$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa File: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (raw, json) Hash identifier: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM= Subject key identifier: 84:D8:CC:6B:3F:60:A6:5E:6C:C6:CA:F6:C0:0A:71:A8:3E:80:CD:26 Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 06 Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa Signing time: Mon 03 Mar 2025 13:14:22 +0000 ROA not before: Mon 03 Mar 2025 13:14:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153568 IP address blocks: 163.61.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75 Validity Not Before: Mar 3 13:14:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c5ab2e-6fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:af:8d:c9:ac:42:55:0f:96:fb:f8:3a:f9: f3:46:ae:a3:25:6f:85:b3:10:fc:24:86:77:e3:d1: bf:bc:39:bd:17:9f:b6:70:7b:16:80:7d:77:ca:fa: cf:e9:ae:3f:67:c4:e7:e2:df:07:72:58:92:94:39: 9a:55:8e:92:7c:44:36:5a:26:75:9a:91:b4:d1:94: 11:ab:55:9f:ca:40:01:0b:b1:92:26:26:6b:72:50: ad:9a:e5:4c:78:ce:a1:88:f5:51:38:13:1d:38:e3: 1e:eb:06:7f:b2:96:c6:7f:5e:21:2b:9c:18:8f:f3: a5:2a:14:70:07:7e:41:57:98:a5:88:b1:33:5f:5d: 30:03:1c:05:1c:4b:9d:f4:6c:51:9c:5c:b1:fa:33: 03:e5:18:90:3b:e0:57:e4:d1:ba:47:fb:33:a7:ba: 64:05:f6:23:e1:16:36:8e:ec:ff:63:9d:23:dd:c7: e6:83:df:15:38:0f:6e:cb:c7:2c:c8:c1:7f:10:9c: 29:26:cb:c9:d6:82:ff:de:ed:f9:1c:b3:83:21:f4: 4f:c7:c3:bd:11:50:bf:4b:30:60:0b:be:9f:c3:da: fe:4b:8e:10:36:69:71:94:79:7c:3f:c2:81:76:3e: 58:9e:d3:72:9b:c1:23:7c:db:44:70:02:ca:9b:8c: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D8:CC:6B:3F:60:A6:5E:6C:C6:CA:F6:C0:0A:71:A8:3E:80:CD:26 X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.188.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:d7:72:50:de:23:df:92:dd:39:4a:91:78:83:4c:d7:a0:8a: e1:9d:3f:63:ed:d3:54:5f:5b:88:d5:ed:35:a9:e1:ca:79:ad: 95:6c:00:ec:32:c2:89:89:21:3f:2e:95:a8:51:18:8a:77:12: 9b:5c:7a:03:fd:8c:7e:39:7e:97:fe:fb:73:8e:0d:68:87:43: 8e:b4:42:1e:03:a1:58:21:e0:c0:d1:8a:79:70:3a:c4:2c:d5: 2c:25:17:19:26:30:da:79:db:8b:eb:a8:c6:0d:3d:1a:9f:ea: 61:d7:2b:36:52:4d:c7:55:44:75:ad:df:0d:b5:59:c7:56:cc: fc:6a:24:65:92:a8:0a:66:57:69:6d:f3:d0:18:7b:d2:70:4e: f3:62:47:4f:51:e5:e5:a0:d7:94:2b:42:1c:6d:ac:bb:ad:94: a3:a7:ad:7f:67:e4:da:0a:8e:29:be:c6:3d:7a:1e:da:bb:09: 2a:33:07:db:e9:f8:62:f7:67:20:20:79:32:85:cb:49:a4:4d: b6:ee:4b:c6:57:7f:03:50:1a:59:78:73:40:1e:ce:d3:10:ff: bd:08:b2:c9:fe:f0:68:47:8b:50:e1:a9:a4:d9:7a:9b:7f:bf: 30:89:ee:30:96:c4:f1:5a:ff:04:f7:92:df:41:e5:6a:bd:4d: 25:93:27:53 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTAzMDMxMzE0MjJaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzVhYjJlLTZmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgwK+NyaxCVQ+W+/g6+fNGrqMlb4WzEPwkhnfj0b+8Ob0Xn7ZwexaAfXfK+s/p rj9nxOfi3wdyWJKUOZpVjpJ8RDZaJnWakbTRlBGrVZ/KQAELsZImJmtyUK2a5Ux4 zqGI9VE4Ex044x7rBn+ylsZ/XiErnBiP86UqFHAHfkFXmKWIsTNfXTADHAUcS530 bFGcXLH6MwPlGJA74Ffk0bpH+zOnumQF9iPhFjaO7P9jnSPdx+aD3xU4D27LxyzI wX8QnCkmy8nWgv/e7fkcs4Mh9E/Hw70RUL9LMGALvp/D2v5LjhA2aXGUeXw/woF2 Plie03KbwSN820RwAsqbjEyfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhNjMaz9g pl5sxsr2wApxqD6AzSYwHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkE3NS9FRjVDRDZEQUY1MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi82QkQ0QkIxNkY4 MzExMUVGQkE2NDkxMUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9vDANBgkqhkiG9w0BAQsFAAOCAQEAj9dyUN4j35LdOUqR eINM16CK4Z0/Y+3TVF9biNXtNanhynmtlWwA7DLCiYkhPy6VqFEYincSm1x6A/2M fjl+l/77c44NaIdDjrRCHgOhWCHgwNGKeXA6xCzVLCUXGSYw2nnbi+uoxg09Gp/q YdcrNlJNx1VEda3fDbVZx1bM/GokZZKoCmZXaW3z0Bh70nBO82JHT1Hl5aDXlCtC HG2su62Uo6etf2fk2gqOKb7GPXoe2rsJKjMH2+n4YvdnICB5MoXLSaRNtu5Lxld/ A1AaWXhzQB7O0xD/vQiyyf7waEeLUOGppNl6m3+/MInuMJbE8Vr/BPeS30Hlar1N JZMnUw== -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:12 2025 by rpki-client