$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/BFA5084C8E9011EEAD56911CC4F9AE02.roa File: BFA5084C8E9011EEAD56911CC4F9AE02.roa (raw, json) Hash identifier: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8= Subject key identifier: B8:ED:E4:A4:DB:B4:B9:CA:D9:93:DF:71:15:8A:90:35:B8:5E:77:C4 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: E4 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/BFA5084C8E9011EEAD56911CC4F9AE02.roa Signing time: Mon 27 Jan 2025 03:56:11 +0000 ROA not before: Mon 27 Jan 2025 03:56:11 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139901 IP address blocks: 36.50.10.0/23 maxlen: 23 36.50.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2 Validity Not Before: Jan 27 03:56:11 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=679703da-3054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:dd:1e:67:68:11:09:ce:8a:de:51:8e:5f: 28:d3:7a:46:e6:f3:ac:c6:e7:53:69:1d:f5:eb:40: 77:e5:fd:cb:d6:8b:54:ab:cf:b2:8c:44:1e:02:94: 1d:4d:42:1e:54:f0:ca:72:79:92:36:67:e8:1b:82: 4f:34:5a:93:b6:3e:c2:fc:24:b4:92:8c:20:7a:fc: 28:12:2d:76:77:c6:fe:31:61:8b:78:88:9e:01:33: 49:7a:cb:a5:34:3a:bf:0d:72:08:63:16:24:20:9b: aa:f7:f0:51:a2:69:05:25:e0:71:34:6a:ba:b9:6b: a1:d4:f2:1f:d2:4d:aa:e0:f7:38:76:de:40:b1:f7: c1:04:69:34:34:f9:e7:c1:3d:c1:e8:e2:82:79:bd: 50:91:08:45:fb:f6:c7:0d:3d:ab:19:bd:d4:e5:89: 8e:71:d6:b3:43:ca:ee:cf:cf:a2:86:15:93:98:59: 08:4e:a7:80:5b:a1:18:fe:a9:81:ee:3e:0d:57:19: 12:a9:a1:e5:e5:13:c9:73:2f:11:44:22:02:34:c7: 7d:04:b5:c7:c5:7a:a4:46:71:77:26:79:94:bf:55: fa:3f:de:d8:f6:0f:0c:8d:49:c8:70:b0:2d:80:2a: d9:43:94:bf:18:a1:5e:00:bf:22:f6:2d:32:85:36: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:ED:E4:A4:DB:B4:B9:CA:D9:93:DF:71:15:8A:90:35:B8:5E:77:C4 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/BFA5084C8E9011EEAD56911CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.10.0/23 Signature Algorithm: sha256WithRSAEncryption b3:fa:c3:05:ab:1d:a2:d0:f4:44:38:bc:5c:d5:44:89:a3:9e: cd:ad:e7:ce:73:de:d7:27:43:b2:88:69:e7:41:49:90:e9:66: 1a:63:1e:c4:74:f8:f7:59:2e:48:50:62:10:b9:c0:a9:df:44: 2a:71:0b:84:18:95:7c:93:b6:51:fa:d1:10:c1:2e:43:d4:01: 88:a3:5a:4c:7c:65:ec:99:26:e4:80:41:28:d3:25:b1:0c:44: df:0f:a1:9b:08:87:2e:c7:0c:98:c0:ec:d1:7b:1b:c0:9c:1f: 7f:7f:1f:dd:c1:0d:55:62:8f:2d:99:bd:e2:1b:d2:80:95:77: e9:64:b1:a6:bd:36:05:44:7a:c5:25:b9:b1:f2:08:56:2e:27: ef:cf:99:31:e3:c9:94:6b:85:aa:13:13:5c:e5:08:33:81:72: 64:cf:91:5f:b2:bb:14:fa:7a:55:ae:98:3e:89:27:05:c8:c3: 65:ed:0e:ee:4b:82:41:c2:06:cc:17:96:5b:a0:0a:ff:c2:33: 93:1f:c4:40:be:97:44:9f:65:1b:96:23:98:8f:dc:48:bd:2a: 97:e7:73:cf:29:ed:8c:22:5c:ba:7d:5f:2c:ab:5c:25:71:ca: 4e:53:35:6a:44:40:9a:e7:28:59:29:99:36:6c:27:7a:5e:6e: a8:da:a0:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwMTI3MDM1NjExWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk3MDNkYS0zMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpDdHmdoEQnOit5Rjl8o03pG5vOsxudTaR3160B35f3L1otUq8+yjEQeApQd TUIeVPDKcnmSNmfoG4JPNFqTtj7C/CS0kowgevwoEi12d8b+MWGLeIieATNJesul NDq/DXIIYxYkIJuq9/BRomkFJeBxNGq6uWuh1PIf0k2q4Pc4dt5AsffBBGk0NPnn wT3B6OKCeb1QkQhF+/bHDT2rGb3U5YmOcdazQ8ruz8+ihhWTmFkITqeAW6EY/qmB 7j4NVxkSqaHl5RPJcy8RRCICNMd9BLXHxXqkRnF3JnmUv1X6P97Y9g8MjUnIcLAt gCrZQ5S/GKFeAL8i9i0yhTaEowIDAQABo4IClTCCApEwHQYDVR0OBBYEFLjt5KTb tLnK2ZPfcRWKkDW4XnfEMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE3QzIvN0FCODUwODg4RTg5MTFFRUE2QTVFMzU3QzRGOUFFMDIvQkZBNTA4NEM4 RTkwMTFFRUFENTY5MTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEkMgowDQYJKoZIhvcNAQELBQADggEBALP6wwWrHaLQ9EQ4 vFzVRImjns2t585z3tcnQ7KIaedBSZDpZhpjHsR0+PdZLkhQYhC5wKnfRCpxC4QY lXyTtlH60RDBLkPUAYijWkx8ZeyZJuSAQSjTJbEMRN8PoZsIhy7HDJjA7NF7G8Cc H39/H93BDVVijy2ZveIb0oCVd+lksaa9NgVEesUlubHyCFYuJ+/PmTHjyZRrhaoT E1zlCDOBcmTPkV+yuxT6elWumD6JJwXIw2XtDu5LgkHCBswXllugCv/CM5MfxEC+ l0SfZRuWI5iP3Ei9Kpfnc88p7YwiXLp9XyyrXCVxyk5TNWpEQJrnKFkpmTZsJ3pe bqjaoP8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:28:56 2025 by rpki-client