$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa File: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (raw, json) Hash identifier: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro= Subject key identifier: 46:EB:3B:5F:DB:31:55:B4:6A:34:15:7B:62:4D:3A:4B:B1:72:A0:38 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0337 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa Signing time: Tue 11 Mar 2025 01:17:38 +0000 ROA not before: Tue 11 Mar 2025 01:17:38 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134599 IP address blocks: 103.179.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Mar 11 01:17:38 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67cf8f31-9475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:b4:34:b7:57:da:c5:21:3f:0a:9b:8b:85: 25:dd:09:56:f3:58:41:3b:ba:88:95:87:d9:66:37: 70:56:e4:85:12:55:d5:a4:8b:ff:98:c7:c8:e9:2f: ef:ca:a5:eb:ff:96:d3:04:43:71:ac:6f:40:e3:f0: 67:cf:b8:08:ad:09:76:9a:5f:b6:64:4f:a0:a5:80: c0:20:4f:93:bb:c8:a4:37:18:12:82:01:7e:44:7d: e4:54:4c:b1:5d:7a:c0:52:35:b0:f0:aa:f0:59:10: 45:90:84:e9:e9:7d:d0:54:5a:78:5d:1e:1b:f1:b5: d3:6a:5b:40:fb:67:15:9b:d1:1f:98:5d:ce:ce:2b: 8f:52:2e:c0:56:05:49:5e:db:95:2b:df:e5:11:a4: e8:08:d2:7f:aa:36:59:52:69:33:05:8f:92:85:28: 69:36:84:9d:62:f7:7f:2a:35:33:3f:87:89:4d:c9: 2e:8c:11:11:50:ba:06:7d:33:53:ef:f6:d2:7c:1f: 69:9e:cf:a7:c3:70:d8:16:4f:63:c8:96:8b:2a:23: 1c:9e:8f:8c:cf:07:01:32:08:f4:dd:c1:34:b6:f4: a8:52:4a:3a:ea:e7:f7:88:b2:db:d5:b2:5a:e1:ae: 6e:67:94:d3:26:19:e5:3d:5f:9e:d4:8e:cb:0e:39: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EB:3B:5F:DB:31:55:B4:6A:34:15:7B:62:4D:3A:4B:B1:72:A0:38 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.58.0/24 Signature Algorithm: sha256WithRSAEncryption 11:14:b6:74:7e:6b:6f:e7:7d:7b:db:63:16:b1:29:dd:33:a6: 0d:8c:90:60:e6:5f:4f:2f:f6:e2:8b:c3:c9:e1:57:41:9e:e9: 61:2a:0a:0b:36:70:fe:ad:9d:ca:27:cb:1d:e8:6a:5c:0a:2c: e5:f3:3d:cc:67:a1:f0:15:22:7f:22:f2:86:a7:36:1e:ac:14: 24:2c:0b:d8:96:ee:e9:d0:37:70:1b:17:65:89:d1:69:e1:26: 1c:23:d7:22:15:33:fa:bd:a2:e8:1f:f9:51:a2:e0:75:84:1f: dc:f4:19:77:dd:91:25:e8:36:ae:b4:45:ef:5b:33:22:7a:a5: 55:69:1e:08:57:ad:eb:6f:6a:4d:79:88:f5:59:71:76:17:fd: 7d:d6:96:a3:95:8d:16:28:ed:95:54:cf:a8:5d:93:89:f5:5e: c2:f1:0e:89:4d:95:3a:c6:f8:03:ca:8e:88:06:25:07:39:b3: f1:b2:15:17:3f:a5:50:88:a7:14:af:c1:f1:43:72:31:4d:ac: b3:0c:3b:51:7c:57:52:a5:62:e4:59:0d:66:38:41:b3:23:a9: 27:f6:4e:9c:b3:ad:a6:d4:9e:08:4e:97:0b:7a:a5:76:50:66: 62:d5:35:5a:0a:9e:07:b8:d5:a5:d3:77:58:17:8f:d4:c5:28: c0:61:08:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwMzExMDExNzM4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmOGYzMS05NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtS0NLdX2sUhPwqbi4Ul3QlW81hBO7qIlYfZZjdwVuSFElXVpIv/mMfI6S/v yqXr/5bTBENxrG9A4/Bnz7gIrQl2ml+2ZE+gpYDAIE+Tu8ikNxgSggF+RH3kVEyx XXrAUjWw8KrwWRBFkITp6X3QVFp4XR4b8bXTaltA+2cVm9EfmF3OziuPUi7AVgVJ XtuVK9/lEaToCNJ/qjZZUmkzBY+ShShpNoSdYvd/KjUzP4eJTckujBERULoGfTNT 7/bSfB9pns+nw3DYFk9jyJaLKiMcno+MzwcBMgj03cE0tvSoUko66uf3iLLb1bJa 4a5uZ5TTJhnlPV+e1I7LDjmMPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEbrO1/b MVW0ajQVe2JNOkuxcqA4MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRBMUQvQjQ2RTQyREFCQjFCMTFFQ0IwQUMwRjE0QzRGOUFFMDIvMzZCMUNEMzQw QTZEMTFFRDg5RkQzRjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnszowDQYJKoZIhvcNAQELBQADggEBABEUtnR+a2/nfXvb YxaxKd0zpg2MkGDmX08v9uKLw8nhV0Ge6WEqCgs2cP6tnconyx3oalwKLOXzPcxn ofAVIn8i8oanNh6sFCQsC9iW7unQN3AbF2WJ0WnhJhwj1yIVM/q9ougf+VGi4HWE H9z0GXfdkSXoNq60Re9bMyJ6pVVpHghXretvak15iPVZcXYX/X3WlqOVjRYo7ZVU z6hdk4n1XsLxDolNlTrG+APKjogGJQc5s/GyFRc/pVCIpxSvwfFDcjFNrLMMO1F8 V1KlYuRZDWY4QbMjqSf2TpyzrabUnghOlwt6pXZQZmLVNVoKnge41aXTd1gXj9TF KMBhCJw= -----END CERTIFICATE-----Generated at Sat Apr 26 07:44:36 2025 by rpki-client