$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa File: E4C8C324A71311EF87672E32C4F9AE02.roa (raw, json) Hash identifier: t4YwPdv491DVoFDP74i7IC1/xWM/Yb1V7KskC9NCfpk= Subject key identifier: 02:3A:A1:D8:77:0A:C4:4A:EC:22:B4:1D:2C:03:98:0F:37:ED:FE:A7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 9D77 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa Signing time: Wed 20 Nov 2024 07:48:56 +0000 ROA not before: Wed 20 Nov 2024 07:48:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137591 IP address blocks: 36.255.64.0/24 maxlen: 24 36.255.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40311 (0x9d77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Nov 20 07:48:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673d9467-592e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:10:8d:15:2d:bc:98:f7:b7:22:ed:be:2a: 8f:d4:94:8a:73:20:41:91:ab:38:ea:e2:e9:09:d0: b0:41:b2:cf:05:51:c1:c2:9b:f3:d7:6a:b5:44:44: 66:0f:f6:ed:5a:43:2f:6e:d5:2d:51:d0:ca:9b:53: 69:42:d8:71:57:87:9a:0e:64:cf:51:f7:9e:b8:df: 41:eb:d1:d6:54:81:2f:2d:17:77:01:6d:f3:46:f7: d1:70:62:16:c5:c0:10:fa:46:93:c2:39:0f:17:d0: f8:0a:5e:40:f4:5e:8f:ce:dd:3c:ac:92:b3:90:6c: da:8d:38:9c:f0:7e:1d:2a:e4:37:e6:56:7d:7b:11: 71:48:d0:e4:89:02:c7:ca:d8:aa:a4:eb:38:43:f3: 7f:93:67:eb:4c:1f:2c:64:2a:58:3d:fb:5d:86:c0: f7:7d:7b:04:b8:49:32:bf:9f:6a:56:c7:d1:83:76: 58:48:83:93:3d:c1:92:53:bd:4b:aa:39:0a:57:36: 15:f7:45:d8:a9:65:13:c7:e9:24:aa:80:e9:7e:63: 7f:e6:2d:1b:dd:0c:f2:04:c3:5b:af:da:f5:ad:e3: b1:e9:77:f5:06:69:fd:fc:8a:74:cd:c8:35:d1:66: 71:99:61:58:65:32:10:79:fa:ce:c8:b2:2f:e2:50: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3A:A1:D8:77:0A:C4:4A:EC:22:B4:1D:2C:03:98:0F:37:ED:FE:A7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4C8C324A71311EF87672E32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.64.0/23 Signature Algorithm: sha256WithRSAEncryption 27:b2:ec:b6:ee:a2:50:7f:bc:59:6c:a0:8f:6e:7c:61:8f:57: df:07:05:8a:dc:a7:98:d4:29:ef:90:91:96:4b:7d:f6:cc:1b: 16:a5:ef:cb:74:b7:27:56:34:28:cf:4f:21:02:94:99:63:42: 90:51:5f:4e:ed:23:63:c2:eb:dd:1b:10:3e:57:f8:8d:c0:1d: 58:ba:bd:c9:f5:19:24:ed:27:76:ff:b1:71:62:23:04:e1:71: 8e:bc:55:b3:d4:9f:6e:8d:41:51:ec:53:17:2c:a9:c3:45:86: ac:d0:c2:3d:59:27:19:6b:57:13:bd:95:71:5f:28:ab:12:3f: 25:00:6d:88:78:28:d5:5d:0c:21:0b:79:7d:d7:4a:33:6e:53: d5:0a:f8:c1:80:5f:d5:a3:28:01:46:78:69:18:a8:3b:4c:bf: 7d:03:3a:16:b0:fb:3b:30:17:c4:3d:02:36:5b:1c:09:9e:26: ff:84:70:9b:82:5b:af:00:83:5a:8b:22:ee:9f:5e:d3:eb:12: 7b:dc:05:76:11:ba:db:9b:b1:7c:0e:75:78:2f:88:4a:59:03: 20:93:fe:b3:70:18:b0:af:ee:af:d0:2b:df:27:df:d2:72:bd: 16:d6:da:48:c0:78:57:c2:b6:93:ee:f7:0d:60:24:74:12:b9: f7:4b:d7:fb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAJ13MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MTEyMDA3NDg1NloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjczZDk0NjctNTkyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5uEI0VLbyY97ci7b4qj9SUinMgQZGrOOri6QnQsEGyzwVRwcKb89dqtURE Zg/27VpDL27VLVHQyptTaULYcVeHmg5kz1H3nrjfQevR1lSBLy0XdwFt80b30XBi FsXAEPpGk8I5DxfQ+ApeQPRej87dPKySs5Bs2o04nPB+HSrkN+ZWfXsRcUjQ5IkC x8rYqqTrOEPzf5Nn60wfLGQqWD37XYbA9317BLhJMr+falbH0YN2WEiDkz3BklO9 S6o5Clc2FfdF2KllE8fpJKqA6X5jf+YtG90M8gTDW6/a9a3jsel39QZp/fyKdM3I NdFmcZlhWGUyEHn6zsiyL+JQW5ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQCOqHY dwrESuwitB0sA5gPN+3+pzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U0QzhDMzI0 QTcxMzExRUY4NzY3MkUzMkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBJP9AMA0GCSqGSIb3DQEBCwUAA4IBAQAnsuy27qJQf7xZ bKCPbnxhj1ffBwWK3KeY1CnvkJGWS332zBsWpe/LdLcnVjQoz08hApSZY0KQUV9O 7SNjwuvdGxA+V/iNwB1Yur3J9Rkk7Sd2/7FxYiME4XGOvFWz1J9ujUFR7FMXLKnD RYas0MI9WScZa1cTvZVxXyirEj8lAG2IeCjVXQwhC3l910ozblPVCvjBgF/VoygB RnhpGKg7TL99AzoWsPs7MBfEPQI2WxwJnib/hHCbgluvAINaiyLun17T6xJ73AV2 Ebrbm7F8DnV4L4hKWQMgk/6zcBiwr+6v0CvfJ9/Scr0W1tpIwHhXwraT7vcNYCR0 Ern3S9f7 -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:38 2025 by rpki-client