$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/296C92D0F5B611EFB7E6426EC4F9AE02.roa File: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (raw, json) Hash identifier: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo= Subject key identifier: 17:25:B6:50:FF:91:01:95:EC:22:83:6B:5B:F8:92:4A:3D:B2:A8:0B Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Certificate serial: 05 Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/296C92D0F5B611EFB7E6426EC4F9AE02.roa Signing time: Fri 28 Feb 2025 09:27:00 +0000 ROA not before: Fri 28 Feb 2025 09:27:00 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153377 IP address blocks: 163.61.236.0/24 maxlen: 24 163.61.237.0/24 maxlen: 24 2001:df5:2640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91565C6 Validity Not Before: Feb 28 09:27:00 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c18164-0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:bc:26:b6:e2:21:67:12:f2:a5:4d:5d:0f: 07:78:0b:7a:61:08:23:86:72:96:f5:3a:b8:2f:4a: 31:c2:84:77:94:7b:a9:6c:c0:8d:3e:8d:61:90:83: 40:6d:38:b3:dc:6e:19:d8:a8:cf:1f:23:5f:06:14: 1a:87:f2:92:94:6e:2e:41:c0:92:41:02:96:2a:54: 81:ef:a9:ea:05:18:a4:9f:18:e7:e5:38:c0:ec:af: d6:29:64:bb:29:8e:ad:f6:45:ed:23:0e:24:06:3d: 0a:61:4a:b9:f5:ee:e2:09:09:ce:86:16:5b:03:b7: 39:3e:7f:5b:8d:bc:bc:69:d7:ab:c6:4f:99:61:c7: 65:5e:8c:bb:c9:70:db:78:21:21:90:8a:45:47:3f: c8:0a:57:16:3b:1a:0e:ab:e1:21:b3:b0:a4:56:2e: 74:cf:4b:41:01:fb:fb:c3:58:8f:fb:6a:e8:18:90: 46:9e:a0:ab:45:2e:14:76:38:c8:f3:9e:ed:36:c2: 1d:59:60:f9:c0:a2:e2:55:98:44:4d:e6:fc:f0:1e: a3:d5:49:ea:cd:8b:dc:7b:20:27:69:4d:9b:62:65: 59:a9:16:b0:a9:c1:38:7c:ef:39:a0:df:ad:19:ab: 00:8a:47:e6:f3:ad:06:eb:09:32:cf:14:0e:f5:24: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:B6:50:FF:91:01:95:EC:22:83:6B:5B:F8:92:4A:3D:B2:A8:0B X509v3 Authority Key Identifier: keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/296C92D0F5B611EFB7E6426EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.236.0/23 IPv6: 2001:df5:2640::/48 Signature Algorithm: sha256WithRSAEncryption 2a:54:51:c8:f2:ea:25:21:07:89:34:a0:15:86:36:6b:12:da: b4:ea:0a:cb:ca:05:14:d4:15:b3:df:a0:1f:30:32:07:23:3f: 11:ac:6f:e5:20:b5:d8:80:a0:08:9b:c5:08:06:9f:09:a2:7b: 27:ea:a9:56:92:aa:0e:8d:37:15:3f:d9:2d:5a:99:c1:66:72: d4:4f:33:df:18:f2:18:55:05:bb:18:30:8e:10:61:ee:60:f9: 56:3a:74:70:7b:d1:1c:bb:6d:e1:22:7d:80:0f:ea:e6:cf:f8: bd:34:2c:41:bc:59:1b:8d:33:68:28:19:74:67:ce:99:3b:48: 66:d5:26:59:08:d5:a7:69:a0:91:f2:e1:39:38:9f:a3:3b:f9: ac:96:54:7b:2f:c8:ab:bf:de:05:9e:8e:be:b7:3e:e4:ae:7c: 9b:23:d3:62:b2:f1:31:05:9b:c7:9e:6b:ac:d8:a2:b1:3a:da: 5e:98:fd:76:37:81:14:0d:72:b3:6e:96:77:25:f6:a2:d0:9a: 00:0c:c4:a9:a8:6e:8c:1e:9c:97:2d:10:65:51:04:b2:7b:c3: 6f:21:cc:32:e9:ea:80:4e:f3:5d:c2:48:17:3d:8d:49:f5:e1: f9:76:e1:8e:0a:3d:43:3d:4f:98:49:40:82:f2:d6:ad:99:43: 2d:4b:b9:2a -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjVDNjExMC8GA1UEBRMoQ0Q1MzVDN0VCMzFBNDBBM0ZEQjhBQzRENUQ1NzdBRjlE NkM1ODg0ODAeFw0yNTAyMjgwOTI3MDBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzE4MTY0LTAzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCSbwmtuIhZxLypU1dDwd4C3phCCOGcpb1OrgvSjHChHeUe6lswI0+jWGQg0Bt OLPcbhnYqM8fI18GFBqH8pKUbi5BwJJBApYqVIHvqeoFGKSfGOflOMDsr9YpZLsp jq32Re0jDiQGPQphSrn17uIJCc6GFlsDtzk+f1uNvLxp16vGT5lhx2VejLvJcNt4 ISGQikVHP8gKVxY7Gg6r4SGzsKRWLnTPS0EB+/vDWI/7augYkEaeoKtFLhR2OMjz nu02wh1ZYPnAouJVmERN5vzwHqPVSerNi9x7ICdpTZtiZVmpFrCpwTh87zmg360Z qwCKR+bzrQbrCTLPFA71JE7xAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUFyW2UP+R AZXsIoNrW/iSSj2yqAswHwYDVR0jBBgwFoAUzVNcfrMaQKP9uKxNXVd6+dbFiEgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NUM2L0QyNjVCMEM2RjQx RjExRUY4MTcwODg2OEM0RjlBRTAyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlF Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelZOY2ZyTWFRS1A5dUt4TlhWZDYtZGJGaUVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjVDNi9EMjY1QjBDNkY0MUYxMUVGODE3MDg4NjhDNEY5QUUwMi8yOTZDOTJEMEY1 QjYxMUVGQjdFNjQyNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaM97DAPBAIAAjAJAwcAIAEN9SZAMA0GCSqGSIb3DQEBCwUA A4IBAQAqVFHI8uolIQeJNKAVhjZrEtq06grLygUU1BWz36AfMDIHIz8RrG/lILXY gKAIm8UIBp8Jonsn6qlWkqoOjTcVP9ktWpnBZnLUTzPfGPIYVQW7GDCOEGHuYPlW OnRwe9Ecu23hIn2AD+rmz/i9NCxBvFkbjTNoKBl0Z86ZO0hm1SZZCNWnaaCR8uE5 OJ+jO/msllR7L8irv94Fno6+tz7krnybI9NisvExBZvHnmus2KKxOtpemP12N4EU DXKzbpZ3Jfai0JoADMSpqG6MHpyXLRBlUQSye8NvIcwy6eqATvNdwkgXPY1J9eH5 duGOCj1DPU+YSUCC8tatmUMtS7kq -----END CERTIFICATE-----Generated at Sat Apr 5 14:33:23 2025 by rpki-client