$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa File: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (raw, json) Hash identifier: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM= Subject key identifier: 2F:56:9C:5F:79:F9:E7:C2:5E:35:B7:E1:71:EC:07:F3:E2:4D:CE:7B Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 87 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa Signing time: Tue 25 Feb 2025 07:58:36 +0000 ROA not before: Tue 25 Feb 2025 07:58:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153035 IP address blocks: 203.12.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Feb 25 07:58:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd782c-9624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:c2:18:b9:a9:fc:97:97:82:f4:b6:e2:65: aa:e0:13:6b:f7:cb:a0:a7:dd:dd:90:00:c8:47:2d: 05:a6:b0:16:76:a5:f9:70:14:d3:a3:4a:b6:82:e6: 72:4a:4f:f5:90:80:87:32:73:d3:9e:f0:b4:a8:71: 0d:ec:24:7b:2e:a4:f1:8f:9d:5f:7c:a6:54:9d:ba: df:34:5d:9d:3f:b0:10:97:a6:04:89:10:c6:13:73: 19:17:e6:1a:2e:b1:2a:c6:72:b4:44:3e:f3:54:df: d4:d6:98:4f:91:34:2c:6e:59:de:92:ae:f4:b7:32: ea:b4:da:a6:4b:7e:2c:e0:a7:66:36:8f:0e:5b:d0: 84:bc:45:f9:49:91:69:09:f3:43:fb:dd:a5:f3:31: e0:22:36:e1:44:bc:12:b9:a6:7b:44:06:d3:60:cb: a4:b2:f5:ae:68:2c:fa:fb:40:0a:3e:54:07:98:b9: 36:1b:bc:8b:f8:42:15:ab:05:6f:0c:a5:75:78:fd: 19:96:5e:3b:95:db:d7:fb:d5:3d:ff:bd:b2:0b:c8: 40:aa:2e:76:38:0f:ba:17:62:2a:3c:b4:bc:5b:80: 1e:89:9a:8b:af:43:3d:c3:4a:28:e6:04:79:17:1c: 12:c1:f8:5f:f7:bf:1f:99:c0:10:0c:8b:1f:1f:f7: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:56:9C:5F:79:F9:E7:C2:5E:35:B7:E1:71:EC:07:F3:E2:4D:CE:7B X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.12.249.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e7:5f:4b:30:d6:26:3e:66:9c:c7:6f:3c:65:9a:71:2c:7d: 7b:8a:a9:29:0d:d5:f5:94:8a:70:41:54:d8:6e:d5:0d:51:ef: 30:e4:eb:0e:29:42:2f:71:a0:ea:50:34:29:83:4f:bc:8d:40: d7:db:e5:75:69:9b:fb:a0:fc:3b:74:aa:df:16:81:7e:6b:56: c9:d0:34:3c:c2:de:a1:38:54:02:68:33:0f:6c:d9:25:33:41: b5:97:b0:0f:3a:1f:92:4e:58:b2:ae:27:54:91:b9:44:10:b7: 57:f3:f1:a8:b4:f1:8c:d6:47:3e:ff:63:70:80:77:13:6a:02: 9a:20:60:37:99:84:99:cd:ae:fa:04:2c:4d:69:65:3c:04:8b: 40:cb:48:06:e7:89:94:36:93:ae:63:1e:41:cb:bc:0e:f9:19: 60:03:39:45:dc:b5:ac:a1:11:39:2d:fd:09:62:3b:2b:39:07: 39:0b:40:57:a7:03:8e:cf:81:ce:4c:0c:d3:f6:c7:93:65:28: 4a:f5:9e:24:b0:a9:9c:44:b6:1c:ff:34:91:18:ac:8e:7a:f3: 94:11:ec:08:e5:7f:e3:36:3d:48:35:16:d4:ec:14:66:c1:1d: 5a:c6:d0:f0:8d:b8:f2:ec:f6:bd:16:35:5c:ea:52:52:e1:fe: 7e:e6:55:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwMjI1MDc1ODM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkNzgyYy05NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HrCGLmp/JeXgvS24mWq4BNr98ugp93dkADIRy0FprAWdqX5cBTTo0q2guZy Sk/1kICHMnPTnvC0qHEN7CR7LqTxj51ffKZUnbrfNF2dP7AQl6YEiRDGE3MZF+Ya LrEqxnK0RD7zVN/U1phPkTQsblnekq70tzLqtNqmS34s4KdmNo8OW9CEvEX5SZFp CfND+92l8zHgIjbhRLwSuaZ7RAbTYMuksvWuaCz6+0AKPlQHmLk2G7yL+EIVqwVv DKV1eP0Zll47ldvX+9U9/72yC8hAqi52OA+6F2IqPLS8W4AeiZqLr0M9w0oo5gR5 FxwSwfhf978fmcAQDIsfH/dnmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC9WnF95 +efCXjW34XHsB/PiTc57MB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNDNzYvQjQ5OTJENTIzNDU4MTFFRkI0MkY5RDM3QzRGOUFFMDIvNTBGMEFGOEVC MkJFMTFFRkExMDg5NDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLDPkwDQYJKoZIhvcNAQELBQADggEBAHznX0sw1iY+ZpzH bzxlmnEsfXuKqSkN1fWUinBBVNhu1Q1R7zDk6w4pQi9xoOpQNCmDT7yNQNfb5XVp m/ug/Dt0qt8WgX5rVsnQNDzC3qE4VAJoMw9s2SUzQbWXsA86H5JOWLKuJ1SRuUQQ t1fz8ai08YzWRz7/Y3CAdxNqApogYDeZhJnNrvoELE1pZTwEi0DLSAbniZQ2k65j HkHLvA75GWADOUXctayhETkt/QliOys5BzkLQFenA47Pgc5MDNP2x5NlKEr1niSw qZxEthz/NJEYrI5685QR7Ajlf+M2PUg1FtTsFGbBHVrG0PCNuPLs9r0WNVzqUlLh /n7mVRU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net