$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa File: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (raw, json) Hash identifier: RH9GugeUqxFAlpVwNYGHYX1wxhyc5gJGTmNYoQjg2Ew= Subject key identifier: 52:4C:95:5B:43:0A:B9:AB:40:D6:7D:E2:4C:88:FD:6E:01:37:D6:34 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 0534 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa Signing time: Tue 06 May 2025 23:33:41 +0000 ROA not before: Tue 06 May 2025 23:33:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55470 IP address blocks: 202.41.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: May 6 23:33:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a9c54-c3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:db:81:a5:32:08:e7:d6:b3:74:78:cd:9a: 7b:a1:d1:b5:6b:45:26:6a:64:a9:45:2d:c8:35:80: df:bf:2d:33:e0:85:ca:4c:00:97:c7:94:2d:18:b7: 21:71:56:95:6c:9d:53:b1:b2:cc:a9:0a:f3:eb:14: f3:68:8d:1e:22:79:2c:b6:0e:d6:07:2e:b1:c0:91: 5e:fc:e2:05:8e:cb:51:63:f1:98:06:86:1d:09:66: 43:10:d8:e6:8e:5c:29:93:66:5d:71:78:4f:b6:13: 07:ed:57:48:fc:36:8b:10:9e:f7:28:86:4b:c3:43: 1b:33:98:33:91:dd:b8:e3:ea:7c:73:34:a7:17:f6: 5f:51:75:95:30:b8:2c:d3:08:98:5d:d2:2f:11:25: 6e:d2:74:88:0a:cc:2d:ff:28:e3:f5:11:af:75:78: 80:00:2f:28:a2:bc:54:58:59:bd:f0:39:19:a8:2f: 2b:c9:87:6d:b8:7f:04:35:0f:70:87:97:f7:be:b3: 6c:ee:fa:08:81:f1:86:47:2f:63:9e:64:6b:bf:42: fa:bf:e3:e3:52:bd:87:1b:17:39:39:cc:34:45:89: 72:eb:ea:0e:d1:ea:64:36:74:f4:4c:b0:ce:22:0c: 2e:5c:7e:b9:52:d7:62:b6:d0:02:23:53:ea:65:cd: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:95:5B:43:0A:B9:AB:40:D6:7D:E2:4C:88:FD:6E:01:37:D6:34 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.64.0/24 Signature Algorithm: sha256WithRSAEncryption a8:47:66:35:1f:c5:05:f3:7b:e0:db:6c:3d:49:4c:6f:85:a5: 30:45:61:38:0d:0a:ed:fa:53:1c:db:7c:3e:a4:36:10:95:54: 98:76:e5:c6:f9:27:e2:b5:06:2a:33:10:69:83:79:5f:14:e5: 9b:37:52:9e:0b:03:ec:13:7f:8f:7b:66:a0:02:3c:25:c9:dc: 8f:c4:9e:72:1c:2f:dd:bd:e7:85:fa:a2:81:bb:a3:d5:23:4f: 16:22:16:bd:fc:ed:b8:4e:23:e2:78:65:bf:09:00:0d:3e:0e: 15:35:3a:a7:9f:60:df:f2:1f:6e:79:b6:3e:73:96:08:92:c7: 3d:7f:b2:84:b8:ed:39:e7:ce:46:e9:b4:a8:b9:f4:a4:65:37: b3:25:64:24:07:68:86:67:6f:39:50:06:d5:b8:41:98:97:7e: 1e:44:4e:aa:c1:b7:81:e9:28:82:a3:29:5c:34:92:14:9a:f4: b0:56:10:64:0b:e4:59:05:41:f3:34:3a:27:3d:6d:e4:e6:2a: c9:aa:ad:79:89:50:5e:de:15:27:54:0f:25:a3:35:4b:46:74: b4:31:1f:af:d3:f7:16:e0:91:23:a9:25:b6:13:fc:f8:bd:f2: 0f:34:37:e7:c0:db:24:36:34:59:a4:0c:20:53:43:45:24:67: eb:e5:e3:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjUwNTA2MjMzMzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhOWM1NC1jM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0LbgaUyCOfWs3R4zZp7odG1a0UmamSpRS3INYDfvy0z4IXKTACXx5QtGLch cVaVbJ1TsbLMqQrz6xTzaI0eInkstg7WBy6xwJFe/OIFjstRY/GYBoYdCWZDENjm jlwpk2ZdcXhPthMH7VdI/DaLEJ73KIZLw0MbM5gzkd244+p8czSnF/ZfUXWVMLgs 0wiYXdIvESVu0nSICswt/yjj9RGvdXiAAC8oorxUWFm98DkZqC8ryYdtuH8ENQ9w h5f3vrNs7voIgfGGRy9jnmRrv0L6v+PjUr2HGxc5Ocw0RYly6+oO0epkNnT0TLDO IgwuXH65UtdittACI1PqZc04lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFJMlVtD CrmrQNZ94kyI/W4BN9Y0MB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNkVDMEUzNjgwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMzZDNEZBQUFB OUZDMTFFRUJFRjNFNjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKKUAwDQYJKoZIhvcNAQELBQADggEBAKhHZjUfxQXze+Db bD1JTG+FpTBFYTgNCu36UxzbfD6kNhCVVJh25cb5J+K1BiozEGmDeV8U5Zs3Up4L A+wTf497ZqACPCXJ3I/EnnIcL92954X6ooG7o9UjTxYiFr387bhOI+J4Zb8JAA0+ DhU1OqefYN/yH255tj5zlgiSxz1/soS47TnnzkbptKi59KRlN7MlZCQHaIZnbzlQ BtW4QZiXfh5ETqrBt4HpKIKjKVw0khSa9LBWEGQL5FkFQfM0Oic9beTmKsmqrXmJ UF7eFSdUDyWjNUtGdLQxH6/T9xbgkSOpJbYT/Pi98g80N+fA2yQ2NFmkDCBTQ0Uk Z+vl49E= -----END CERTIFICATE-----Generated at Sun May 11 19:18:56 2025 by rpki-client