$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa File: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (raw, json) Hash identifier: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY= Subject key identifier: D2:F3:5C:DA:7A:0E:52:0F:B1:AB:8B:CC:F2:B8:09:C0:FD:D7:9F:FC Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 07 Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa Signing time: Thu 20 Mar 2025 10:59:11 +0000 ROA not before: Thu 20 Mar 2025 10:59:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140641 IP address blocks: 163.223.120.0/24 maxlen: 24 163.223.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927 Validity Not Before: Mar 20 10:59:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dbf4fe-df36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:20:b4:f8:65:97:f6:de:13:0e:07:83:0b: 8d:c4:d8:25:aa:6a:dc:76:ee:1c:16:f2:1e:08:20: 91:29:8a:46:af:8c:19:2c:5c:cf:02:7c:52:17:77: e9:a8:db:1e:1e:7e:87:46:8b:93:eb:49:8c:36:86: fb:15:42:15:ba:6b:77:06:5b:76:8d:fe:b3:d9:f9: 3c:33:ba:57:8f:15:80:48:22:bb:56:24:b5:b4:78: 2c:08:9e:8e:db:0e:bf:43:78:fb:76:47:00:b8:9c: cd:36:d4:87:4c:dd:4b:56:30:53:c8:53:73:8e:42: 31:a7:cb:a2:4c:91:33:c5:fb:eb:cb:b5:24:67:0c: c3:77:cd:a4:c7:e3:20:4e:4d:4e:36:5a:9f:de:77: 9f:57:ad:d8:16:b3:da:9a:b2:66:2f:11:a4:d2:23: 55:fb:10:4a:ef:4d:bc:b9:85:21:2c:b4:f5:c4:ad: 1e:77:f9:fc:c0:59:b1:69:26:f8:f5:a8:b7:29:bd: 78:8e:26:f2:41:f5:b1:a9:9b:2f:22:a4:1d:26:9e: c2:aa:0c:fb:db:25:da:c1:a6:07:65:3e:b9:4a:f0: 50:76:0a:5e:fe:08:fd:68:e8:85:8e:de:7a:58:5a: 72:30:80:58:0a:11:80:5c:ca:6f:ee:45:d7:75:54: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F3:5C:DA:7A:0E:52:0F:B1:AB:8B:CC:F2:B8:09:C0:FD:D7:9F:FC X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/5A41B0A6057A11F09EADEF0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.120.0/23 Signature Algorithm: sha256WithRSAEncryption 78:5d:0d:9a:f5:24:c7:41:af:55:a9:a6:ea:56:b3:de:ef:45: 75:8e:07:79:87:e0:43:16:f8:95:43:1b:c3:4b:aa:f6:c4:e0: 48:be:c6:cf:dc:f8:c4:0c:22:e4:7d:5e:a6:8c:57:21:48:64: fb:d9:19:6c:37:92:29:fe:fd:85:23:57:95:fe:96:fc:79:78: 83:8f:70:32:fc:fa:db:55:4a:c4:ec:f3:87:cd:ae:c8:99:1f: 8f:f0:ae:70:ac:38:42:95:56:27:7a:82:09:46:e1:bb:d4:6b: 57:b7:a9:f9:71:6d:e3:cf:74:d2:75:c7:51:e6:39:87:27:80: fc:96:a4:9f:68:bb:ce:3c:0a:a5:47:d1:06:dd:6b:a3:4e:fc: 01:ef:10:9b:20:cc:71:1c:0e:7b:44:5a:cb:0f:11:53:7c:64: fa:f5:9c:1c:47:0b:1a:ab:28:d9:f2:f1:67:84:93:2c:11:13: 95:2c:6b:0c:e7:54:c2:34:a3:e9:5b:67:dc:a2:2a:9a:c4:85: 55:eb:a6:ff:66:16:0c:93:18:77:10:23:bb:2b:56:b6:c6:98: dd:43:8b:c5:9b:84:5c:1e:fa:1a:90:7a:3a:77:da:91:40:5c: 35:ff:78:ee:4a:90:a4:f9:49:19:a7:95:19:d0:64:9b:d1:2f: bd:bf:7e:55 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTAzMjAxMDU5MTFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZGJmNGZlLWRmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4AyC0+GWX9t4TDgeDC43E2CWqatx27hwW8h4IIJEpikavjBksXM8CfFIXd+mo 2x4efodGi5PrSYw2hvsVQhW6a3cGW3aN/rPZ+TwzulePFYBIIrtWJLW0eCwIno7b Dr9DePt2RwC4nM021IdM3UtWMFPIU3OOQjGny6JMkTPF++vLtSRnDMN3zaTH4yBO TU42Wp/ed59XrdgWs9qasmYvEaTSI1X7EErvTby5hSEstPXErR53+fzAWbFpJvj1 qLcpvXiOJvJB9bGpmy8ipB0mnsKqDPvbJdrBpgdlPrlK8FB2Cl7+CP1o6IWO3npY WnIwgFgKEYBcym/uRdd1VLvjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0vNc2noO Ug+xq4vM8rgJwP3Xn/wwHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyNy9DMTA2RDMzQzA0REMxMUYwQjZCMjVBNDNDNEY5QUUwMi81QTQxQjBBNjA1 N0ExMUYwOUVBREVGMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfeDANBgkqhkiG9w0BAQsFAAOCAQEAeF0NmvUkx0GvVamm 6laz3u9FdY4HeYfgQxb4lUMbw0uq9sTgSL7Gz9z4xAwi5H1epoxXIUhk+9kZbDeS Kf79hSNXlf6W/Hl4g49wMvz621VKxOzzh82uyJkfj/CucKw4QpVWJ3qCCUbhu9Rr V7ep+XFt48900nXHUeY5hyeA/Jakn2i7zjwKpUfRBt1ro078Ae8QmyDMcRwOe0Ra yw8RU3xk+vWcHEcLGqso2fLxZ4STLBETlSxrDOdUwjSj6Vtn3KIqmsSFVeum/2YW DJMYdxAjuytWtsaY3UOLxZuEXB76GpB6OnfakUBcNf947kqQpPlJGaeVGdBkm9Ev vb9+VQ== -----END CERTIFICATE-----Generated at Sat Apr 5 08:04:29 2025 by rpki-client