$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa File: B77A93FE852411EFA67F8144C4F9AE02.roa (raw, json) Hash identifier: card7JNSXN/xmFN4DueLt9CEoLfIixAjl6O1VFSsoLU= Subject key identifier: 04:BB:FC:D7:ED:1B:4E:6B:1A:E2:6E:FE:C4:50:BD:83:24:5E:FC:CF Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 251D Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa Signing time: Tue 11 Feb 2025 08:07:13 +0000 ROA not before: Tue 11 Feb 2025 08:07:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 45458 IP address blocks: 147.50.33.0/24 maxlen: 24 147.50.63.0/24 maxlen: 24 147.50.79.0/24 maxlen: 24 147.50.80.0/20 maxlen: 24 147.50.96.0/20 maxlen: 24 147.50.112.0/21 maxlen: 21 147.50.117.0/24 maxlen: 24 147.50.119.0/24 maxlen: 24 147.50.120.0/22 maxlen: 24 147.50.125.0/24 maxlen: 24 147.50.126.0/23 maxlen: 24 147.50.192.0/19 maxlen: 19 147.50.192.0/24 maxlen: 24 147.50.193.0/24 maxlen: 24 147.50.195.0/24 maxlen: 24 147.50.201.0/24 maxlen: 24 147.50.202.0/24 maxlen: 24 147.50.203.0/24 maxlen: 24 147.50.208.0/20 maxlen: 24 184.82.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9501 (0x251d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Feb 11 08:07:13 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67ab0531-5323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:5f:81:7d:fd:17:76:f3:94:6b:7d:57:f0: 95:43:02:4c:47:75:10:1b:ce:d8:45:69:a3:99:05: a7:64:f6:96:6c:35:85:0f:e7:43:d6:74:f2:e1:09: a8:ac:fd:74:83:ce:5f:5c:af:54:a7:83:f7:ae:61: 6a:bd:68:64:67:c3:15:65:72:a6:8e:45:f6:1c:97: 34:8a:0f:f9:ff:9e:50:06:20:64:c3:04:c2:56:23: 5c:97:31:f0:3e:81:38:88:2c:65:84:10:c5:e5:ce: 7a:de:34:16:e6:a4:40:c0:aa:ef:93:b0:aa:7f:04: bd:c2:1a:d0:79:ab:49:8d:21:da:4b:9b:c9:98:e2: a2:e0:d5:21:f1:c8:62:58:c8:80:88:40:65:94:d1: d0:08:32:41:ed:e2:58:2a:d5:b0:c6:fe:13:41:b4: 19:03:0f:8c:31:db:d9:55:95:a1:52:30:15:7e:b7: be:b5:f1:23:f4:56:9d:19:95:99:f2:fc:fa:f4:c8: aa:27:2a:3f:81:d5:62:01:81:5a:a0:f0:d7:4f:88: c8:0d:2f:95:b2:cf:04:4c:18:79:0d:da:ae:a7:c9: d4:57:20:9f:69:84:ba:49:43:02:fe:53:dd:99:2b: a7:30:f6:dc:15:f7:23:75:77:fa:75:a8:52:48:73: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:FC:D7:ED:1B:4E:6B:1A:E2:6E:FE:C4:50:BD:83:24:5E:FC:CF X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.50.33.0/24 147.50.63.0/24 147.50.79.0-147.50.123.255 147.50.125.0-147.50.127.255 147.50.192.0/19 184.82.128.0/21 Signature Algorithm: sha256WithRSAEncryption 83:f4:02:95:0a:81:6b:88:bd:d3:aa:02:c1:27:0f:2b:a0:18: 72:eb:98:1e:c7:9d:ba:c8:60:f3:ee:3e:2c:46:e4:89:56:9c: 79:2a:b2:c9:b1:96:41:d2:f9:79:63:bd:78:3c:73:f5:43:87: 84:0a:1a:e4:5f:a9:d9:96:e0:45:6b:89:fb:b4:e4:4d:d9:7a: 79:ba:1a:21:88:fc:89:b2:89:0f:06:8f:49:e0:d6:ae:86:33: d6:5b:ac:d5:5d:ed:55:01:de:10:11:12:3c:f4:c6:04:18:27: 1e:1a:e0:71:35:65:39:1d:2a:26:60:c1:b2:2d:67:09:04:57: 9d:9d:3e:19:07:c6:fe:fb:18:2f:a5:3a:0b:26:71:eb:02:d0: 3e:ba:7a:15:04:5d:c5:be:cf:11:b5:dd:25:d4:af:ef:4b:1f: 12:7d:f5:91:d5:65:0a:d1:44:6b:0f:9f:a7:bb:2c:57:e2:37: f3:6f:05:c2:0c:a2:7f:81:e0:c1:d6:e4:b2:2a:c6:88:2d:d8: 07:57:e6:20:ef:73:64:5e:a1:6b:76:ca:ab:8e:31:f8:69:e5: 38:c8:1e:d0:25:70:69:58:88:a0:f8:0a:3f:88:bc:83:57:f7: fe:be:a1:73:48:f9:b5:7a:ea:b3:19:bc:fe:62:fe:d5:01:e6: 3f:ef:74:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICJR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjUwMjExMDgwNzEzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FiMDUzMS01MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup5fgX39F3bzlGt9V/CVQwJMR3UQG87YRWmjmQWnZPaWbDWFD+dD1nTy4Qmo rP10g85fXK9Up4P3rmFqvWhkZ8MVZXKmjkX2HJc0ig/5/55QBiBkwwTCViNclzHw PoE4iCxlhBDF5c563jQW5qRAwKrvk7CqfwS9whrQeatJjSHaS5vJmOKi4NUh8chi WMiAiEBllNHQCDJB7eJYKtWwxv4TQbQZAw+MMdvZVZWhUjAVfre+tfEj9FadGZWZ 8vz69MiqJyo/gdViAYFaoPDXT4jIDS+Vss8ETBh5Ddqup8nUVyCfaYS6SUMC/lPd mSunMPbcFfcjdXf6dahSSHPB/QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFAS7/Nft G05rGuJu/sRQvYMkXvzPMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvQjc3QTkzRkU4 NTI0MTFFRkE2N0Y4MTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgABMDQDBACTMiEDBACTMj8wDAMEAJMyTwMEApMyeDAMAwQAkzJ9AwQH kzIAAwQFkzLAAwQDuFKAMA0GCSqGSIb3DQEBCwUAA4IBAQCD9AKVCoFriL3TqgLB Jw8roBhy65gex526yGDz7j4sRuSJVpx5KrLJsZZB0vl5Y714PHP1Q4eEChrkX6nZ luBFa4n7tORN2Xp5uhohiPyJsokPBo9J4NauhjPWW6zVXe1VAd4QERI89MYEGCce GuBxNWU5HSomYMGyLWcJBFednT4ZB8b++xgvpToLJnHrAtA+unoVBF3Fvs8Rtd0l 1K/vSx8SffWR1WUK0URrD5+nuyxX4jfzbwXCDKJ/geDB1uSyKsaILdgHV+Yg73Nk XqFrdsqrjjH4aeU4yB7QJXBpWIig+Ao/iLyDV/f+vqFzSPm1euqzGbz+Yv7VAeY/ 73TJ -----END CERTIFICATE-----Generated at Wed Apr 9 22:48:31 2025 by rpki-client