc QiBuN19Lks+/v04AYdOW4/w11XhU/jMcrOvFlmZX3qw2aGkvy3xxjERfihVEQLc0 k2gexCPy0UL8mp4TD0rk15/BgXuKLyE3rawEqC4g6cWeT8xWDNzG/gLxKFWxOxWC EwUywJNA9zCoWHouq9luEnmKTp40Xsl+jvy3nYfUrKyYURGf5E50qaRx5eRkZBQN dRd6fwWrZmjfWf+7KDZNwU7JkfTBVnrshcDD4tpexGDz/+PsNBG0BcoarzheE5xd TFbKMWHakWa8gJNbbDpSTX7p5GU7RHXMcb5olNLFKR4aB7dOt6bd/9tBx9GujjkQ q/8DeA== -----END CERTIFICATE-----Generated at Wed Feb 5 22:45:58 2025 by rpki-client