$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa File: 46497846F56111EFA41A451BC4F9AE02.roa (raw, json) Hash identifier: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc= Subject key identifier: 48:15:44:F3:3D:0B:B1:C7:79:02:57:6A:C9:39:2F:5D:6A:DB:56:F9 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 04 Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa Signing time: Thu 27 Feb 2025 23:20:12 +0000 ROA not before: Thu 27 Feb 2025 23:20:12 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152162 IP address blocks: 36.50.83.0/24 maxlen: 24 163.61.246.0/24 maxlen: 24 2001:df3:46c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: Feb 27 23:20:12 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c0f32c-a972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:b3:51:a9:0e:a4:fc:82:a3:fd:f5:32:be: 38:e8:7a:ae:4c:51:7d:4c:ad:d1:d3:7b:c3:2f:b0: f4:b8:3c:63:3b:73:92:97:16:c9:bb:17:8b:b0:b1: 91:a6:15:df:52:e4:e6:a8:55:12:a5:1b:dd:8e:39: b3:e9:54:76:43:c1:1e:e5:89:c0:66:dc:d1:2c:38: da:0c:28:89:1b:cc:29:7f:26:e5:a7:47:de:d7:b0: f1:c5:bc:94:b5:0d:2c:5b:fc:cb:a5:ed:31:22:f6: 63:20:32:62:12:d5:15:47:30:02:c3:e0:5d:09:37: e0:e7:4e:fa:f1:09:15:43:eb:79:54:3c:5b:83:97: 8e:f4:57:58:85:21:fa:33:8e:c1:2f:b2:8c:1d:b9: 07:16:bd:03:e4:40:cb:51:e6:fe:5c:75:7e:59:ab: 08:a8:a6:75:2b:a4:95:c7:ea:50:73:c2:9c:20:2e: 32:6d:8b:9c:d8:7f:65:c1:d5:7b:f0:4e:13:b0:f6: ba:78:37:45:3b:d0:41:41:f9:4a:f6:48:d6:02:60: b9:77:fa:f8:44:0d:6b:77:58:ee:60:ef:3e:58:42: af:33:3d:f2:3a:1c:6e:47:b8:f4:9e:73:c7:6b:b9: be:1b:d3:d1:55:6a:48:a1:77:76:2e:e1:f8:91:c0: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:44:F3:3D:0B:B1:C7:79:02:57:6A:C9:39:2F:5D:6A:DB:56:F9 X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/46497846F56111EFA41A451BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.83.0/24 163.61.246.0/24 IPv6: 2001:df3:46c0::/48 Signature Algorithm: sha256WithRSAEncryption 89:37:7e:e3:a4:bf:3a:c9:79:7a:78:d1:8a:37:22:82:f5:73: 21:fc:e2:a2:d3:02:59:91:db:cf:4c:b9:d4:73:f6:ce:7d:3f: 0f:ab:94:3c:fb:fc:0c:87:0b:08:9b:51:5c:0c:d4:72:31:75: 42:51:8e:de:f4:73:da:f5:31:a8:b1:59:97:90:f8:bf:ec:5c: f3:dc:c7:f1:9d:06:18:43:ef:ba:0c:09:64:3b:a2:d7:7c:f0: 24:e9:64:91:97:2d:7f:f9:e1:78:c4:59:99:02:2f:ad:34:0d: a1:9d:cf:0f:3c:b2:5f:5f:63:e0:4f:e2:a4:58:30:e2:8b:41: 8f:7f:a0:9f:f3:b2:06:be:30:e8:30:8e:b1:8f:d4:88:5d:12: 1d:02:1a:dd:47:4b:3a:6d:9e:bd:c6:7d:7a:00:dd:eb:9e:61: 66:de:4f:e5:08:b3:12:c9:4d:3e:7d:c4:12:d9:89:ae:cc:e6: 45:5b:93:a0:bd:86:90:61:00:ea:88:b2:75:78:f2:07:20:d2: 39:7a:74:82:b1:7a:af:44:58:79:29:f5:63:c5:6a:96:7d:6d: de:65:85:02:da:36:6b:92:c2:f7:07:01:f0:5c:85:f4:95:5f: fa:2d:4b:63:bc:62:6b:ec:3d:cb:1c:2f:fa:6e:12:ad:74:1d: a8:cd:13:99 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjAxRTExMC8GA1UEBRMoN0RCRjgzQUU1MjgyQzg0RUIwRUZGNTVENUMxQzY3ODAx Q0I2NDVDNDAeFw0yNTAyMjcyMzIwMTJaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzBmMzJjLWE5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53LNRqQ6k/IKj/fUyvjjoeq5MUX1MrdHTe8MvsPS4PGM7c5KXFsm7F4uwsZGm Fd9S5OaoVRKlG92OObPpVHZDwR7licBm3NEsONoMKIkbzCl/JuWnR97XsPHFvJS1 DSxb/Mul7TEi9mMgMmIS1RVHMALD4F0JN+DnTvrxCRVD63lUPFuDl470V1iFIfoz jsEvsowduQcWvQPkQMtR5v5cdX5ZqwiopnUrpJXH6lBzwpwgLjJti5zYf2XB1Xvw ThOw9rp4N0U70EFB+Ur2SNYCYLl3+vhEDWt3WO5g7z5YQq8zPfI6HG5HuPSec8dr ub4b09FVakihd3Yu4fiRwHA1AgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUSBVE8z0L scd5AldqyTkvXWrbVvkwHwYDVR0jBBgwFoAUfb+DrlKCyE6w7/VdXBxngBy2RcQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2MDFFL0ZGNDg3NUJFRjU2 MDExRUY5QzgyQjcxQUM0RjlBRTAyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJj US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmItRHJsS0N5RTZ3N19WZFhCeG5nQnkyUmNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAxRS9GRjQ4NzVCRUY1NjAxMUVGOUM4MkI3MUFDNEY5QUUwMi80NjQ5Nzg0NkY1 NjExMUVGQTQxQTQ1MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwEgQCAAEwDAMEACQyUwMEAKM99jAPBAIAAjAJAwcAIAEN80bAMA0GCSqGSIb3 DQEBCwUAA4IBAQCJN37jpL86yXl6eNGKNyKC9XMh/OKi0wJZkdvPTLnUc/bOfT8P q5Q8+/wMhwsIm1FcDNRyMXVCUY7e9HPa9TGosVmXkPi/7Fzz3MfxnQYYQ++6DAlk O6LXfPAk6WSRly1/+eF4xFmZAi+tNA2hnc8PPLJfX2PgT+KkWDDii0GPf6Cf87IG vjDoMI6xj9SIXRIdAhrdR0s6bZ69xn16AN3rnmFm3k/lCLMSyU0+fcQS2YmuzOZF W5OgvYaQYQDqiLJ1ePIHINI5enSCsXqvRFh5KfVjxWqWfW3eZYUC2jZrksL3BwHw XIX0lV/6LUtjvGJr7D3LHC/6bhKtdB2ozROZ -----END CERTIFICATE-----Generated at Wed May 14 14:55:07 2025 by rpki-client