$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa File: B0D1C39A182511EABDE3E142C4F9AE02.roa (raw, json) Hash identifier: h6LaGc6kyZukCUqqYzIxqwzDNG7IrAkyoRHl1/dzGpU= Subject key identifier: 63:36:98:61:4A:A1:4E:72:7A:79:30:3C:E9:F1:F8:D0:18:C6:8C:20 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2A6E Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa Signing time: Fri 24 Jan 2025 16:02:10 +0000 ROA not before: Fri 24 Jan 2025 16:02:10 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17885 IP address blocks: 140.213.54.0/24 maxlen: 24 140.213.93.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10862 (0x2a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Jan 24 16:02:10 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6793b982-6473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:ed:63:8e:b9:8c:13:e5:78:1f:8f:57:5f: 9b:69:e4:cd:16:4b:49:2b:e2:9a:8f:17:0a:7e:f0: 3c:99:f9:50:35:37:7a:37:8d:1b:da:e8:f5:7d:c2: 42:f7:70:73:26:3d:ab:21:9c:e5:05:2a:54:c8:58: b6:4f:c9:0e:2f:88:fa:d8:e2:35:60:e2:51:87:82: b2:ae:da:63:79:0a:02:b8:42:08:f7:69:23:de:c9: 6e:fa:57:8b:3f:d9:fd:ea:4f:e0:d4:1f:36:bb:db: fd:a3:a9:8b:f4:66:fa:16:cd:b5:a1:8e:42:43:65: df:c0:57:1c:c3:07:1a:d8:33:80:72:18:e6:70:37: 45:5f:ff:b7:16:23:a2:e7:15:a7:d0:08:52:37:5f: f2:de:87:2e:e5:a2:6b:24:6e:38:ba:b8:4a:35:98: 65:d5:9e:d6:ac:4d:01:36:a1:02:8a:5e:c8:02:d7: f0:ce:87:87:c8:89:37:aa:8a:e6:c0:2a:29:07:83: 1c:42:26:73:d0:6a:55:63:76:32:1b:fe:8c:fe:3c: 6e:64:7e:8e:dd:04:c1:88:54:4b:b7:db:22:25:5e: 72:74:eb:ef:95:cb:da:a5:23:fd:4e:ad:0f:da:82: 36:36:ff:9c:8a:ba:a3:dd:10:4d:b6:9d:50:a8:c0: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:36:98:61:4A:A1:4E:72:7A:79:30:3C:E9:F1:F8:D0:18:C6:8C:20 X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.213.54.0/24 140.213.93.0/24 140.213.95.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:e9:43:74:57:9c:38:91:56:a7:26:b8:65:cf:93:4a:02:e0: d3:28:48:9e:ed:36:12:91:d0:ad:50:1a:ef:c7:a7:28:ad:2e: e7:3a:ff:f2:04:06:be:4b:80:c5:82:18:2c:6d:94:68:12:0e: 56:6e:4a:ec:bb:20:f3:66:3f:a8:f8:2c:c1:7f:08:08:8c:ae: 62:61:2c:04:9f:1c:17:b2:57:b5:48:46:4c:22:f3:9c:ef:f5: 9d:1c:99:91:89:e7:cd:c8:d3:17:d4:f2:0e:bb:30:bf:39:c8: 4e:90:12:c8:d3:50:39:f3:d4:fc:9e:7b:bf:30:27:39:43:d8: 2f:8e:4d:27:64:e4:f0:d1:42:55:86:a9:97:28:62:48:61:cf: 9c:12:40:07:84:57:8d:89:db:8a:71:0f:bc:bf:9a:81:d9:7f: 38:00:8d:3a:0d:c1:ef:1a:c8:87:e5:b2:45:02:58:f5:9d:96: a6:68:e0:31:25:ce:bf:87:be:a9:bd:af:67:bf:69:88:9d:bc: 37:d1:c5:37:bf:b3:d8:7b:c9:48:2e:79:a2:8c:46:93:61:df: 63:59:9d:bb:a9:76:78:1a:7a:73:17:77:85:b7:0b:c1:c5:3d: fb:fd:7f:09:06:b6:01:f6:80:02:dc:c1:67:e2:58:c7:59:02: c0:f5:1d:23 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICKm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjUwMTI0MTYwMjEwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzYjk4Mi02NDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZvtY465jBPleB+PV1+baeTNFktJK+KajxcKfvA8mflQNTd6N40b2uj1fcJC 93BzJj2rIZzlBSpUyFi2T8kOL4j62OI1YOJRh4KyrtpjeQoCuEII92kj3slu+leL P9n96k/g1B82u9v9o6mL9Gb6Fs21oY5CQ2XfwFccwwca2DOAchjmcDdFX/+3FiOi 5xWn0AhSN1/y3ocu5aJrJG44urhKNZhl1Z7WrE0BNqECil7IAtfwzoeHyIk3qorm wCopB4McQiZz0GpVY3YyG/6M/jxuZH6O3QTBiFRLt9siJV5ydOvvlcvapSP9Tq0P 2oI2Nv+cirqj3RBNtp1QqMAMhQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGM2mGFK oU5yenkwPOnx+NAYxowgMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQjBEMUMzOUEx ODI1MTFFQUJERTNFMTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBACM1TYDBACM1V0DBACM1V8wDQYJKoZIhvcNAQELBQADggEB AG3pQ3RXnDiRVqcmuGXPk0oC4NMoSJ7tNhKR0K1QGu/HpyitLuc6//IEBr5LgMWC GCxtlGgSDlZuSuy7IPNmP6j4LMF/CAiMrmJhLASfHBeyV7VIRkwi85zv9Z0cmZGJ 583I0xfU8g67ML85yE6QEsjTUDnz1Pyee78wJzlD2C+OTSdk5PDRQlWGqZcoYkhh z5wSQAeEV42J24pxD7y/moHZfzgAjToNwe8ayIflskUCWPWdlqZo4DElzr+Hvqm9 r2e/aYidvDfRxTe/s9h7yUgueaKMRpNh32NZnbupdngaenMXd4W3C8HFPfv9fwkG tgH2gALcwWfiWMdZAsD1HSM= -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:26 2025 by rpki-client on console.sobornost.net