$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa File: AB501A702CDE11EFBC062E74C4F9AE02.roa (raw, json) Hash identifier: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY= Subject key identifier: 17:AA:ED:07:80:A5:FD:7F:C5:E7:B9:8C:C3:04:5F:4C:51:8F:C8:BD Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30 Certificate serial: D7 Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa Signing time: Sat 25 Jan 2025 04:07:57 +0000 ROA not before: Sat 25 Jan 2025 04:07:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 212238 IP address blocks: 36.50.238.0/24 maxlen: 24 36.50.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912559E Validity Not Before: Jan 25 04:07:57 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6794639c-533f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:8e:6d:90:fb:2f:92:e5:2e:21:77:e9:03:a7: be:0a:7f:b2:2e:73:91:1b:4d:59:d1:12:05:ad:a7: 05:3c:41:6c:61:25:a5:2f:9e:84:9f:14:60:d7:a0: 51:19:0f:88:c8:a7:a9:59:af:cb:dc:af:ef:1b:f8: 39:35:1b:88:c7:e6:f4:3b:1b:59:5b:30:46:90:6b: a7:3c:e9:f8:d4:21:13:d5:ca:75:4b:95:19:da:bf: 22:9b:5c:7d:56:ce:88:ca:f0:c3:cd:2b:c4:e6:9a: 4e:7f:f1:a7:72:62:55:16:c3:d4:26:91:12:66:8a: 1e:d2:fb:fc:ca:b1:49:e1:65:ff:e2:41:ca:4d:24: 32:50:7b:5d:6a:b0:8d:61:76:49:da:94:1d:af:ed: 8f:a3:78:9e:fe:30:09:53:04:e6:4d:ec:63:3f:f7: b3:b4:1f:71:1d:f8:2e:a5:f8:f1:2d:f2:f3:ce:16: 10:19:64:76:48:51:28:86:d5:e3:90:5d:f9:4f:87: fd:45:6e:50:6c:1f:c1:db:fe:70:de:fd:36:1b:90: c0:b8:d7:bd:80:1e:01:59:d8:31:20:8a:58:21:c1: 68:03:c8:00:60:c3:49:64:0e:c8:44:05:11:13:0d: af:8c:4f:84:c9:18:f8:6a:fe:0a:03:37:e3:ec:ef: 05:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AA:ED:07:80:A5:FD:7F:C5:E7:B9:8C:C3:04:5F:4C:51:8F:C8:BD X509v3 Authority Key Identifier: keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/AB501A702CDE11EFBC062E74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.238.0/23 Signature Algorithm: sha256WithRSAEncryption 72:c3:b1:5d:8f:fd:c8:93:8d:b1:a0:a6:87:cb:a7:55:6f:c9: 7e:ed:ca:40:11:e7:0d:46:69:d7:bb:f8:c6:7c:92:b4:03:b7: 82:34:92:23:13:5c:bc:3b:d9:09:23:8f:fa:bb:8f:0d:61:c4: 78:a9:8c:89:d6:eb:16:1f:c7:bd:4b:1f:15:bb:c7:42:7a:fb: b3:d2:16:f9:d1:b2:4f:cb:32:f8:1d:60:7d:2d:64:40:5b:98: 57:d0:4f:f2:93:fc:8c:a5:73:b5:61:c0:fc:ac:53:8b:d3:54: af:bb:a5:49:66:a4:ed:61:9d:22:25:81:1e:6a:d7:f0:14:72: 5a:cc:d7:71:f0:35:40:8a:da:cf:85:e7:a1:6b:af:f4:66:96: 43:3b:73:c5:04:c9:58:c8:6c:5a:a6:b8:9a:57:aa:15:58:ad: 99:38:65:6c:d4:df:7f:bf:6b:55:bf:0a:c7:6e:a6:25:64:09: 4f:44:ea:a0:1d:1d:8d:5a:a6:31:73:93:6a:ba:60:3c:bd:92: 2a:d6:85:03:dd:cb:66:ad:7b:07:3b:f3:f8:bc:3f:09:56:fa: 33:31:c0:dd:b3:54:5f:ec:42:c4:b1:79:03:4e:03:ef:66:e4: 74:d7:9b:74:73:e1:f8:41:cc:a3:4b:69:67:95:e0:3f:62:97: d8:c1:b6:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OUUxMTAvBgNVBAUTKDA5NDA3RjcwRjk3NzE2MDBGNEZCQUE3NUMwRkU5Njkw RDhDNjVBMzAwHhcNMjUwMTI1MDQwNzU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk0NjM5Yy01MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/45tkPsvkuUuIXfpA6e+Cn+yLnORG01Z0RIFracFPEFsYSWlL56EnxRg16BR GQ+IyKepWa/L3K/vG/g5NRuIx+b0OxtZWzBGkGunPOn41CET1cp1S5UZ2r8im1x9 Vs6IyvDDzSvE5ppOf/GncmJVFsPUJpESZooe0vv8yrFJ4WX/4kHKTSQyUHtdarCN YXZJ2pQdr+2Po3ie/jAJUwTmTexjP/eztB9xHfgupfjxLfLzzhYQGWR2SFEohtXj kF35T4f9RW5QbB/B2/5w3v02G5DAuNe9gB4BWdgxIIpYIcFoA8gAYMNJZA7IRAUR Ew2vjE+EyRj4av4KAzfj7O8FywIDAQABo4IClTCCApEwHQYDVR0OBBYEFBeq7QeA pf1/xee5jMMEX0xRj8i9MB8GA1UdIwQYMBaAFAlAf3D5dxYA9PuqdcD+lpDYxlow MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5RS8zNTBBRkVCRUE0 NzMxMUVFQkRGQkI3NTlDNEY5QUUwMi9DVUJfY1BsM0ZnRDAtNnAxd1A2V2tOakdX akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVQl9jUGwzRmdEMC02cDF3UDZXa05qR1dqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU1OUUvMzUwQUZFQkVBNDczMTFFRUJERkJCNzU5QzRGOUFFMDIvQUI1MDFBNzAy Q0RFMTFFRkJDMDYyRTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEkMu4wDQYJKoZIhvcNAQELBQADggEBAHLDsV2P/ciTjbGg pofLp1VvyX7tykAR5w1Gade7+MZ8krQDt4I0kiMTXLw72Qkjj/q7jw1hxHipjInW 6xYfx71LHxW7x0J6+7PSFvnRsk/LMvgdYH0tZEBbmFfQT/KT/Iylc7VhwPysU4vT VK+7pUlmpO1hnSIlgR5q1/AUclrM13HwNUCK2s+F56Frr/RmlkM7c8UEyVjIbFqm uJpXqhVYrZk4ZWzU33+/a1W/CsdupiVkCU9E6qAdHY1apjFzk2q6YDy9kirWhQPd y2atewc78/i8PwlW+jMxwN2zVF/sQsSxeQNOA+9m5HTXm3Rz4fhBzKNLaWeV4D9i l9jBtmI= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:39 2025 by rpki-client