$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa File: C6D2655A58CE11ECB7F30755C4F9AE02.roa (raw, json) Hash identifier: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU= Subject key identifier: 2E:95:24:76:6F:04:61:14:4D:A2:95:BF:37:5A:FD:8C:A3:24:CB:69 Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0413 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa Signing time: Fri 31 Jan 2025 00:44:54 +0000 ROA not before: Fri 31 Jan 2025 00:44:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 1299 IP address blocks: 202.163.0.0/19 maxlen: 19 2407:1600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA Validity Not Before: Jan 31 00:44:54 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c1d06-5527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:dd:81:09:a4:3c:0d:e2:54:47:80:86:91: 16:79:ed:d5:83:1f:57:c3:8f:c3:c7:ec:fe:0f:56: 8f:af:f4:0a:90:96:ec:10:99:45:39:b3:b2:3a:80: 94:9a:56:de:06:87:dc:c0:7b:f9:68:4c:c1:52:de: 84:1b:7c:a2:f9:bd:9b:b5:7b:30:08:1c:0f:b4:8c: 1d:1d:26:ef:f8:3f:a2:a0:81:ae:62:4c:ac:6c:1c: a0:8a:62:7b:fa:cf:67:f2:e4:71:72:fa:95:9c:36: b4:64:41:70:39:3c:74:08:41:da:e7:5d:5d:5d:df: da:b3:46:65:29:f4:0d:cf:00:fd:c2:87:0d:17:ad: 12:4f:38:7b:58:53:1d:d3:b0:f5:ad:07:e9:e3:3e: b0:93:5c:23:9c:80:78:c2:78:4a:d9:58:ed:3b:f1: a8:e5:47:7f:71:1a:cc:e0:b9:a9:bc:b6:9f:51:f6: f1:a0:74:a3:94:6a:83:fc:97:fa:83:86:4f:ad:79: cb:9e:7c:c1:86:be:c7:04:45:d0:58:51:5e:fa:f8: 38:f7:b5:b7:a7:ab:84:e0:7d:ae:be:e0:b3:6b:74: cc:c7:dc:1f:a1:22:8e:51:4c:34:a9:5e:6a:1c:d8: 4e:e4:2b:2f:96:40:3c:f6:26:cf:1f:da:0a:87:e0: 81:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:24:76:6F:04:61:14:4D:A2:95:BF:37:5A:FD:8C:A3:24:CB:69 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/C6D2655A58CE11ECB7F30755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.163.0.0/19 IPv6: 2407:1600::/32 Signature Algorithm: sha256WithRSAEncryption 8f:05:20:53:35:0c:e7:b4:5d:16:d5:9f:cf:d4:20:36:23:e9: ba:de:7b:5f:0e:c5:48:ca:e1:2d:30:2a:b0:21:a8:26:19:13: a0:27:d1:1c:99:08:ef:0e:48:c1:23:c3:4d:f8:a2:65:2d:31: 7c:fb:ab:5a:2e:ec:6a:92:ff:64:82:c3:16:4b:b0:6d:65:9c: 83:10:1d:b6:f7:d5:0f:d6:b0:0e:aa:74:f5:2c:a3:62:0d:a7: 58:e1:2b:d1:20:60:7d:37:06:02:c3:34:0f:3a:dc:1b:47:9d: 53:0f:c1:a8:ac:8e:39:f3:16:cd:a9:a6:5f:2a:70:96:9d:29: 11:22:63:d9:56:2b:cc:47:cd:a8:82:c5:b6:42:92:54:bb:c2: e6:27:9a:b2:73:83:04:5f:f4:bb:69:00:96:d1:06:db:24:29: 00:eb:e3:fa:ed:2f:cb:b2:38:a0:ee:95:29:b7:34:a2:f0:f8: 1b:cc:69:f8:27:9f:6d:e2:4d:84:40:82:2b:80:08:4a:76:4b: d7:00:e2:34:1e:0f:e9:1d:94:69:e2:79:e1:64:56:65:e2:b9: 62:94:b4:22:51:70:bc:97:ee:ad:c5:bc:31:e5:c7:88:c6:f8: 01:2c:95:68:3b:9a:71:14:29:ee:83:87:fe:a2:2c:18:a6:56: 53:65:38:c6 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwMTMxMDA0NDU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljMWQwNi01NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrbdgQmkPA3iVEeAhpEWee3Vgx9Xw4/Dx+z+D1aPr/QKkJbsEJlFObOyOoCU mlbeBofcwHv5aEzBUt6EG3yi+b2btXswCBwPtIwdHSbv+D+ioIGuYkysbBygimJ7 +s9n8uRxcvqVnDa0ZEFwOTx0CEHa511dXd/as0ZlKfQNzwD9wocNF60STzh7WFMd 07D1rQfp4z6wk1wjnIB4wnhK2VjtO/Go5Ud/cRrM4LmpvLafUfbxoHSjlGqD/Jf6 g4ZPrXnLnnzBhr7HBEXQWFFe+vg497W3p6uE4H2uvuCza3TMx9wfoSKOUUw0qV5q HNhO5CsvlkA89ibPH9oKh+CBawIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFC6VJHZv BGEUTaKVvzda/YyjJMtpMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4RUEvMEUzMUQyRTg1OENEMTFFQzg5RkEzMDU1QzRGOUFFMDIvQzZEMjY1NUE1 OENFMTFFQ0I3RjMwNzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAXKowAwDQQCAAIwBwMFACQHFgAwDQYJKoZIhvcNAQELBQAD ggEBAI8FIFM1DOe0XRbVn8/UIDYj6bree18OxUjK4S0wKrAhqCYZE6An0RyZCO8O SMEjw034omUtMXz7q1ou7GqS/2SCwxZLsG1lnIMQHbb31Q/WsA6qdPUso2INp1jh K9EgYH03BgLDNA863BtHnVMPwaisjjnzFs2ppl8qcJadKREiY9lWK8xHzaiCxbZC klS7wuYnmrJzgwRf9LtpAJbRBtskKQDr4/rtL8uyOKDulSm3NKLw+BvMafgnn23i TYRAgiuACEp2S9cA4jQeD+kdlGnieeFkVmXiuWKUtCJRcLyX7q3FvDHlx4jG+AEs lWg7mnEUKe6Dh/6iLBimVlNlOMY= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:18 2025 by rpki-client