$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa File: 56094384320611EA84C94231C4F9AE02.roa (raw, json) Hash identifier: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys= Subject key identifier: 58:86:A0:E5:51:59:91:F4:22:A8:52:C3:64:D4:D6:C0:A2:D5:0C:52 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 1301 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa Signing time: Tue 10 Dec 2024 17:15:14 +0000 ROA not before: Tue 10 Dec 2024 17:15:14 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 45170 IP address blocks: 36.0.4.0/22 maxlen: 23 101.251.4.0/22 maxlen: 22 183.91.132.0/22 maxlen: 22 183.91.132.0/24 maxlen: 24 202.52.0.0/23 maxlen: 23 2404:2c00::/32 maxlen: 32 2404:2c00:8000::/47 maxlen: 47 2404:2c00:8000::/48 maxlen: 48 2404:2c00:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4865 (0x1301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Dec 10 17:15:14 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67587722-3c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:c4:71:13:16:af:09:cf:65:9f:39:db:4b: b2:d2:cf:fa:61:9e:b7:0f:3b:9d:5a:40:75:10:62: 3b:0a:21:7e:38:10:1f:e5:d1:1f:1c:ac:25:64:35: 46:aa:9b:4f:b8:5b:54:97:87:27:e3:5f:7b:21:8b: 9c:77:d9:b2:f6:dc:32:73:57:f2:90:93:af:74:08: 51:df:94:48:93:71:95:42:4e:d6:a0:e6:08:cf:32: 6d:1d:50:ec:6d:da:13:bf:d3:59:5d:ca:ab:e6:be: ce:69:47:04:91:ce:d1:2c:ad:f2:33:2a:0f:8f:ac: 3d:b7:72:5b:ff:31:f2:42:23:f4:bc:ce:4c:74:f8: de:8a:29:e2:b0:60:a2:d3:b4:ca:3b:fd:cd:af:9e: 47:f2:7c:28:e8:ce:b5:27:49:88:43:d0:8b:00:24: 43:46:35:3b:db:77:34:85:56:50:8d:51:43:b8:b0: 72:0f:e8:b5:b7:63:ea:41:e4:83:65:74:eb:0b:c9: a8:ad:25:35:51:7e:21:b7:0d:2a:aa:b1:f4:ae:8a: c4:f6:70:7c:f4:07:b5:7b:96:18:24:3e:b1:8d:76: 29:73:05:5c:16:3f:db:81:a8:f3:4b:9b:a2:19:c9: 09:eb:03:f0:81:ea:74:cb:5f:b4:6c:09:2b:3b:8f: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:86:A0:E5:51:59:91:F4:22:A8:52:C3:64:D4:D6:C0:A2:D5:0C:52 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/56094384320611EA84C94231C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.0.4.0/22 101.251.4.0/22 183.91.132.0/22 202.52.0.0/23 IPv6: 2404:2c00::/32 Signature Algorithm: sha256WithRSAEncryption 87:cc:50:16:4e:2e:77:cf:04:69:ff:8c:22:e2:57:f8:2d:48: 34:3f:89:fb:e0:79:07:60:e9:e1:13:2a:e5:82:03:76:5f:d0: 6c:7c:c1:29:71:95:21:33:f5:d0:2e:46:c8:4d:5a:05:bc:6c: a2:e4:5a:4f:85:57:a2:84:a0:ee:27:8a:f3:c4:82:05:70:cc: a7:c3:43:cc:c1:7a:b4:aa:9b:e7:03:28:f1:37:ea:06:cf:02: ac:10:ff:ba:b6:b7:56:93:6b:ec:3c:4e:79:d7:64:2d:cf:24: e6:8d:ee:50:47:2a:22:d0:87:ea:be:88:cd:f1:82:b3:f1:d5: 87:11:f6:c4:b2:76:bd:69:03:8e:c6:12:d9:30:62:ab:dd:e1: 0b:24:8f:43:d7:c4:4e:fd:0c:9d:95:ee:2f:05:89:5b:b2:87: d6:75:30:27:7f:0e:4d:ed:14:67:3f:f8:b4:1c:fc:83:c5:dc: 78:5f:43:43:4a:5a:23:d9:79:8e:34:3c:29:ba:25:86:db:44: d9:1c:5a:f3:f7:44:41:50:04:9f:cb:03:bd:f1:09:7d:69:20: b0:00:76:31:a3:e1:90:b0:0c:53:3f:e9:1e:47:66:81:74:3a: 58:85:e5:76:c3:bd:0b:43:60:1f:8d:ef:84:29:52:40:bc:c1: b4:31:3a:54 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICEwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjQxMjEwMTcxNTE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU4NzcyMi0zYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSPEcRMWrwnPZZ8520uy0s/6YZ63DzudWkB1EGI7CiF+OBAf5dEfHKwlZDVG qptPuFtUl4cn4197IYucd9my9twyc1fykJOvdAhR35RIk3GVQk7WoOYIzzJtHVDs bdoTv9NZXcqr5r7OaUcEkc7RLK3yMyoPj6w9t3Jb/zHyQiP0vM5MdPjeiinisGCi 07TKO/3Nr55H8nwo6M61J0mIQ9CLACRDRjU723c0hVZQjVFDuLByD+i1t2PqQeSD ZXTrC8morSU1UX4htw0qqrH0rorE9nB89Ae1e5YYJD6xjXYpcwVcFj/bgajzS5ui GckJ6wPwgep0y1+0bAkrO48IowIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFiGoOVR WZH0IqhSw2TU1sCi1QxSMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNTYwOTQzODQz MjA2MTFFQTg0Qzk0MjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIkAAQDBAJl+wQDBAK3W4QDBAHKNAAwDQQCAAIwBwMFACQE LAAwDQYJKoZIhvcNAQELBQADggEBAIfMUBZOLnfPBGn/jCLiV/gtSDQ/ifvgeQdg 6eETKuWCA3Zf0Gx8wSlxlSEz9dAuRshNWgW8bKLkWk+FV6KEoO4nivPEggVwzKfD Q8zBerSqm+cDKPE36gbPAqwQ/7q2t1aTa+w8TnnXZC3PJOaN7lBHKiLQh+q+iM3x grPx1YcR9sSydr1pA47GEtkwYqvd4Qskj0PXxE79DJ2V7i8FiVuyh9Z1MCd/Dk3t FGc/+LQc/IPF3HhfQ0NKWiPZeY40PCm6JYbbRNkcWvP3REFQBJ/LA73xCX1pILAA djGj4ZCwDFM/6R5HZoF0OliF5XbDvQtDYB+N74QpUkC8wbQxOlQ= -----END CERTIFICATE-----Generated at Sat Apr 26 08:21:17 2025 by rpki-client