$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa File: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (raw, json) Hash identifier: qrG11GqBMmomSbqTAEL+Mjy9VUvqfmZQFjuxnr1Lrn8= Subject key identifier: DC:D1:35:C5:22:43:E7:B3:AA:88:48:2F:C1:08:48:59:D8:64:B5:6D Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0722 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa Signing time: Fri 20 Jun 2025 22:11:29 +0000 ROA not before: Fri 20 Jun 2025 22:11:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63440 IP address blocks: 36.255.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855dc90-59a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:db:16:97:61:7f:5a:fa:47:c8:5a:dd:5a: 3a:2e:a5:3e:13:93:bd:1a:ae:f0:c8:da:6f:be:ed: f9:dd:49:d0:8a:d0:9f:f2:62:49:7f:cc:12:21:db: 43:76:f3:a4:86:ea:52:98:db:7b:8f:39:23:2e:df: b5:da:3f:40:a2:b3:11:da:33:0d:2f:0c:6b:29:a6: c6:9e:e5:19:20:6b:81:0c:83:a5:7c:1c:6e:24:30: c6:64:63:69:33:de:bc:c6:6d:db:4c:ae:35:45:99: 97:0c:e2:12:a3:b7:54:3c:a8:a8:96:f3:a8:64:f9: f2:96:5b:c0:83:3e:89:4a:b9:d9:fe:c8:5c:5f:25: 50:dd:fd:27:ff:ea:28:60:e5:38:2e:1a:56:e3:f7: 59:1c:19:44:3e:7e:14:aa:02:46:74:4a:31:90:d1: 4f:a1:60:0d:40:44:ae:60:6c:67:00:7f:26:e8:c3: 32:9a:20:75:8a:1a:05:d8:a5:f1:b7:98:8d:62:03: 2c:4a:d4:27:ec:9f:7b:64:69:ed:25:fe:4c:62:f3: bf:5e:61:c0:ac:73:d7:8a:2c:81:77:c4:cf:16:f0: 60:e4:d8:82:77:26:47:36:b5:2a:0f:67:1f:78:69: e2:71:d8:a2:3f:80:9a:3b:ec:24:3b:1f:f1:a4:0f: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:35:C5:22:43:E7:B3:AA:88:48:2F:C1:08:48:59:D8:64:B5:6D X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/4EDC52B27B3B11EFAF3B4433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c5:a3:4d:f8:2c:d3:d2:5f:55:88:c3:3b:80:69:6a:be:ca: 26:30:69:cc:d3:ee:bc:03:ef:25:da:10:d4:db:9b:56:e3:76: 2b:e6:db:56:9c:f6:7a:2c:71:ce:e9:36:9b:b3:5b:55:b7:da: 49:de:e5:f5:68:30:c9:f1:ad:49:13:45:c8:80:af:69:14:06: 94:45:19:2f:94:df:31:bc:b8:59:bc:aa:0a:ff:fc:8f:77:75: ff:e7:ae:54:fc:84:c2:fd:f8:2c:54:b2:50:0a:24:b3:71:81: 90:00:7e:d5:7f:4a:d0:1a:47:84:45:48:ec:2a:c3:fa:dc:b9: 6c:3f:a1:a6:78:e6:c2:25:17:7a:d1:e3:c0:c3:12:a1:f3:bc: 89:17:2c:2b:06:e6:9f:af:ad:a6:f7:3c:3b:20:0c:0d:38:7f: 6c:02:67:e6:7a:45:d2:90:8a:d1:8e:2a:94:91:35:4b:24:ba: 9a:ab:73:5b:dd:9e:b6:79:0b:48:19:08:2e:1b:4f:50:4c:22: 5e:ad:09:8e:6a:ab:ab:61:a9:c7:4b:38:78:4d:08:91:a6:37: 35:09:0a:4e:d3:d8:a5:5e:99:88:72:27:bd:a9:1f:44:70:0a: e8:63:e4:ae:f7:56:59:b2:7b:fb:6a:43:13:5c:59:73:5d:c4: 96:e3:48:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZGM5MC01OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10TbFpdhf1r6R8ha3Vo6LqU+E5O9Gq7wyNpvvu353UnQitCf8mJJf8wSIdtD dvOkhupSmNt7jzkjLt+12j9AorMR2jMNLwxrKabGnuUZIGuBDIOlfBxuJDDGZGNp M968xm3bTK41RZmXDOISo7dUPKiolvOoZPnyllvAgz6JSrnZ/shcXyVQ3f0n/+oo YOU4LhpW4/dZHBlEPn4UqgJGdEoxkNFPoWANQESuYGxnAH8m6MMymiB1ihoF2KXx t5iNYgMsStQn7J97ZGntJf5MYvO/XmHArHPXiiyBd8TPFvBg5NiCdyZHNrUqD2cf eGnicdiiP4CaO+wkOx/xpA+XcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNzRNcUi Q+ezqohIL8EISFnYZLVtMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNEVEQzUyQjI3 QjNCMTFFRkFGM0I0NDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8YwDQYJKoZIhvcNAQELBQADggEBAF3Fo034LNPSX1WI wzuAaWq+yiYwaczT7rwD7yXaENTbm1bjdivm21ac9noscc7pNpuzW1W32kne5fVo MMnxrUkTRciAr2kUBpRFGS+U3zG8uFm8qgr//I93df/nrlT8hML9+CxUslAKJLNx gZAAftV/StAaR4RFSOwqw/rcuWw/oaZ45sIlF3rR48DDEqHzvIkXLCsG5p+vrab3 PDsgDA04f2wCZ+Z6RdKQitGOKpSRNUskupqrc1vdnrZ5C0gZCC4bT1BMIl6tCY5q q6thqcdLOHhNCJGmNzUJCk7T2KVemYhyJ72pH0RwCuhj5K73Vlmye/tqQxNcWXNd xJbjSE8= -----END CERTIFICATE-----Generated at Thu Jul 3 11:39:59 2025 by rpki-client