$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/4DF2435C64DD11F0B62B5364C4F9AE02.roa File: 4DF2435C64DD11F0B62B5364C4F9AE02.roa (raw, json) Hash identifier: 9zcvTOrHYTn6QYo9O3sPGz3tCDpSy9pE/QGCJhS6D3Y= Subject key identifier: BA:52:01:8A:3E:A1:DC:3D:52:EF:A8:01:73:CE:C8:EE:B4:71:C9:B9 Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Certificate serial: 57 Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/4DF2435C64DD11F0B62B5364C4F9AE02.roa Signing time: Sat 19 Jul 2025 20:16:51 +0000 ROA not before: Sat 19 Jul 2025 20:16:51 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153596 IP address blocks: 163.61.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 20:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Validity Not Before: Jul 19 20:16:51 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=687bfd32-e56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:43:75:95:9d:83:f7:d1:41:e0:45:6a:27: 9d:1e:5f:21:0d:d1:d6:48:90:0f:4d:fe:67:96:76: 59:5b:ce:3c:8a:93:f3:8e:74:61:2c:95:7e:73:5e: 98:0b:9f:ba:1c:ac:bd:c2:28:2e:38:04:ae:cb:01: c6:8c:bf:bc:4a:0d:a3:9a:b5:d6:47:35:ea:8e:df: 84:46:34:b9:a3:b2:48:56:43:ca:65:a5:a9:4f:3b: b7:09:5f:6a:27:c3:e2:93:ac:89:fb:2d:9f:02:99: b9:b8:21:36:c3:23:be:fa:69:ef:03:36:8d:4d:ad: 1b:76:87:1b:99:ba:47:42:cb:5e:bc:51:e6:b0:bf: e7:fc:17:b6:d8:8e:05:fb:fe:a6:e8:99:93:ac:ed: 20:64:80:5d:1b:3d:e6:ba:ca:19:4d:2a:8e:1f:df: 2c:ed:9b:a5:d6:62:7f:9a:02:b6:2a:4b:a0:4c:bb: fc:a2:f4:e0:50:5a:97:1b:40:e1:75:2c:0a:b5:8a: 32:fe:82:c4:ad:ea:8d:e8:27:8f:76:76:99:14:cf: 3f:97:3c:d1:56:7b:c2:dc:01:91:99:65:b2:da:93: f0:c7:3d:91:e1:f4:9c:3a:8d:5b:86:79:41:5f:96: fa:1f:8d:f6:59:a5:75:9d:30:fc:27:01:37:f7:66: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:01:8A:3E:A1:DC:3D:52:EF:A8:01:73:CE:C8:EE:B4:71:C9:B9 X509v3 Authority Key Identifier: keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/4DF2435C64DD11F0B62B5364C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.128.0/24 Signature Algorithm: sha256WithRSAEncryption bf:66:ec:5d:a7:48:85:12:dc:34:d3:49:7a:80:2e:99:c3:d0: 82:06:65:1e:51:a5:cd:32:50:dd:55:94:de:66:37:26:19:4a: 4e:7a:0d:1b:99:5b:ed:0c:99:2d:3a:5d:96:f4:b0:12:9a:90: 60:f5:81:41:66:cf:38:20:c7:8d:c7:4a:be:29:36:df:38:59: ca:c2:97:fa:24:34:12:dd:7b:ee:e2:80:df:90:b3:51:3d:e9: 35:11:0b:ce:52:00:36:7e:57:36:e1:36:93:cb:ae:44:d0:a8: 05:e7:97:2e:c4:25:e6:e6:a3:af:bc:b1:6f:23:62:01:a8:aa: 52:d6:92:e1:89:f1:e6:07:51:9b:0e:28:f9:16:7a:6f:9f:9a: 85:d9:c1:6e:5b:aa:1a:f3:22:3e:81:c3:10:a3:db:5c:ed:71: fd:1c:ae:16:b0:7d:71:db:0a:fc:e1:98:49:0f:03:89:ed:a2: a4:8c:bb:69:3a:76:82:23:81:ad:99:b0:74:77:bd:74:46:58: 4c:88:37:84:8c:33:8f:d7:8d:26:ca:9e:df:d6:d7:04:90:ac: 52:be:af:49:25:05:cd:c7:0f:57:94:89:98:41:4e:d7:22:34: 03:09:e0:2b:35:52:7e:a7:cb:58:91:46:e2:4a:d9:67:d2:d7: 83:4c:01:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0ZCRjExMC8GA1UEBRMoNzhFQzBGMEU0OTRGMjI4RUFBNDM4M0Q2QzYwREVCMUMz NjJBNTA1MTAeFw0yNTA3MTkyMDE2NTFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4N2JmZDMyLWU1NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHAkN1lZ2D99FB4EVqJ50eXyEN0dZIkA9N/meWdllbzjyKk/OOdGEslX5zXpgL n7ocrL3CKC44BK7LAcaMv7xKDaOatdZHNeqO34RGNLmjskhWQ8plpalPO7cJX2on w+KTrIn7LZ8Cmbm4ITbDI776ae8DNo1NrRt2hxuZukdCy168Ueawv+f8F7bYjgX7 /qbomZOs7SBkgF0bPea6yhlNKo4f3yztm6XWYn+aArYqS6BMu/yi9OBQWpcbQOF1 LAq1ijL+gsSt6o3oJ492dpkUzz+XPNFWe8LcAZGZZbLak/DHPZHh9Jw6jVuGeUFf lvofjfZZpXWdMPwnATf3ZtHlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUulIBij6h 3D1S76gBc87I7rRxybkwHwYDVR0jBBgwFoAUeOwPDklPIo6qQ4PWxg3rHDYqUFEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDRkJGLzMyNzYxMDM4RUQx MjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82cVE0UFd4ZzNySERZcVVG RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZU93UERrbFBJbzZxUTRQV3hnM3JIRFlxVUZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0ZCRi8zMjc2MTAzOEVEMTIxMUVGOUIyRDQ5NUNDNEY5QUUwMi80REYyNDM1QzY0 REQxMUYwQjYyQjUzNjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9gDANBgkqhkiG9w0BAQsFAAOCAQEAv2bsXadIhRLcNNNJ eoAumcPQggZlHlGlzTJQ3VWU3mY3JhlKTnoNG5lb7QyZLTpdlvSwEpqQYPWBQWbP OCDHjcdKvik23zhZysKX+iQ0Et177uKA35CzUT3pNRELzlIANn5XNuE2k8uuRNCo BeeXLsQl5uajr7yxbyNiAaiqUtaS4Ynx5gdRmw4o+RZ6b5+ahdnBbluqGvMiPoHD EKPbXO1x/RyuFrB9cdsK/OGYSQ8Die2ipIy7aTp2giOBrZmwdHe9dEZYTIg3hIwz j9eNJsqe39bXBJCsUr6vSSUFzccPV5SJmEFO1yI0AwngKzVSfqfLWJFG4krZZ9LX g0wBuQ== -----END CERTIFICATE-----Generated at Mon Jul 21 06:59:35 2025 by rpki-client