$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa File: 36FC37FABF3111EE886C313CC4F9AE02.roa (raw, json) Hash identifier: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M= Subject key identifier: 0B:08:8A:FD:A0:2B:7A:66:75:31:AB:DD:96:1B:14:72:F4:B0:F6:DE Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: BE Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa Signing time: Wed 29 Jan 2025 04:18:19 +0000 ROA not before: Wed 29 Jan 2025 04:18:19 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152449 IP address blocks: 157.15.60.0/24 maxlen: 24 157.15.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Jan 29 04:18:19 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6799ac0b-8569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:99:81:7e:c4:21:62:d6:8f:71:0b:6d:53:a1: 0f:ae:fb:a0:22:c3:1f:d3:72:b9:91:e9:2c:3f:58: 25:a6:c7:b4:1b:47:20:eb:0a:0c:ca:69:77:59:1d: 9b:45:c5:fb:69:68:05:35:e0:26:1f:7b:a5:ac:d7: d3:d4:7f:7e:17:d1:e0:02:47:ce:69:da:48:01:49: 4d:ac:0a:07:d9:ac:76:d5:c0:3d:4c:6c:b5:a3:fa: ac:53:9b:af:56:63:26:5c:b6:58:7b:eb:8f:f0:10: 5c:06:11:48:6c:10:e0:e8:8d:3c:e4:95:47:d2:10: 90:7a:68:82:4a:4a:9b:71:f8:2d:a6:ac:f8:15:82: 07:eb:1a:32:70:b8:67:28:3e:3b:63:79:e8:34:3f: bf:e7:43:a0:91:d4:83:ee:2e:47:a9:1a:63:8b:36: 9a:d0:db:6e:ac:29:6b:62:6f:a6:09:0b:e8:ae:0e: 0c:3b:d3:93:89:3f:75:89:0b:e2:d3:c9:1f:70:0a: a4:85:eb:41:11:f1:db:c8:cb:50:46:09:dc:0d:16: ce:35:ba:75:10:45:33:1d:79:5f:0b:01:9d:92:08: 99:be:43:c2:5f:fe:16:f0:2b:d6:39:9e:d1:96:cb: 1a:ac:0d:58:a4:64:15:3e:d6:c2:a9:df:a6:e1:a9: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:08:8A:FD:A0:2B:7A:66:75:31:AB:DD:96:1B:14:72:F4:B0:F6:DE X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.60.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:c2:61:e8:91:e5:cd:69:48:94:17:c7:1c:d5:0f:0c:6d:e5: c1:7c:e4:e1:f1:72:46:0c:3b:56:10:70:5a:f7:2d:23:20:18: 75:c8:e2:37:25:04:85:3d:80:a5:ac:02:b7:da:9f:ae:4c:29: 24:80:66:65:7d:1f:2c:2a:0a:70:9d:6a:cd:d1:23:e6:1f:1d: 8d:fa:03:6b:d9:86:96:c2:9f:f2:09:cd:d3:b9:c0:f2:5f:47: 2c:67:09:02:b2:5f:46:99:e5:af:9d:de:be:c5:1d:b4:ba:69: 1e:58:d1:9e:1b:30:9d:5b:99:80:41:9b:c6:05:d4:c7:b1:92: b4:91:fc:d5:0f:34:db:ae:cf:eb:09:5b:7d:54:0e:c4:11:19: a3:ba:ed:cf:54:50:e9:63:c5:76:51:23:1c:cd:62:f1:10:b2: fd:a1:e3:45:61:66:67:ee:67:d7:51:b2:51:1a:aa:87:4c:94: 49:55:4b:db:97:92:a0:6e:48:25:0c:2e:1f:7c:24:52:1a:48: 87:27:08:ef:a5:48:1e:d0:c7:ed:ed:a7:e6:b5:b9:43:6d:7d: a7:e7:f7:b0:bb:2c:c2:c2:b1:17:2b:76:19:6c:e3:e9:14:eb: e0:35:58:6d:cc:0e:b1:87:ba:f1:b2:59:42:91:12:cc:84:a0: 36:c0:bd:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUwMTI5MDQxODE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5YWMwYi04NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95mBfsQhYtaPcQttU6EPrvugIsMf03K5keksP1glpse0G0cg6woMyml3WR2b RcX7aWgFNeAmH3ulrNfT1H9+F9HgAkfOadpIAUlNrAoH2ax21cA9TGy1o/qsU5uv VmMmXLZYe+uP8BBcBhFIbBDg6I085JVH0hCQemiCSkqbcfgtpqz4FYIH6xoycLhn KD47Y3noND+/50OgkdSD7i5HqRpjizaa0NturClrYm+mCQvorg4MO9OTiT91iQvi 08kfcAqkhetBEfHbyMtQRgncDRbONbp1EEUzHXlfCwGdkgiZvkPCX/4W8CvWOZ7R lssarA1YpGQVPtbCqd+m4akDfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAsIiv2g K3pmdTGr3ZYbFHL0sPbeMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwQjYvNUZCRTQzQjRCRjMwMTFFRUJFNEYzQzFFQzRGOUFFMDIvMzZGQzM3RkFC RjMxMTFFRTg4NkMzMTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdDzwwDQYJKoZIhvcNAQELBQADggEBAFzCYeiR5c1pSJQX xxzVDwxt5cF85OHxckYMO1YQcFr3LSMgGHXI4jclBIU9gKWsArfan65MKSSAZmV9 HywqCnCdas3RI+YfHY36A2vZhpbCn/IJzdO5wPJfRyxnCQKyX0aZ5a+d3r7FHbS6 aR5Y0Z4bMJ1bmYBBm8YF1MexkrSR/NUPNNuuz+sJW31UDsQRGaO67c9UUOljxXZR IxzNYvEQsv2h40VhZmfuZ9dRslEaqodMlElVS9uXkqBuSCUMLh98JFIaSIcnCO+l SB7Qx+3tp+a1uUNtfafn97C7LMLCsRcrdhls4+kU6+A1WG3MDrGHuvGyWUKREsyE oDbAveg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:29:08 2025 by rpki-client