$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/CDF495A4E47D11EFAFC6496FC4F9AE02.roa File: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (raw, json) Hash identifier: 28Pcqodr/XiyCXR1rm1sG8vgE+8OCqXnMRTKbKZwlik= Subject key identifier: 89:FE:72:D9:FD:4E:B1:C0:99:8E:AC:50:11:4E:35:61:F4:05:87:4B Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 012C Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/CDF495A4E47D11EFAFC6496FC4F9AE02.roa Signing time: Thu 06 Feb 2025 11:30:45 +0000 ROA not before: Thu 06 Feb 2025 11:30:45 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38203 IP address blocks: 36.50.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07 Validity Not Before: Feb 6 11:30:45 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a49d65-5207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:94:73:9b:21:26:19:13:56:52:5a:d3:a5: 26:ca:d3:84:f2:43:81:c3:59:94:ec:24:95:66:bb: 81:d1:1c:8e:86:90:a3:e2:c5:ba:56:84:68:18:ee: 77:b1:87:6b:25:48:28:f8:67:6a:4b:07:2e:4d:2e: 36:56:92:d0:80:60:f8:19:b3:99:d0:d9:6f:9e:38: d5:73:2a:73:42:23:f6:74:60:e8:25:ff:d8:57:e8: c9:b9:c6:80:60:5f:6e:9b:eb:64:19:37:0b:00:63: 22:47:20:b5:99:35:b2:0f:6a:a8:e7:50:0d:96:c9: 52:3f:1f:a2:cc:2e:e5:2d:0a:c5:4f:45:88:db:bd: 97:f8:2c:1a:d8:e7:0d:4a:90:af:c6:f1:30:23:6d: cd:19:d5:17:e3:ce:af:b3:56:e6:c1:90:31:c0:55: 02:86:f4:62:80:16:b2:e0:b1:e0:78:22:41:a4:4d: 9a:8e:b3:b5:fb:00:75:74:a4:10:fb:bf:f5:20:7e: 96:56:19:3c:ff:ff:6f:f5:fd:53:05:14:9b:97:6c: 91:a3:21:0e:b0:73:97:59:8e:66:34:bf:ed:a2:ef: e5:3b:00:15:97:93:87:f4:cd:b0:3d:c7:04:24:35: 15:30:0a:a7:b1:82:1a:10:59:57:26:fb:61:03:b1: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:72:D9:FD:4E:B1:C0:99:8E:AC:50:11:4E:35:61:F4:05:87:4B X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/CDF495A4E47D11EFAFC6496FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:f3:13:60:ba:3f:13:03:08:e3:2f:b8:27:89:36:65:5d:c0: 0f:3d:1c:ef:8b:42:63:56:0d:c5:50:38:3a:ce:36:be:91:a2: 9e:11:44:3e:54:f0:83:e2:c4:5a:de:ce:24:09:b7:31:bc:82: 7e:8b:96:19:e1:62:72:6a:5c:a4:b5:e6:f7:65:19:a1:11:3d: 39:57:a7:c4:07:f9:af:ce:b1:16:21:a6:9b:0f:61:2a:67:94: 2d:2b:9b:b2:64:0e:8f:cf:f2:16:3f:05:4c:ca:19:9d:b8:6c: 5a:4f:95:60:6a:1f:57:3d:86:ff:1d:11:63:30:40:20:ae:4a: 67:1a:ff:45:86:ad:15:c0:3b:1d:87:20:8d:6f:73:b6:52:5d: dc:cb:47:bb:23:b7:1c:9d:f0:87:a5:31:fc:63:34:1b:55:fa: ed:0a:4f:dc:93:66:97:0d:2b:16:84:16:82:fb:e7:89:85:ce: 22:65:b9:d3:3f:84:60:02:73:93:cc:4d:06:09:70:d4:90:bc: 60:c9:d2:66:8b:af:97:5f:24:13:7b:c6:53:d8:55:08:ac:4d: 33:85:3a:f4:ae:94:e9:d2:66:63:21:22:9c:db:1c:9c:b5:8a: 5f:df:e4:5e:55:2b:83:b5:a4:4e:be:e6:90:0f:98:17:c8:30: ba:88:64:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjUwMjA2MTEzMDQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E0OWQ2NS01MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6aUc5shJhkTVlJa06UmytOE8kOBw1mU7CSVZruB0RyOhpCj4sW6VoRoGO53 sYdrJUgo+GdqSwcuTS42VpLQgGD4GbOZ0NlvnjjVcypzQiP2dGDoJf/YV+jJucaA YF9um+tkGTcLAGMiRyC1mTWyD2qo51ANlslSPx+izC7lLQrFT0WI272X+Cwa2OcN SpCvxvEwI23NGdUX486vs1bmwZAxwFUChvRigBay4LHgeCJBpE2ajrO1+wB1dKQQ +7/1IH6WVhk8//9v9f1TBRSbl2yRoyEOsHOXWY5mNL/tou/lOwAVl5OH9M2wPccE JDUVMAqnsYIaEFlXJvthA7FnbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIn+ctn9 TrHAmY6sUBFONWH0BYdLMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBEMDcvRDNFODg5RDQ4RTdGMTFFRThFOTdCNDg0QzRGOUFFMDIvQ0RGNDk1QTRF NDdEMTFFRkFGQzY0OTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAkMhIwDQYJKoZIhvcNAQELBQADggEBAG3zE2C6PxMDCOMv uCeJNmVdwA89HO+LQmNWDcVQODrONr6Rop4RRD5U8IPixFreziQJtzG8gn6Llhnh YnJqXKS15vdlGaERPTlXp8QH+a/OsRYhppsPYSpnlC0rm7JkDo/P8hY/BUzKGZ24 bFpPlWBqH1c9hv8dEWMwQCCuSmca/0WGrRXAOx2HII1vc7ZSXdzLR7sjtxyd8Iel MfxjNBtV+u0KT9yTZpcNKxaEFoL754mFziJludM/hGACc5PMTQYJcNSQvGDJ0maL r5dfJBN7xlPYVQisTTOFOvSulOnSZmMhIpzbHJy1il/f5F5VK4O1pE6+5pAPmBfI MLqIZDM= -----END CERTIFICATE-----Generated at Sat Apr 5 21:01:38 2025 by rpki-client