$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa File: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (raw, json) Hash identifier: NmyQHlBil47JzTSCPQYz/6ZBa9AnAtiDqsHIcZPO3dA= Subject key identifier: 21:E1:77:2E:D5:92:7F:8A:84:CF:F1:55:69:17:2D:FD:DB:2A:14:A9 Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: EB Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa Signing time: Sun 19 Jan 2025 04:07:17 +0000 ROA not before: Sun 19 Jan 2025 04:07:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152185 IP address blocks: 36.50.182.0/23 maxlen: 23 36.50.182.0/24 maxlen: 24 36.50.183.0/24 maxlen: 24 2001:df3:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 06:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0 Validity Not Before: Jan 19 04:07:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=678c7a75-5100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:22:29:80:f2:1b:c7:4d:af:a7:fb:00:68: c5:c1:bf:06:39:d5:f4:a9:e0:cd:a8:1a:a6:8c:b8: dd:5f:e0:47:df:6f:db:e5:b2:0b:a8:8b:55:f0:d1: ee:bf:08:ce:f0:68:12:89:4f:29:99:12:14:b9:5c: f0:91:9d:27:92:94:1a:c5:db:59:13:82:6a:6d:e2: 9a:ae:f2:25:7b:63:9e:c7:72:04:db:b7:fb:aa:12: 56:a1:92:cb:10:89:1f:e3:c4:d3:54:1c:2f:19:62: 43:15:c2:e2:33:fb:7b:dd:03:73:32:98:c3:49:8f: bd:b3:88:4e:f0:09:34:7e:a8:2b:f2:27:43:6d:a0: 23:06:32:d5:db:0a:17:4f:f5:a9:af:36:fb:7f:66: 25:c9:8d:43:d6:96:ee:79:bc:f0:07:da:f5:79:f3: 38:19:16:23:ea:d8:56:71:d0:5e:f1:cf:54:a6:92: 34:21:15:f0:d4:59:5f:9c:b1:d9:ae:1d:e8:27:f9: 18:b5:22:35:56:cb:77:87:d9:e2:c7:7c:ca:ac:6d: d1:7d:65:7b:93:16:6c:de:61:ab:14:b3:be:a7:3d: 0c:33:5b:4f:44:82:82:53:1b:d3:f6:82:ac:26:ef: 7c:f2:60:49:23:e2:53:cf:05:2c:cc:b0:d2:3c:08: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E1:77:2E:D5:92:7F:8A:84:CF:F1:55:69:17:2D:FD:DB:2A:14:A9 X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.182.0/23 IPv6: 2001:df3:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 07:90:f8:09:13:61:83:73:68:74:50:b0:c7:3e:bf:7c:d8:2b: 6a:04:bc:db:9e:cb:ac:a3:19:c0:84:e9:e8:d0:53:8d:bd:44: 97:b4:9e:26:e3:66:37:55:30:a3:5f:ba:05:0f:ab:ef:ba:17: 23:d1:67:ab:76:90:a2:c9:e1:fe:f5:a8:a4:76:e0:1a:1f:61: d5:69:f6:33:dd:81:74:68:be:b1:cb:37:84:b7:9d:e8:12:1e: e0:5c:3e:1e:4d:1f:3a:4f:a2:06:67:25:4c:51:cb:9a:50:6c: b3:6a:06:25:6c:fe:eb:03:8e:e2:bc:f6:03:cc:6c:59:07:54: ab:4e:cb:ab:1b:de:67:36:6e:ac:ff:df:a5:e5:93:4d:6d:66: 2b:a8:98:84:c6:36:92:db:9e:98:d5:e6:9c:e4:a3:44:7a:fc: 10:a4:3f:2f:fd:cf:47:ae:28:fc:df:92:85:2e:9a:17:66:47: 48:37:95:48:2d:19:4d:88:dd:d8:35:e0:01:1c:84:09:19:a4: 6c:2b:9b:83:a3:a5:08:04:80:62:70:34:a8:ab:5d:12:58:67: 5f:b8:ef:e2:6d:1c:65:b5:68:bd:18:ad:27:95:22:84:2c:6e: d1:da:6e:67:ba:e8:ec:aa:a8:7f:c4:e2:50:45:9a:6b:bc:b3: 35:77:64:d3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5QjAxMTAvBgNVBAUTKEEyQTIxN0Q0QTQxMkZCNTM4RjVDOTFBMzRCMzZDRTcx ODc5RERCNjUwHhcNMjUwMTE5MDQwNzE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhjN2E3NS01MTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1MiKYDyG8dNr6f7AGjFwb8GOdX0qeDNqBqmjLjdX+BH32/b5bILqItV8NHu vwjO8GgSiU8pmRIUuVzwkZ0nkpQaxdtZE4JqbeKarvIle2Oex3IE27f7qhJWoZLL EIkf48TTVBwvGWJDFcLiM/t73QNzMpjDSY+9s4hO8Ak0fqgr8idDbaAjBjLV2woX T/Wprzb7f2YlyY1D1pbuebzwB9r1efM4GRYj6thWcdBe8c9UppI0IRXw1FlfnLHZ rh3oJ/kYtSI1Vst3h9nix3zKrG3RfWV7kxZs3mGrFLO+pz0MM1tPRIKCUxvT9oKs Ju988mBJI+JTzwUszLDSPAi3xQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCHhdy7V kn+KhM/xVWkXLf3bKhSpMB8GA1UdIwQYMBaAFKKiF9SkEvtTj1yRo0s2znGHndtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlCMC8xNEM5NDk2RTlG M0YxMUVFODAxQjFENjJDNEY5QUUwMi9vcUlYMUtRUy0xT1BYSkdqU3piT2NZZWQy MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y5QjAvMTRDOTQ5NkU5RjNGMTFFRTgwMUIxRDYyQzRGOUFFMDIvODREOTE3RkM5 RjQ5MTFFRUEwQzVDODU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAEkMrYwDwQCAAIwCQMHACABDfNNQDANBgkqhkiG9w0BAQsF AAOCAQEAB5D4CRNhg3NodFCwxz6/fNgragS8257LrKMZwITp6NBTjb1El7SeJuNm N1Uwo1+6BQ+r77oXI9Fnq3aQosnh/vWopHbgGh9h1Wn2M92BdGi+scs3hLed6BIe 4Fw+Hk0fOk+iBmclTFHLmlBss2oGJWz+6wOO4rz2A8xsWQdUq07LqxveZzZurP/f peWTTW1mK6iYhMY2ktuemNXmnOSjRHr8EKQ/L/3PR64o/N+ShS6aF2ZHSDeVSC0Z TYjd2DXgARyECRmkbCubg6OlCASAYnA0qKtdElhnX7jv4m0cZbVovRitJ5UihCxu 0dpuZ7ro7Kqof8TiUEWaa7yzNXdk0w== -----END CERTIFICATE-----Generated at Wed Feb 19 20:10:14 2025 by rpki-client