$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D1E091BA1E6E11F08BA4E242C4F9AE02.roa File: D1E091BA1E6E11F08BA4E242C4F9AE02.roa (raw, json) Hash identifier: JlLvhEuwwbZYUUmlAi9yWwqsUQ7SwGYGQPDV8sSj7IQ= Subject key identifier: 9A:14:BE:01:99:72:F1:A9:60:94:E8:FA:25:0B:1C:DF:F4:99:C0:5B Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 06F9 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D1E091BA1E6E11F08BA4E242C4F9AE02.roa Signing time: Mon 21 Apr 2025 05:09:36 +0000 ROA not before: Mon 21 Apr 2025 05:09:36 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 834 IP address blocks: 36.255.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Apr 21 05:09:36 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6805d310-1959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:3d:73:5f:bc:eb:4f:cc:b4:a3:ef:4c:f2: fb:2a:65:e0:69:0e:65:0d:43:bf:8b:06:43:fb:c9: 47:ce:f6:4d:1f:b9:77:0f:db:65:76:63:b0:8e:c2: 2a:5b:15:01:e7:db:09:c9:a8:61:e9:df:0e:29:5f: f8:b7:54:3d:9a:61:88:66:78:36:48:71:6a:e4:6a: dd:cb:ce:e1:13:45:0d:bb:9f:c5:f2:af:16:88:c8: 53:81:2a:de:6e:57:ff:10:53:a0:f5:2e:d6:63:11: 67:aa:22:48:f4:dc:0f:74:7a:f4:a3:d8:1c:63:a8: b5:09:2f:dd:36:47:2b:51:fe:4d:c6:3c:e9:7e:fd: d9:b8:1a:26:53:96:16:41:63:b9:74:05:43:c3:cf: d7:dd:23:7a:74:f8:2f:b3:cd:33:73:d9:cf:7c:51: 71:6b:aa:24:5f:c3:0b:9b:a7:bc:de:fd:2e:a5:b0: 8f:c5:0f:b1:7d:12:ec:bb:e5:10:06:6f:1a:d5:60: 52:e6:ef:2a:a9:8c:67:38:0f:fc:ae:17:8d:37:f6: 5c:c6:08:80:a0:81:2f:60:4b:19:d7:ed:70:34:4d: 38:a1:ac:a0:af:b9:16:c1:64:6c:9a:cb:ec:0d:46: 83:42:8f:24:2a:52:8e:fd:84:68:b7:77:07:2a:55: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:14:BE:01:99:72:F1:A9:60:94:E8:FA:25:0B:1C:DF:F4:99:C0:5B X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D1E091BA1E6E11F08BA4E242C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.199.0/24 Signature Algorithm: sha256WithRSAEncryption 90:9d:42:09:89:89:fc:c9:63:15:54:d3:fe:7b:71:9d:6d:ed: 81:f3:d4:e2:88:f3:67:c9:2c:51:11:9d:8a:c6:75:65:c5:e7: c1:af:8a:2d:c5:5e:32:73:67:a9:b4:aa:df:18:c5:11:2f:7e: d1:55:8d:fe:81:1a:3d:72:3f:5e:6b:e5:d8:5e:08:6d:55:b5: d4:3f:9a:3c:37:86:6e:98:2d:e7:04:97:fa:9c:08:c4:de:ef: 62:41:44:02:6c:91:ec:a8:33:1e:94:5b:04:ef:d5:d8:d4:d0: 37:15:9a:e4:45:93:59:f6:ee:e8:34:be:10:13:07:46:39:fd: 28:bf:39:cf:fe:f0:91:23:7b:01:51:dd:f8:b5:ed:58:c8:16: 18:2c:a1:c9:3e:69:68:92:c2:4b:92:44:c6:be:55:83:7f:aa: 35:a4:33:e5:de:e7:a6:89:e7:d6:a7:5a:85:3b:07:9a:18:3a: 85:20:bd:5c:51:aa:db:50:02:6e:7d:01:7b:35:9b:a3:2b:fe: ac:aa:e5:5c:d5:f2:f5:43:a7:50:6e:cf:9c:83:25:e2:b1:2e: db:f4:f2:b5:36:d1:3d:8a:de:71:7a:18:81:b1:e7:68:ab:7b: 60:2f:ef:96:d8:72:85:e6:fa:5a:aa:d4:e5:07:27:12:8d:6e: 81:2d:e6:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNDIxMDUwOTM2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA1ZDMxMC0xOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTQ9c1+860/MtKPvTPL7KmXgaQ5lDUO/iwZD+8lHzvZNH7l3D9tldmOwjsIq WxUB59sJyahh6d8OKV/4t1Q9mmGIZng2SHFq5Grdy87hE0UNu5/F8q8WiMhTgSre blf/EFOg9S7WYxFnqiJI9NwPdHr0o9gcY6i1CS/dNkcrUf5Nxjzpfv3ZuBomU5YW QWO5dAVDw8/X3SN6dPgvs80zc9nPfFFxa6okX8MLm6e83v0upbCPxQ+xfRLsu+UQ Bm8a1WBS5u8qqYxnOA/8rheNN/ZcxgiAoIEvYEsZ1+1wNE04oaygr7kWwWRsmsvs DUaDQo8kKlKO/YRot3cHKlVaJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJoUvgGZ cvGpYJTo+iULHN/0mcBbMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRDFFMDkxQkEx RTZFMTFGMDhCQTRFMjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8cwDQYJKoZIhvcNAQELBQADggEBAJCdQgmJifzJYxVU 0/57cZ1t7YHz1OKI82fJLFERnYrGdWXF58Gvii3FXjJzZ6m0qt8YxREvftFVjf6B Gj1yP15r5dheCG1VtdQ/mjw3hm6YLecEl/qcCMTe72JBRAJskeyoMx6UWwTv1djU 0DcVmuRFk1n27ug0vhATB0Y5/Si/Oc/+8JEjewFR3fi17VjIFhgsock+aWiSwkuS RMa+VYN/qjWkM+Xe56aJ59anWoU7B5oYOoUgvVxRqttQAm59AXs1m6Mr/qyq5VzV 8vVDp1Buz5yDJeKxLtv08rU20T2K3nF6GIGx52ire2Av75bYcoXm+lqq1OUHJxKN boEt5jA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:33:46 2025 by rpki-client