$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa File: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (raw, json) Hash identifier: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc= Subject key identifier: DA:B5:95:15:A8:59:4E:4B:42:65:6D:FB:26:60:82:4B:B3:65:05:60 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: DA Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa Signing time: Fri 17 Jan 2025 03:57:12 +0000 ROA not before: Fri 17 Jan 2025 03:57:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 20473 IP address blocks: 36.50.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28 Validity Not Before: Jan 17 03:57:12 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6789d517-602d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:cf:57:59:2f:c7:52:6c:ce:57:a1:85:20: 63:0d:e7:35:cb:58:d2:18:96:82:f8:34:76:57:cd: 1c:f6:21:de:7d:66:65:27:1c:31:eb:05:d0:d7:0f: d1:66:4d:01:14:36:af:9b:90:9b:15:20:5f:82:cd: ce:b9:e0:5c:46:5a:5c:9b:32:a9:ed:36:f2:2b:3f: 4f:b0:69:40:26:64:b9:cc:71:06:24:9c:a3:99:73: a7:82:0c:aa:27:26:92:9b:e3:5f:a4:ea:55:53:f7: 2f:6e:b6:fa:d4:ae:24:7b:ed:07:f1:ec:a5:8f:95: 1a:17:54:c3:20:58:04:27:57:36:be:f4:ae:7e:5b: 00:f1:d5:32:76:1f:51:bb:87:91:6d:57:95:0d:ad: cb:c3:44:53:31:5c:5d:eb:ae:a4:e8:7f:13:9f:bb: f4:da:70:7f:3d:12:63:08:3d:e2:c7:7f:4b:e0:b7: 89:82:b9:a2:f9:5f:47:6a:f3:e2:f6:a4:52:f2:c2: 05:8c:da:b6:5c:b7:ff:a5:dd:50:2f:ef:31:8c:67: 26:ef:f9:f0:b7:17:44:76:91:9c:f3:a0:5a:c2:96: 31:1a:7c:fc:d9:04:fb:49:21:5c:cb:4e:6c:da:aa: d2:af:56:30:52:57:46:a8:cc:8a:0b:f8:21:8f:6e: 0f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:95:15:A8:59:4E:4B:42:65:6D:FB:26:60:82:4B:B3:65:05:60 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.2.0/24 Signature Algorithm: sha256WithRSAEncryption 37:86:64:98:3a:10:10:1e:7e:fa:c3:fd:2a:93:70:b4:5d:e9: d4:bc:e1:34:b4:45:6c:37:78:be:13:fa:37:6a:1c:00:6f:61: b5:99:7b:f2:87:82:e8:75:4b:92:d1:6e:21:6a:8d:c7:eb:9c: 2b:d0:e6:77:bf:e5:76:c5:b3:53:2e:02:ce:7b:1f:bb:43:f0: 64:f2:cd:6c:cd:8b:de:c6:26:33:45:d1:28:dc:18:ad:d5:87: 02:af:90:c3:8d:35:82:68:4e:81:da:1f:e1:0c:c4:65:f8:d9: d9:d3:3f:7f:7a:1c:21:a9:2e:38:be:e3:97:dc:7d:fa:eb:64: f6:5e:1b:cc:0d:b7:23:7c:7a:72:69:3e:67:7b:1a:9c:d2:b1: 0d:11:c1:74:c1:8e:f5:6b:cb:35:ce:a0:e9:60:ca:28:62:8e: 2e:a8:2f:1d:62:1d:1a:e1:2d:fb:38:26:9b:84:f8:1f:3e:ec: 25:58:10:26:f2:83:01:0e:84:8e:a6:29:e9:00:8c:9a:28:cf: 36:07:9c:10:09:17:cd:35:1b:06:27:9d:9d:cc:3d:2b:3d:0f: 0e:c0:ef:5b:90:31:e8:82:94:fc:70:66:60:2b:a2:56:a6:66: 50:91:9f:4f:6d:a1:2a:dd:b1:6b:ee:d8:91:25:c7:8c:60:53: 8b:a9:f6:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwMTE3MDM1NzEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg5ZDUxNy02MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKLPV1kvx1JszlehhSBjDec1y1jSGJaC+DR2V80c9iHefWZlJxwx6wXQ1w/R Zk0BFDavm5CbFSBfgs3OueBcRlpcmzKp7TbyKz9PsGlAJmS5zHEGJJyjmXOnggyq JyaSm+NfpOpVU/cvbrb61K4ke+0H8eylj5UaF1TDIFgEJ1c2vvSuflsA8dUydh9R u4eRbVeVDa3Lw0RTMVxd666k6H8Tn7v02nB/PRJjCD3ix39L4LeJgrmi+V9HavPi 9qRS8sIFjNq2XLf/pd1QL+8xjGcm7/nwtxdEdpGc86BawpYxGnz82QT7SSFcy05s 2qrSr1YwUldGqMyKC/ghj24P6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNq1lRWo WU5LQmVt+yZggkuzZQVgMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMjgvRjU3RkQwQjg4RDU2MTFFRTk3ODdFNzgzQzRGOUFFMDIvNkRBQjEwOUU4 REYxMTFFRUE1QkI0QTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAkMgIwDQYJKoZIhvcNAQELBQADggEBADeGZJg6EBAefvrD /SqTcLRd6dS84TS0RWw3eL4T+jdqHABvYbWZe/KHguh1S5LRbiFqjcfrnCvQ5ne/ 5XbFs1MuAs57H7tD8GTyzWzNi97GJjNF0SjcGK3VhwKvkMONNYJoToHaH+EMxGX4 2dnTP396HCGpLji+45fcffrrZPZeG8wNtyN8enJpPmd7GpzSsQ0RwXTBjvVryzXO oOlgyihiji6oLx1iHRrhLfs4JpuE+B8+7CVYECbygwEOhI6mKekAjJoozzYHnBAJ F801GwYnnZ3MPSs9Dw7A71uQMeiClPxwZmArolamZlCRn09toSrdsWvu2JElx4xg U4up9kc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:10:14 2025 by rpki-client