$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/3B83B2F4E30611EFA4B67C52C4F9AE02.roa File: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (raw, json) Hash identifier: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y= Subject key identifier: A6:41:39:76:FC:8E:23:D8:7F:C5:F2:C3:B1:02:F8:C5:7F:FE:50:FA Certificate issuer: /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Certificate serial: FA Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/3B83B2F4E30611EFA4B67C52C4F9AE02.roa Signing time: Wed 05 Feb 2025 04:08:27 +0000 ROA not before: Wed 05 Feb 2025 04:08:27 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152125 IP address blocks: 36.50.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8 Validity Not Before: Feb 5 04:08:27 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a2e43b-dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:5f:51:0a:4f:1a:2a:52:72:26:55:e2:88: 30:12:99:d6:0b:c2:07:70:3b:f4:6c:f9:32:5d:b3: 2d:77:59:d5:bc:66:e5:72:b4:3c:a4:42:11:1d:35: 62:f5:7d:83:b7:c4:93:e4:dd:51:4e:c7:51:01:85: bc:a5:bc:5e:ee:67:47:88:97:23:2a:1d:ba:32:77: a3:29:79:4c:5a:4d:9b:4b:26:11:43:68:ba:27:fa: 08:b8:fa:aa:eb:69:63:ae:e0:d0:f9:87:63:5c:e2: f3:45:de:98:13:e1:78:f0:36:92:29:f3:8f:bc:56: 42:d5:9d:12:28:56:04:75:26:ab:6f:44:87:c2:a7: 96:7b:64:ea:88:7f:28:49:36:f0:9b:a5:a8:7e:51: 49:b0:78:3e:42:a7:aa:6c:6f:cc:08:ee:00:74:48: 0b:df:88:51:d1:b4:d0:0c:b9:50:c9:f1:68:06:33: aa:8d:6e:36:4c:50:58:fc:cf:7e:87:f3:8f:2c:7a: c6:02:55:a2:98:07:a3:0e:4a:01:86:36:48:bb:7f: 6b:16:1a:2c:8b:2f:0e:28:cc:33:f2:5e:98:a4:07: 33:b0:68:c2:66:80:41:00:b1:8d:22:46:48:ff:a0: 38:e4:93:7c:60:ff:2d:59:d7:41:c6:10:5c:1d:45: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:41:39:76:FC:8E:23:D8:7F:C5:F2:C3:B1:02:F8:C5:7F:FE:50:FA X509v3 Authority Key Identifier: keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/3B83B2F4E30611EFA4B67C52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.31.0/24 Signature Algorithm: sha256WithRSAEncryption 88:31:29:a0:78:5b:ec:5d:29:1b:2c:86:0a:96:cb:d6:db:f6: ec:1f:f2:9b:d6:ec:f1:b4:ec:c8:d5:27:c1:d2:40:53:c9:cf: c9:78:1f:d6:93:66:10:40:70:49:2e:a8:be:e9:3b:04:26:1e: 72:6c:3d:97:57:51:15:a8:92:46:66:55:54:60:7f:f1:2f:b4: 9e:9b:8f:0e:5d:ac:98:04:0a:7f:ea:e6:d6:b4:9e:2a:f1:3c: 53:c5:e7:00:e0:d4:c0:71:77:12:17:36:41:db:cb:5c:e0:00: bd:24:25:19:42:a7:2e:9d:e6:d2:9a:71:23:00:22:c9:b5:41: f9:3c:21:81:25:59:05:54:7e:9a:29:58:d2:15:16:7f:bf:e2: 40:1e:12:ab:46:6f:e2:3d:7c:b2:63:11:09:64:f6:56:20:ce: 59:89:ff:db:08:f7:38:32:b5:79:0a:e9:39:00:9a:b2:e1:bd: 1e:4d:e0:31:b5:1b:1b:62:c3:71:f5:22:ec:c4:be:90:b7:63: c9:35:31:77:43:51:0e:07:92:fa:d1:d2:7d:b3:e6:4a:41:98: 42:14:af:19:d0:cc:a4:74:8b:3b:86:7f:1a:32:12:ec:d2:39: 6e:e2:87:93:58:fb:02:61:c6:17:1f:f8:ba:ff:75:c6:98:97: ae:57:ae:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD NjIzNTdBQTgwHhcNMjUwMjA1MDQwODI3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZTQzYi1kYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vVfUQpPGipSciZV4ogwEpnWC8IHcDv0bPkyXbMtd1nVvGblcrQ8pEIRHTVi 9X2Dt8ST5N1RTsdRAYW8pbxe7mdHiJcjKh26MnejKXlMWk2bSyYRQ2i6J/oIuPqq 62ljruDQ+YdjXOLzRd6YE+F48DaSKfOPvFZC1Z0SKFYEdSarb0SHwqeWe2TqiH8o STbwm6WoflFJsHg+QqeqbG/MCO4AdEgL34hR0bTQDLlQyfFoBjOqjW42TFBY/M9+ h/OPLHrGAlWimAejDkoBhjZIu39rFhosiy8OKMwz8l6YpAczsGjCZoBBALGNIkZI /6A45JN8YP8tWddBxhBcHUWfAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKZBOXb8 jiPYf8Xyw7EC+MV//lD6MB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIzQzEvMEUwREZBOTg4Q0NGMTFFRTk2RjRFNjVBQzRGOUFFMDIvM0I4M0IyRjRF MzA2MTFFRkE0QjY3QzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAkMh8wDQYJKoZIhvcNAQELBQADggEBAIgxKaB4W+xdKRss hgqWy9bb9uwf8pvW7PG07MjVJ8HSQFPJz8l4H9aTZhBAcEkuqL7pOwQmHnJsPZdX URWokkZmVVRgf/EvtJ6bjw5drJgECn/q5ta0nirxPFPF5wDg1MBxdxIXNkHby1zg AL0kJRlCpy6d5tKacSMAIsm1Qfk8IYElWQVUfpopWNIVFn+/4kAeEqtGb+I9fLJj EQlk9lYgzlmJ/9sI9zgytXkK6TkAmrLhvR5N4DG1Gxtiw3H1IuzEvpC3Y8k1MXdD UQ4HkvrR0n2z5kpBmEIUrxnQzKR0izuGfxoyEuzSOW7ih5NY+wJhxhcf+Lr/dcaY l65XrqU= -----END CERTIFICATE-----Generated at Sun Apr 13 04:55:18 2025 by rpki-client