$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa File: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (raw, json) Hash identifier: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds= Subject key identifier: 52:AA:C5:F0:C3:58:E4:B1:83:EA:69:CB:83:BB:66:55:6F:F6:94:54 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0121 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa Signing time: Sat 01 Mar 2025 07:38:18 +0000 ROA not before: Sat 01 Mar 2025 07:38:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 140934 IP address blocks: 36.50.240.0/23 maxlen: 31 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D Validity Not Before: Mar 1 07:38:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c2b96a-3c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:13:ef:3f:2f:bd:21:dd:b9:9b:c4:e8:1d: cd:90:55:79:91:10:88:02:21:5b:9d:de:83:29:ee: 6f:22:11:8d:10:61:a8:d1:12:82:7a:07:71:e2:a5: a7:59:84:3f:0d:e0:bf:eb:ef:52:e2:b5:d8:95:5a: 13:56:7e:f7:84:01:83:c0:b0:7d:e7:48:1d:4c:f8: 1a:7b:b2:f1:6c:ff:d9:7c:2f:7f:71:35:62:e6:6c: a3:76:97:69:b7:7e:0b:b1:21:2c:4e:8a:db:58:cf: 50:7e:63:53:ae:95:34:47:12:58:30:28:76:f2:00: e8:87:40:a6:b2:49:1f:49:03:bc:e5:fa:99:e1:9c: ae:61:09:39:73:1c:44:0f:1d:e0:77:18:3c:83:ab: 2d:58:9c:60:02:47:78:1d:05:22:77:57:2b:d8:bc: 01:46:2c:99:f0:98:24:6e:0c:bc:39:91:ba:7b:11: 2f:8c:81:31:fe:a5:ab:67:33:3d:22:34:29:e1:65: 21:12:ed:ac:1b:f7:99:9f:ab:5d:c2:33:0a:0d:70: 72:0e:7b:c6:4e:d9:eb:02:ad:12:4c:0e:7a:0e:2f: 26:b1:e6:c1:7f:f7:89:96:08:ac:f1:69:98:cb:3d: 63:43:3b:dc:35:af:3a:dc:39:5c:a1:1d:05:6a:f3: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AA:C5:F0:C3:58:E4:B1:83:EA:69:CB:83:BB:66:55:6F:F6:94:54 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.240.0/23 Signature Algorithm: sha256WithRSAEncryption 63:09:3b:46:8e:e0:da:c0:be:2c:dd:4c:9e:29:88:83:4d:4b: ac:f6:7e:bc:92:a9:dc:67:36:de:28:a6:7e:75:0f:b2:e7:b8: 1c:96:92:4a:b0:d1:e5:ba:12:44:9f:75:3c:be:84:15:f3:d2: 51:71:d9:4f:10:c6:41:16:57:ee:54:73:30:5d:b5:9a:56:fd: 95:89:09:0f:9b:58:c4:55:9a:80:08:65:7c:a2:58:13:84:6b: 38:f6:18:34:6e:3b:eb:26:02:0d:4d:14:73:5a:ff:76:57:f6: 0c:a2:76:a2:94:5b:d4:6b:58:79:f5:24:fb:46:0b:81:6a:1e: 91:83:1d:82:8b:8e:3a:04:bb:8c:f2:b6:2b:81:cf:d4:44:3f: 32:62:f9:54:23:34:2a:c7:dc:26:78:35:71:d3:ed:6d:36:72: 7b:69:6f:59:de:fa:08:93:4d:38:bc:a5:a4:79:64:d1:0a:7e: 35:fd:bf:2b:80:15:b9:60:b9:74:22:09:dd:ee:fa:be:b9:8c: 53:42:44:91:6e:3d:30:ab:68:fa:5b:5b:64:45:15:1c:4e:66: 7b:2f:a9:c8:81:f3:f8:6a:1f:f9:38:70:3e:b5:a7:b5:cf:2f: c8:73:24:b6:ef:de:02:64:2f:43:dc:a4:a2:40:4d:4c:16:ef: 2a:01:bf:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwMzAxMDczODE4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyYjk2YS0zYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlUkT7z8vvSHduZvE6B3NkFV5kRCIAiFbnd6DKe5vIhGNEGGo0RKCegdx4qWn WYQ/DeC/6+9S4rXYlVoTVn73hAGDwLB950gdTPgae7LxbP/ZfC9/cTVi5myjdpdp t34LsSEsTorbWM9QfmNTrpU0RxJYMCh28gDoh0CmskkfSQO85fqZ4ZyuYQk5cxxE Dx3gdxg8g6stWJxgAkd4HQUid1cr2LwBRiyZ8Jgkbgy8OZG6exEvjIEx/qWrZzM9 IjQp4WUhEu2sG/eZn6tdwjMKDXByDnvGTtnrAq0STA56Di8msebBf/eJlgis8WmY yz1jQzvcNa863DlcoR0FavNXVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFKqxfDD WOSxg+ppy4O7ZlVv9pRUMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE5MkQvQ0M2N0QyNTJBNEJDMTFFRTlFNUE1RDcyQzRGOUFFMDIvNEIzQTNGM0ND NkREMTFFRkE3QTYzNTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEkMvAwDQYJKoZIhvcNAQELBQADggEBAGMJO0aO4NrAvizd TJ4piINNS6z2frySqdxnNt4opn51D7LnuByWkkqw0eW6EkSfdTy+hBXz0lFx2U8Q xkEWV+5UczBdtZpW/ZWJCQ+bWMRVmoAIZXyiWBOEazj2GDRuO+smAg1NFHNa/3ZX 9gyidqKUW9RrWHn1JPtGC4FqHpGDHYKLjjoEu4zytiuBz9REPzJi+VQjNCrH3CZ4 NXHT7W02cntpb1ne+giTTTi8paR5ZNEKfjX9vyuAFblguXQiCd3u+r65jFNCRJFu PTCraPpbW2RFFRxOZnsvqciB8/hqH/k4cD61p7XPL8hzJLbv3gJkL0PcpKJATUwW 7yoBvy4= -----END CERTIFICATE-----Generated at Sat Apr 5 01:05:22 2025 by rpki-client