$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa File: 9A3B7A6C5C8111F09B95A34AC4F9AE02.roa (raw, json) Hash identifier: Cb9Kr0yqiWpbB+Yg6uLi22l8WNGQUe6BFfhWhsQOoH0= Subject key identifier: CB:F4:61:B4:CE:42:03:12:94:0B:04:5A:EA:89:4D:00:DE:48:5B:DD Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 8D Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa Signing time: Thu 10 Jul 2025 16:19:46 +0000 ROA not before: Thu 10 Jul 2025 16:19:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215750 IP address blocks: 163.223.178.0/24 maxlen: 24 2401:f860::/44 maxlen: 44 2401:f860::/48 maxlen: 48 2401:f860:1::/48 maxlen: 48 2401:f860:2::/48 maxlen: 48 2401:f860:3::/48 maxlen: 48 2401:f860:4::/48 maxlen: 48 2401:f860:5::/48 maxlen: 48 2401:f860:6::/48 maxlen: 48 2401:f860:7::/48 maxlen: 48 2401:f860:8::/48 maxlen: 48 2401:f860:9::/48 maxlen: 48 2401:f860:a::/48 maxlen: 48 2401:f860:b::/48 maxlen: 48 2401:f860:c::/48 maxlen: 48 2401:f860:d::/48 maxlen: 48 2401:f860:e::/48 maxlen: 48 2401:f860:f::/48 maxlen: 48 2401:f860:88::/48 maxlen: 48 2401:f860:89::/48 maxlen: 48 2401:f860:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Jul 10 16:19:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=686fe822-994b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:31:54:26:fc:95:f8:ba:0d:73:cd:c0:35: e3:ec:e9:85:d2:2b:5d:93:b6:2a:7d:9c:b6:2c:b6: ec:5c:30:e4:69:3a:5a:fe:52:ca:44:89:f0:07:8b: b1:15:a3:83:00:af:83:b8:c5:06:db:e2:99:49:9d: 5b:59:74:0a:70:84:96:77:9a:b1:e1:67:69:80:2a: 4d:aa:4b:7c:73:3d:5c:4c:1a:0e:fb:b9:84:2e:7d: 34:fa:da:89:52:90:80:9d:2b:47:e9:fa:af:ac:c6: d2:e5:56:25:fb:3b:08:a6:81:10:90:9b:8f:5a:59: 88:04:3d:05:5b:30:b0:53:58:71:a0:64:01:df:df: 25:a6:0b:24:9c:3c:4c:39:54:28:52:cb:69:29:0e: 2d:17:22:7d:d7:79:b8:75:99:61:02:7d:13:d6:d9: e3:58:83:41:f7:5d:c8:83:7c:7c:14:50:1d:7b:20: c4:7d:7d:9f:55:28:9d:1d:93:56:cc:e3:cc:cc:4c: 7e:08:93:a8:19:06:eb:ea:1d:b0:35:e8:0e:a6:76: b5:89:eb:f7:e9:81:17:b6:95:bf:3d:22:eb:54:8e: 15:06:93:a1:ce:dd:24:57:5c:32:99:e2:a3:35:ec: 1c:84:1c:6b:ad:a5:79:46:02:4c:e5:bb:bb:4e:37: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:61:B4:CE:42:03:12:94:0B:04:5A:EA:89:4D:00:DE:48:5B:DD X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.178.0/24 IPv6: 2401:f860::/44 2401:f860:88::/47 2401:f860:90::/48 Signature Algorithm: sha256WithRSAEncryption 81:c4:48:58:44:f4:93:de:78:64:13:6e:ef:50:39:1f:5c:a3: 60:39:4e:08:b5:ae:b3:6d:87:b6:35:44:09:72:5e:90:45:a9: 2b:01:7e:29:df:68:6f:30:f4:79:43:ee:bd:57:4a:a1:9b:b5: 42:d1:28:64:4d:7f:87:7e:6f:a7:d9:91:68:62:b7:65:26:38: c3:87:d3:61:40:ed:8c:74:9c:65:3d:e8:e9:7d:fc:21:81:24: 13:3b:2c:8b:da:be:02:b5:b6:c5:88:20:ce:59:d7:9f:a7:99: 5c:96:1c:a8:6f:51:78:49:fa:46:d2:de:ca:10:1b:a8:64:4a: 8a:e8:21:c1:fb:8a:5a:bf:bb:0d:0e:60:a2:17:82:92:6e:6d: 4b:f0:3a:89:e0:27:15:b3:64:4c:09:af:b5:8a:ae:02:88:89: 2d:04:86:52:7e:4c:c1:13:ee:c4:95:b1:73:11:80:71:c1:15: b2:62:62:26:2b:9a:65:85:7e:c3:16:e7:1e:d1:57:8a:4d:2d: 87:91:98:33:e7:c7:f7:86:4c:62:62:a5:66:74:c0:c8:ad:2b: 7e:48:25:de:71:13:ea:b2:8d:93:a7:2d:70:d6:f2:c4:eb:f5: 96:0f:0c:7f:05:09:4a:3e:46:25:f5:d1:6d:49:43:21:27:35: d5:0e:78:96 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUwNzEwMTYxOTQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmZTgyMi05OTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9kxVCb8lfi6DXPNwDXj7OmF0itdk7YqfZy2LLbsXDDkaTpa/lLKRInwB4ux FaODAK+DuMUG2+KZSZ1bWXQKcISWd5qx4WdpgCpNqkt8cz1cTBoO+7mELn00+tqJ UpCAnStH6fqvrMbS5VYl+zsIpoEQkJuPWlmIBD0FWzCwU1hxoGQB398lpgsknDxM OVQoUstpKQ4tFyJ913m4dZlhAn0T1tnjWINB913Ig3x8FFAdeyDEfX2fVSidHZNW zOPMzEx+CJOoGQbr6h2wNegOpna1iev36YEXtpW/PSLrVI4VBpOhzt0kV1wymeKj NewchBxrraV5RgJM5bu7TjdyPwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFMv0YbTO QgMSlAsEWuqJTQDeSFvdMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDOTgvQUJBRkY1RUEwNjEyMTFGMDhFOUFFNTI5QzRGOUFFMDIvOUEzQjdBNkM1 QzgxMTFGMDlCOTVBMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBACj37IwIQQCAAIwGwMHBCQB+GAAAAMHASQB+GAAiAMHACQB +GAAkDANBgkqhkiG9w0BAQsFAAOCAQEAgcRIWET0k954ZBNu71A5H1yjYDlOCLWu s22HtjVECXJekEWpKwF+Kd9obzD0eUPuvVdKoZu1QtEoZE1/h35vp9mRaGK3ZSY4 w4fTYUDtjHScZT3o6X38IYEkEzssi9q+ArW2xYggzlnXn6eZXJYcqG9ReEn6RtLe yhAbqGRKiughwfuKWr+7DQ5goheCkm5tS/A6ieAnFbNkTAmvtYquAoiJLQSGUn5M wRPuxJWxcxGAccEVsmJiJiuaZYV+wxbnHtFXik0th5GYM+fH94ZMYmKlZnTAyK0r fkgl3nET6rKNk6ctcNbyxOv1lg8MfwUJSj5GJfXRbUlDISc11Q54lg== -----END CERTIFICATE-----Generated at Sun Jul 20 07:23:20 2025 by rpki-client