$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa File: D10BFC0C1E6E11F08BA4E242C4F9AE02.roa (raw, json) Hash identifier: LimuvB7UEOrVxm5RgQo0+d6HjZXs31DAQZuDxzoJx9E= Subject key identifier: 0E:78:C0:2D:0B:BA:0E:F6:92:6D:EE:52:E8:9A:D8:0E:16:3A:9A:84 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 06F8 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa Signing time: Mon 21 Apr 2025 05:09:35 +0000 ROA not before: Mon 21 Apr 2025 05:09:35 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 5065 IP address blocks: 36.255.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 22:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1784 (0x6f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Apr 21 05:09:35 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6805d30f-3561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:39:48:e7:54:19:35:d0:14:4b:cf:25:41: 35:9c:4a:32:9b:52:f0:d7:e1:df:f1:92:d8:eb:35: f6:36:ad:57:60:50:07:d8:a6:f9:71:3b:43:2a:09: ac:87:7b:bd:c7:19:55:21:56:d2:0c:cb:8a:c7:f6: 4f:ed:1c:01:4e:2f:3e:e9:23:0c:7e:26:c8:05:36: f7:6f:98:1a:db:e0:e3:96:86:5c:a6:3f:66:b7:16: bf:14:ab:61:63:ce:e6:cb:8b:9b:d1:9d:1f:17:69: bc:c3:39:ed:1e:84:b7:e9:75:1e:38:27:d8:a0:54: e9:c5:8c:8e:39:0f:a3:55:ae:70:01:bb:d3:69:83: f9:99:57:1f:68:cf:05:3d:41:a8:c8:4a:5c:a9:1d: 36:95:73:a6:32:c8:35:a6:d3:70:68:30:61:ae:1b: 0a:01:c3:ac:20:ff:ed:db:c4:5e:67:1b:c2:d0:25: e6:02:6b:df:3e:01:4f:49:0a:97:43:2d:d0:8b:0a: 86:6a:93:5d:19:a5:4b:c1:20:cd:d2:51:13:db:70: 7b:79:79:6c:8a:bc:ad:d5:38:2c:5d:1a:c3:e9:fb: 02:91:b0:95:64:23:00:c8:85:b9:9b:6b:2a:f1:18: 46:ee:24:8e:31:cd:7f:33:d4:57:79:ba:9c:2c:26: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:78:C0:2D:0B:BA:0E:F6:92:6D:EE:52:E8:9A:D8:0E:16:3A:9A:84 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.197.0/24 Signature Algorithm: sha256WithRSAEncryption 14:3b:fa:f7:13:98:5c:d7:85:57:7a:c9:e1:37:08:48:d2:3e: 86:6d:64:ad:bd:80:6f:cd:45:d1:25:e3:cd:11:ce:ff:c1:70: 80:39:b6:3a:ea:a7:db:85:8c:c8:63:8d:ea:57:0c:4b:6f:61: ce:95:b8:57:3e:ce:91:37:bc:ad:02:74:38:f8:90:17:0a:6b: 07:fc:82:1b:58:f9:29:4d:2d:d7:b8:22:60:42:12:2a:9c:8b: d7:d5:d0:23:c6:be:51:b6:65:b9:fb:93:36:1f:4f:0d:ff:74: 13:78:b5:5b:6e:f3:2d:36:50:d5:08:4e:1c:27:2a:02:7c:77: 17:8f:b3:8f:f4:99:2f:f5:50:1c:4c:1a:d0:cb:d0:48:21:f6: 8c:93:ca:38:64:c5:13:38:b6:65:84:d3:e0:40:4e:01:73:08: 4c:f1:ca:43:51:e4:75:40:f1:b1:36:7c:ee:4b:64:b8:3c:36: 9a:48:ec:31:0a:1e:23:8c:87:22:b2:60:11:1e:74:cf:ef:54: ee:7b:2c:ae:7f:ec:e5:fc:c3:b4:70:4b:76:75:9e:81:a6:ee: d1:62:cc:76:d0:44:45:e9:6e:1d:ff:37:29:8a:c7:2e:6b:4a: 06:38:c2:64:0d:2d:4b:00:00:6c:c4:c9:a3:f5:25:7e:c4:31: 88:f9:90:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNDIxMDUwOTM1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA1ZDMwZi0zNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4g5SOdUGTXQFEvPJUE1nEoym1Lw1+Hf8ZLY6zX2Nq1XYFAH2Kb5cTtDKgms h3u9xxlVIVbSDMuKx/ZP7RwBTi8+6SMMfibIBTb3b5ga2+DjloZcpj9mtxa/FKth Y87my4ub0Z0fF2m8wzntHoS36XUeOCfYoFTpxYyOOQ+jVa5wAbvTaYP5mVcfaM8F PUGoyEpcqR02lXOmMsg1ptNwaDBhrhsKAcOsIP/t28ReZxvC0CXmAmvfPgFPSQqX Qy3QiwqGapNdGaVLwSDN0lET23B7eXlsiryt1TgsXRrD6fsCkbCVZCMAyIW5m2sq 8RhG7iSOMc1/M9RXebqcLCYiJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA54wC0L ug72km3uUuia2A4WOpqEMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRDEwQkZDMEMx RTZFMTFGMDhCQTRFMjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8UwDQYJKoZIhvcNAQELBQADggEBABQ7+vcTmFzXhVd6 yeE3CEjSPoZtZK29gG/NRdEl480Rzv/BcIA5tjrqp9uFjMhjjepXDEtvYc6VuFc+ zpE3vK0CdDj4kBcKawf8ghtY+SlNLde4ImBCEiqci9fV0CPGvlG2Zbn7kzYfTw3/ dBN4tVtu8y02UNUIThwnKgJ8dxePs4/0mS/1UBxMGtDL0Egh9oyTyjhkxRM4tmWE 0+BATgFzCEzxykNR5HVA8bE2fO5LZLg8NppI7DEKHiOMhyKyYBEedM/vVO57LK5/ 7OX8w7RwS3Z1noGm7tFizHbQREXpbh3/NymKxy5rSgY4wmQNLUsAAGzEyaP1JX7E MYj5kFo= -----END CERTIFICATE-----Generated at Wed Apr 23 04:14:58 2025 by rpki-client on console.sobornost.net