$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa File: 3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa (raw, json) Hash identifier: 6Sq9SvcA7Ko4uHqBJaPg4mhC8hCWFMTiL0m1v1oh8PE= Subject key identifier: 62:2D:1F:6C:C9:FD:32:BA:7E:3A:9A:A4:9B:00:68:ED:A7:1B:75:0E Certificate issuer: /CN=A917447B0000/serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307 Certificate serial: 70B5EA56B2E9AD468E18479A8C85B05DF9B1FAF6 Authority key identifier: BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa Signing time: Fri 18 Apr 2025 11:18:27 +0000 ROA not before: Fri 18 Apr 2025 11:13:27 +0000 ROA not after: Fri 17 Apr 2026 11:18:27 +0000 asID: 153346 IP address blocks: 160.187.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b5:ea:56:b2:e9:ad:46:8e:18:47:9a:8c:85:b0:5d:f9:b1:fa:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=BD435E3ED6FEEC26F879A0542F609A272CC71307 Validity Not Before: Apr 18 11:13:27 2025 GMT Not After : Apr 17 11:18:27 2026 GMT Subject: CN=622D1F6CC9FD32BA7E3A9AA49B0068EDA71B750E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:f8:29:30:89:11:f7:d4:a0:3c:04:be:3c: 0e:6f:0c:36:fc:b5:72:e3:10:92:1f:b6:9d:8a:4a: c4:a4:56:dc:f1:73:be:93:8e:de:6a:e8:d5:0b:f1: b7:59:7f:12:3c:1b:af:3e:3b:d2:85:1a:71:3b:a3: 3e:cf:ee:eb:02:9d:c8:78:16:d4:40:ea:09:d2:cd: 0d:8c:b6:70:1d:1d:58:49:70:b7:4d:a5:34:06:a0: ed:c9:88:db:4e:ee:91:4d:f8:e5:66:b4:81:f3:9d: eb:84:c3:0f:4c:c8:c0:a7:f8:19:bd:2d:0c:45:6c: 17:ab:ad:07:a3:55:de:9b:bd:a9:6c:7c:d9:b0:fe: 2a:40:80:d7:e3:59:46:96:4e:e8:8b:b2:be:48:b8: 42:15:5c:96:32:b4:b9:73:8f:c5:c0:a4:1c:fb:ce: a6:73:de:ca:18:44:ff:6c:6a:37:df:6d:b3:3a:d4: 46:53:49:b6:73:88:a7:04:42:32:c3:40:80:a3:c5: 9c:a0:b7:74:bc:0a:cc:cc:04:be:25:5c:cf:18:88: 46:fa:39:f7:a5:ac:07:2a:c5:eb:20:12:14:fb:ab: 27:a0:5f:06:54:f2:08:b0:e5:c3:8d:80:71:17:ff: 83:65:20:0d:0f:8b:dc:aa:cc:8f:77:86:6b:c1:e8: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:1F:6C:C9:FD:32:BA:7E:3A:9A:A4:9B:00:68:ED:A7:1B:75:0E X509v3 Authority Key Identifier: keyid:BD:43:5E:3E:D6:FE:EC:26:F8:79:A0:54:2F:60:9A:27:2C:C7:13:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/BD435E3ED6FEEC26F879A0542F609A272CC71307.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vUNePtb-7Cb4eaBUL2CaJyzHEwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/0/3136302e3138372e3132342e302f32332d3234203d3e20313533333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.124.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:90:e2:6e:31:9c:4e:1d:9f:b7:7b:70:ae:81:0a:5a:68:13: 39:30:aa:10:26:d0:98:3e:47:af:09:ed:bf:df:d3:24:ec:1d: 9e:ea:31:4d:13:9e:45:b9:75:e0:38:24:ac:b4:c1:f6:a3:d4: ed:a3:5b:de:3b:78:2c:f8:c4:d4:98:e8:fd:e9:75:b9:85:93: 3f:85:b1:5e:e8:db:96:9c:e2:d2:9b:92:0a:93:31:f0:ec:9f: 18:c0:d8:ae:1d:ab:7d:c6:81:ec:7c:17:57:9a:c4:aa:16:8b: 03:40:76:12:b3:ac:bd:14:36:3d:63:e8:48:e3:56:a6:3f:9a: aa:b3:45:5a:b7:09:ae:85:46:9e:36:a5:df:84:20:9e:19:f8: 8b:2f:ee:74:03:3e:ae:27:ad:0b:39:36:55:65:ce:65:35:37: 6b:53:40:b4:ac:91:13:5a:38:4d:24:1d:09:44:f2:60:a2:4c: dd:f4:d2:82:02:dd:d9:94:d3:8b:ab:24:1c:e2:af:61:1d:2b: c3:51:d2:95:af:92:bd:a4:be:02:89:bd:9a:b1:3b:3a:5b:77: f1:23:33:1b:1a:a2:39:5e:b6:32:cd:86:a0:ec:b8:d4:49:2c: dd:ee:50:5d:45:c1:86:2c:31:e1:e0:6b:f3:ae:c1:33:2f:c4: de:08:6a:7a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUcLXqVrLprUaOGEeajIWwXfmx+vYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEyhCRDQzNUUzRUQ2 RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3MB4XDTI1MDQxODExMTMyN1oX DTI2MDQxNzExMTgyN1owMzExMC8GA1UEAxMoNjIyRDFGNkNDOUZEMzJCQTdFM0E5 QUE0OUIwMDY4RURBNzFCNzUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbH+CkwiRH31KA8BL48Dm8MNvy1cuMQkh+2nYpKxKRW3PFzvpOO3mro1Qvx t1l/Ejwbrz470oUacTujPs/u6wKdyHgW1EDqCdLNDYy2cB0dWElwt02lNAag7cmI 207ukU345Wa0gfOd64TDD0zIwKf4Gb0tDEVsF6utB6NV3pu9qWx82bD+KkCA1+NZ RpZO6Iuyvki4QhVcljK0uXOPxcCkHPvOpnPeyhhE/2xqN99tszrURlNJtnOIpwRC MsNAgKPFnKC3dLwKzMwEviVczxiIRvo596WsByrF6yASFPurJ6BfBlTyCLDlw42A cRf/g2UgDQ+L3KrMj3eGa8HoT2cCAwEAAaOCAhcwggITMB0GA1UdDgQWBBRiLR9s yf0yun46mqSbAGjtpxt1DjAfBgNVHSMEGDAWgBS9Q14+1v7sJvh5oFQvYJonLMcT BzAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMC9CRDQzNUUz RUQ2RkVFQzI2Rjg3OUEwNTQyRjYwOUEyNzJDQzcxMzA3LmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi92VU5lUHRiLTdD YjRlYUJVTDJDYUp5ekhFd2MuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3 NDQ3QjAwMDAvMC8zMTM2MzAyZTMxMzgzNzJlMzEzMjM0MmUzMDJmMzIzMzJkMzIz NDIwM2QzZTIwMzEzNTMzMzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoLt8MA0GCSqGSIb3DQEB CwUAA4IBAQBdkOJuMZxOHZ+3e3CugQpaaBM5MKoQJtCYPkevCe2/39Mk7B2e6jFN E55FuXXgOCSstMH2o9Tto1veO3gs+MTUmOj96XW5hZM/hbFe6NuWnOLSm5IKkzHw 7J8YwNiuHat9xoHsfBdXmsSqFosDQHYSs6y9FDY9Y+hI41amP5qqs0VatwmuhUae NqXfhCCeGfiLL+50Az6uJ60LOTZVZc5lNTdrU0C0rJETWjhNJB0JRPJgokzd9NKC At3ZlNOLqyQc4q9hHSvDUdKVr5K9pL4Cib2asTs6W3fxIzMbGqI5XrYyzYag7LjU SSzd7lBdRcGGLDHh4GvzrsEzL8TeCGp6 -----END CERTIFICATE-----Generated at Mon Apr 28 08:31:16 2025 by rpki-client on console.sobornost.net