$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa File: 36AB4096C51611E7AECA8B79C4F9AE02.roa (raw, json) Hash identifier: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w= Subject key identifier: 8A:82:36:9B:8F:91:9A:8C:05:1A:11:12:C2:9B:21:19:ED:DA:1C:16 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 2058 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa Signing time: Wed 12 Mar 2025 16:13:45 +0000 ROA not before: Wed 12 Mar 2025 16:13:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 56109 IP address blocks: 43.239.233.0/24 maxlen: 24 43.239.234.0/24 maxlen: 24 103.17.124.0/24 maxlen: 24 103.17.125.0/24 maxlen: 24 103.35.143.0/24 maxlen: 24 203.10.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8280 (0x2058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Mar 12 16:13:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d1b2b9-8686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:68:ca:73:bf:7a:12:27:84:1c:ed:75:3e: 0f:b4:5e:32:1c:c5:59:ff:3b:17:b4:86:67:86:76: 3d:ef:69:4f:f4:18:6f:c7:04:ce:51:d0:1a:a6:82: 97:20:dc:6e:6a:03:99:7a:e7:89:a5:47:53:41:4e: d6:d9:38:d4:b2:fd:39:15:bd:f4:8d:00:84:59:f9: ef:99:09:70:f3:e3:f8:e4:53:df:47:a3:57:6f:c0: ff:c5:6e:7f:c0:5d:86:07:a5:dd:53:a2:25:26:0b: 7d:df:cf:bb:78:0d:a7:e6:17:74:bc:cb:cd:1d:ce: 81:88:d5:45:c4:50:f9:e1:5f:90:d9:05:2d:f7:4e: 9d:a0:53:34:86:be:2c:ff:21:bb:fe:8b:49:99:bc: ea:b2:4e:18:67:53:88:ac:e5:5f:14:f0:a8:9a:f6: 02:d6:dd:9d:a8:f8:5a:22:c1:04:ad:8c:3b:d5:f8: cf:0d:2f:a2:c3:d7:2d:c2:82:f8:cd:73:36:b0:bb: f0:27:bd:65:9a:1d:87:81:40:57:1f:0c:15:09:8f: 0a:61:37:ec:19:01:7e:d8:ce:08:10:8b:82:c5:38: c2:7e:2e:2b:21:89:68:0c:65:57:6b:07:38:b3:69: 2c:1e:92:89:16:7b:e1:e6:b7:1c:09:50:36:f6:9b: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:36:9B:8F:91:9A:8C:05:1A:11:12:C2:9B:21:19:ED:DA:1C:16 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.233.0-43.239.234.255 103.17.124.0/23 103.35.143.0/24 203.10.58.0/24 Signature Algorithm: sha256WithRSAEncryption b0:bb:67:5a:cc:4f:19:65:3f:95:11:a5:8b:39:89:90:55:90: 43:2e:a9:21:85:23:0d:0e:8c:0f:98:69:69:6d:5e:b9:1a:49: 1e:5c:a7:d9:63:7b:03:f7:7f:99:ba:a1:b8:bf:66:a3:0a:8e: a3:e8:7f:88:99:52:bb:d8:c6:eb:df:cf:7c:d9:f5:07:82:e5: 04:17:cb:a7:2d:b3:16:36:19:42:59:ca:59:5f:01:ba:5d:5a: d3:35:68:89:42:26:0b:a1:6a:3a:e9:b9:8c:bd:4d:92:d6:0f: f0:33:d6:6e:ad:d6:c9:94:ef:32:ed:87:86:ab:6d:c3:53:34: 02:3c:13:c5:5f:ac:cb:18:13:c2:ff:c5:c4:61:cb:b0:11:fa: 04:bb:67:3f:ad:3f:e3:82:04:49:16:e3:91:0f:d2:db:fc:3a: 4e:dd:38:29:9b:eb:06:cb:00:74:ca:d6:ca:4c:57:e1:ad:db: 2e:23:9e:1d:a7:1f:f5:60:c0:f5:95:2f:e2:c0:ee:cc:f2:1f: 49:e3:19:5e:51:a3:5d:45:e7:9a:97:7b:fe:e0:4a:ea:64:a1: 68:50:de:81:1c:f0:a0:cb:29:2c:ba:06:d3:30:43:ba:fa:04: b1:cb:d8:9a:98:b3:d5:66:45:98:12:6c:a2:76:46:9e:05:1f: 35:ab:00:70 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICIFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwMzEyMTYxMzQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxYjJiOS04Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf1oynO/ehInhBztdT4PtF4yHMVZ/zsXtIZnhnY972lP9BhvxwTOUdAapoKX INxuagOZeueJpUdTQU7W2TjUsv05Fb30jQCEWfnvmQlw8+P45FPfR6NXb8D/xW5/ wF2GB6XdU6IlJgt938+7eA2n5hd0vMvNHc6BiNVFxFD54V+Q2QUt906doFM0hr4s /yG7/otJmbzqsk4YZ1OIrOVfFPComvYC1t2dqPhaIsEErYw71fjPDS+iw9ctwoL4 zXM2sLvwJ71lmh2HgUBXHwwVCY8KYTfsGQF+2M4IEIuCxTjCfi4rIYloDGVXawc4 s2ksHpKJFnvh5rccCVA29pvnUQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFIqCNpuP kZqMBRoREsKbIRnt2hwWMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcyNEIvMUJDNzFBNjIxNjg5MTFFNjhFRUZEOTdCQzRGOUFFMDIvMzZBQjQwOTZD NTE2MTFFN0FFQ0E4Qjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCAwDAMEACvv6QMEACvv6gMEAWcRfAMEAGcjjwMEAMsKOjANBgkq hkiG9w0BAQsFAAOCAQEAsLtnWsxPGWU/lRGlizmJkFWQQy6pIYUjDQ6MD5hpaW1e uRpJHlyn2WN7A/d/mbqhuL9mowqOo+h/iJlSu9jG69/PfNn1B4LlBBfLpy2zFjYZ QlnKWV8Bul1a0zVoiUImC6FqOum5jL1NktYP8DPWbq3WyZTvMu2Hhqttw1M0AjwT xV+syxgTwv/FxGHLsBH6BLtnP60/44IESRbjkQ/S2/w6Tt04KZvrBssAdMrWykxX 4a3bLiOeHacf9WDA9ZUv4sDuzPIfSeMZXlGjXUXnmpd7/uBK6mShaFDegRzwoMsp LLoG0zBDuvoEscvYmpiz1WZFmBJsonZGngUfNasAcA== -----END CERTIFICATE-----Generated at Sat Apr 26 07:45:29 2025 by rpki-client