$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa File: D56D67B0F48711EFBB2D9D73C4F9AE02.roa (raw, json) Hash identifier: IcKmF13UvgbjR5e+pq74azw6DFKPoTGhWhM8VYVh+JY= Subject key identifier: 10:33:E9:DB:1D:4A:00:4C:5A:C5:5A:1D:21:F6:10:3E:26:4A:4F:3C Certificate issuer: /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1 Certificate serial: 02 Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa Signing time: Wed 26 Feb 2025 21:22:51 +0000 ROA not before: Wed 26 Feb 2025 21:22:51 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133214 IP address blocks: 163.61.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A75A Validity Not Before: Feb 26 21:22:51 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67bf862b-66be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:c5:a5:3d:12:6f:05:32:e2:7b:96:a1:86: 3a:6a:df:49:38:bd:1f:86:b7:bb:9b:a2:44:3d:f4: 0c:46:7e:d7:fa:25:ef:ff:1f:f1:6b:2d:02:b4:9f: 4a:36:ab:74:2a:4f:ee:77:e4:8e:80:ed:82:73:16: 2b:fd:d7:f3:3f:2d:87:a0:86:0c:ad:ad:44:e1:1b: 72:9a:10:f8:f7:dc:8c:c4:1f:f9:70:c2:e0:d9:f2: 1a:33:32:1e:a8:55:f7:ec:7d:b7:b7:27:d5:0e:97: 3d:1f:d5:7c:f0:e4:91:52:d9:dd:12:f0:63:d8:53: 67:82:83:00:0f:66:3f:1c:c3:1c:7e:9e:8f:40:2d: 4b:46:56:ab:8e:41:ed:74:a2:f3:07:16:46:85:65: b7:d6:cf:51:ce:96:6a:f1:46:c1:28:d7:c7:06:2b: 70:4b:2b:21:60:e3:8e:8b:5a:a2:b9:e5:79:ec:8d: 9a:a7:3d:e1:c7:d9:8e:a1:16:1b:79:6c:13:f3:e5: 5a:16:99:3e:43:3c:0c:32:7c:f1:2c:fe:68:a8:bf: e1:92:f5:ce:3a:98:32:df:91:6f:5f:24:9e:41:2f: 0d:4c:92:e8:3a:50:8c:15:63:32:bd:c6:12:6e:ce: f5:06:78:8d:a5:ce:da:9d:ab:8d:f1:f5:18:18:4b: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:E9:DB:1D:4A:00:4C:5A:C5:5A:1D:21:F6:10:3E:26:4A:4F:3C X509v3 Authority Key Identifier: keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.200.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ab:9e:ad:b5:eb:c7:a3:a8:0d:4a:56:8f:6c:e5:d7:16:6a: 3a:fd:fa:f6:32:5d:33:4b:d5:2d:a0:0a:3b:09:1e:7d:df:7c: e5:04:f8:03:3e:35:6f:b4:70:cb:e9:a9:9b:b9:fa:57:91:1c: 46:a6:53:c0:df:18:a8:b8:12:3d:9d:72:92:2d:89:d2:8a:d0: 01:01:e1:81:d1:6c:bc:a5:f7:ac:94:11:3f:01:42:0d:7d:09: 10:64:c4:23:e0:b3:42:4b:b5:3a:f8:c0:c6:ad:ae:4b:9a:1d: b9:ac:1e:39:c1:dd:a4:ae:3c:21:82:16:4d:6e:73:22:65:b1: 6f:78:5e:8d:d9:46:0a:b5:65:26:59:ec:90:60:da:1b:29:f4: 99:df:b5:d2:ef:92:94:88:40:19:1e:7c:13:2f:ab:c8:7f:4e: c7:75:5d:ea:1f:d2:8d:4c:47:cf:cb:98:7b:68:50:27:a0:df: f6:c5:ed:50:72:71:51:ef:b9:71:ff:dc:dd:ff:62:2e:bc:a1: 34:84:4d:aa:86:a6:db:8e:dd:08:28:35:a3:d5:59:2d:01:99: 71:c6:e5:f0:71:61:68:76:e4:be:93:6e:52:b9:b2:a8:d5:f0: 39:38:3c:44:e9:80:86:1c:99:14:42:3a:cc:7e:bc:8d:84:6b: 6c:52:3b:6e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTc1QTExMC8GA1UEBRMoNThFRUU1MkQyQUUwOTJFQzU1ODZFMDcwRTY0NjJDMzYz NTBGQTZFMTAeFw0yNTAyMjYyMTIyNTFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmY4NjJiLTY2YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7PsWlPRJvBTLie5ahhjpq30k4vR+Gt7ubokQ99AxGftf6Je//H/FrLQK0n0o2 q3QqT+535I6A7YJzFiv91/M/LYeghgytrUThG3KaEPj33IzEH/lwwuDZ8hozMh6o Vffsfbe3J9UOlz0f1Xzw5JFS2d0S8GPYU2eCgwAPZj8cwxx+no9ALUtGVquOQe10 ovMHFkaFZbfWz1HOlmrxRsEo18cGK3BLKyFg446LWqK55XnsjZqnPeHH2Y6hFht5 bBPz5VoWmT5DPAwyfPEs/miov+GS9c46mDLfkW9fJJ5BLw1Mkug6UIwVYzK9xhJu zvUGeI2lztqdq43x9RgYS283AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEDPp2x1K AExaxVodIfYQPiZKTzwwHwYDVR0jBBgwFoAUWO7lLSrgkuxVhuBw5kYsNjUPpuEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNzVBLzNGQUE3QzU0RjQ4 NzExRUY4NDlBMjc3MkM0RjlBRTAyL1dPN2xMU3Jna3V4Vmh1Qnc1a1lzTmpVUHB1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV083bExTcmdrdXhWaHVCdzVrWXNOalVQcHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTc1QS8zRkFBN0M1NEY0ODcxMUVGODQ5QTI3NzJDNEY5QUUwMi9ENTZENjdCMEY0 ODcxMUVGQkIyRDlENzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9yDANBgkqhkiG9w0BAQsFAAOCAQEAeauerbXrx6OoDUpW j2zl1xZqOv369jJdM0vVLaAKOwkefd985QT4Az41b7Rwy+mpm7n6V5EcRqZTwN8Y qLgSPZ1yki2J0orQAQHhgdFsvKX3rJQRPwFCDX0JEGTEI+CzQku1OvjAxq2uS5od uaweOcHdpK48IYIWTW5zImWxb3hejdlGCrVlJlnskGDaGyn0md+10u+SlIhAGR58 Ey+ryH9Ox3Vd6h/SjUxHz8uYe2hQJ6Df9sXtUHJxUe+5cf/c3f9iLryhNIRNqoam 247dCCg1o9VZLQGZccbl8HFhaHbkvpNuUrmyqNXwOTg8ROmAhhyZFEI6zH68jYRr bFI7bg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:03:26 2025 by rpki-client