$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa File: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (raw, json) Hash identifier: SbzIGZNMNJa87oLQ8CifAe8qrbXoaQRi0TmhIZboCMQ= Subject key identifier: 18:08:67:EF:36:5A:AA:6A:E8:26:72:AD:5C:81:A8:C6:D6:CD:1D:D6 Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 04 Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa Signing time: Wed 27 Nov 2024 02:11:51 +0000 ROA not before: Wed 27 Nov 2024 02:11:51 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 8075 IP address blocks: 146.116.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6 Validity Not Before: Nov 27 02:11:51 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=67467fe7-530b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:19:c8:1c:45:ec:95:c2:52:c6:15:66:cd:55: 2f:08:62:fd:3c:35:c1:81:13:24:55:2e:00:d3:0a: 6a:57:9a:5d:7a:a1:ff:ae:05:56:36:9d:e6:58:27: a6:4d:06:fe:2b:73:4d:99:33:35:3f:63:17:09:c1: 48:47:e3:d1:ea:be:0a:37:17:d8:45:01:4b:13:bf: 4d:7d:c2:3b:e0:75:4d:33:d8:b8:50:cd:68:1a:68: 77:a9:32:76:5b:29:c8:bd:be:54:9f:e5:9d:a8:aa: 9d:c6:1a:ae:87:61:9c:35:87:e9:c8:89:38:36:49: 3b:5e:08:f2:97:16:92:00:31:13:85:29:50:6d:e8: a9:b8:12:9c:a1:24:48:e8:b4:ae:0c:1e:9c:ce:ad: ea:58:98:15:57:82:c0:be:b7:fd:66:cb:ca:88:60: 61:59:91:a0:2a:09:18:3d:84:47:bc:c8:90:8e:c7: 71:f0:17:0c:7a:b8:c8:13:79:ca:26:99:bf:d4:7c: d1:ff:58:f4:27:43:5b:8e:44:25:1f:41:bf:46:0d: 54:d3:88:d6:8f:b0:38:a8:98:8d:b9:24:9b:25:0e: d7:f5:63:19:95:27:c1:6d:56:37:78:70:1f:f2:a0: 3d:c2:c6:fb:60:22:4d:96:6f:bf:19:23:72:ad:fc: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:67:EF:36:5A:AA:6A:E8:26:72:AD:5C:81:A8:C6:D6:CD:1D:D6 X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.116.249.0/24 Signature Algorithm: sha256WithRSAEncryption b9:a0:bc:05:82:78:13:8f:7d:90:d1:c4:61:04:de:d8:88:a0: eb:a8:fb:ea:3b:27:db:90:cd:70:5d:78:1f:d3:ed:d8:7b:f4: ab:99:29:f9:65:15:e9:fc:e7:db:2a:57:ca:26:13:f2:b2:35: d7:53:9d:4e:c1:81:97:f0:0b:2b:ce:69:ce:d3:8b:08:79:0a: 2c:2c:2e:af:d6:76:7f:bd:23:be:19:3f:59:33:26:cf:d3:2c: a8:f3:14:eb:a2:32:8a:e2:c9:ca:95:4d:5a:b3:99:46:bf:0d: cb:df:34:db:7b:ff:2f:1f:d4:ea:6e:3d:39:49:4a:91:9f:cd: 06:2e:ad:b7:f1:1a:e6:9a:fa:b1:6c:15:eb:7e:35:c3:ba:40: 1e:61:83:80:73:a0:1e:2e:22:d3:6a:99:bf:b0:82:13:27:f8: ff:da:ab:58:28:20:db:ba:b8:85:f0:5d:0b:4c:c6:3a:12:ff: ba:bb:94:53:bb:6e:1a:10:34:f6:ce:93:2e:b5:15:39:1b:f4: c1:b1:08:cf:5b:d5:7b:29:b8:9b:dd:36:f4:85:aa:b0:c8:98: be:82:13:66:9b:91:40:88:78:21:d9:82:f4:3d:82:58:d6:a5: b0:79:72:50:94:65:24:92:c6:98:1d:ee:06:45:f3:b2:98:90: cb:49:b9:c1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoNDkzOTdFMzNCMzFDMEE4RjY4RkNEMjA3MkJEQTlBQ0NC NjVEMDJFQzAeFw0yNDExMjcwMjExNTFaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDY3ZmU3LTUzMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfGcgcReyVwlLGFWbNVS8IYv08NcGBEyRVLgDTCmpXml16of+uBVY2neZYJ6ZN Bv4rc02ZMzU/YxcJwUhH49Hqvgo3F9hFAUsTv019wjvgdU0z2LhQzWgaaHepMnZb Kci9vlSf5Z2oqp3GGq6HYZw1h+nIiTg2STteCPKXFpIAMROFKVBt6Km4EpyhJEjo tK4MHpzOrepYmBVXgsC+t/1my8qIYGFZkaAqCRg9hEe8yJCOx3HwFwx6uMgTecom mb/UfNH/WPQnQ1uORCUfQb9GDVTTiNaPsDiomI25JJslDtf1YxmVJ8FtVjd4cB/y oD3CxvtgIk2Wb78ZI3Kt/NyrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGAhn7zZa qmroJnKtXIGoxtbNHdYwHwYDVR0jBBgwFoAUSTl+M7McCo9o/NIHK9qazLZdAuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2Lzg2NDdFNDFFQUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1RsLU03TWNDbzlvX05JSEs5cWF6TFpkQXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84NjQ3RTQxRUFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9GNkJEQkJFMkFD NjQxMUVGODVFNDcwN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJJ0+TANBgkqhkiG9w0BAQsFAAOCAQEAuaC8BYJ4E499kNHE YQTe2Iig66j76jsn25DNcF14H9Pt2Hv0q5kp+WUV6fzn2ypXyiYT8rI111OdTsGB l/ALK85pztOLCHkKLCwur9Z2f70jvhk/WTMmz9MsqPMU66IyiuLJypVNWrOZRr8N y98023v/Lx/U6m49OUlKkZ/NBi6tt/Ea5pr6sWwV6341w7pAHmGDgHOgHi4i02qZ v7CCEyf4/9qrWCgg27q4hfBdC0zGOhL/uruUU7tuGhA09s6TLrUVORv0wbEIz1vV eym4m9029IWqsMiYvoITZpuRQIh4IdmC9D2CWNalsHlyUJRlJJLGmB3uBkXzspiQ y0m5wQ== -----END CERTIFICATE-----Generated at Wed Feb 5 16:06:52 2025 by rpki-client