$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa File: E42D85E2F1CA11EFB62D3031C4F9AE02.roa (raw, json) Hash identifier: dGRW5QcfAaiPHf4JiM+cDPozOhYf8XOzClTTBWh7otw= Subject key identifier: 0A:51:7C:DB:9F:55:00:FB:74:F2:44:2B:8D:1D:C0:6E:5E:D9:4C:07 Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 2A Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa Signing time: Sun 23 Feb 2025 09:45:19 +0000 ROA not before: Sun 23 Feb 2025 09:45:19 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149994 IP address blocks: 163.61.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648 Validity Not Before: Feb 23 09:45:19 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67baee2e-bece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:4f:5f:c8:c4:8f:bc:27:b9:aa:9e:4b:39: a4:f8:cb:6b:4d:3b:60:8e:5d:5f:59:35:55:2b:0a: 0b:79:e1:47:8f:ae:41:0d:a2:31:3d:71:78:2a:27: 9b:30:c5:c7:01:91:36:40:df:cc:8b:72:eb:90:ce: f2:60:4d:b7:0d:8c:88:67:cd:2f:92:ca:cf:e3:e9: c8:11:b8:cc:43:66:c2:78:f2:03:47:58:f1:70:8f: d7:a7:46:db:f3:b8:c5:bb:a0:99:9a:11:bb:1c:04: 79:98:44:19:4f:58:d2:68:56:9c:be:d2:0d:4e:7c: c1:0f:db:80:a0:1e:11:c2:37:78:07:43:31:f3:3a: 17:7a:30:8c:32:8f:f9:a4:98:ff:28:c0:50:54:88: 14:e8:79:ec:58:d7:69:df:f7:47:e7:4e:56:22:bf: b5:8c:cb:55:a0:62:b6:09:e2:7a:27:9d:54:5b:72: 49:16:7f:8e:88:50:43:cf:b0:5c:a7:ad:88:15:b9: bb:a1:dd:5b:5a:dd:bf:2b:14:69:bc:1f:c5:60:72: be:13:97:8e:d5:9d:d4:7f:50:c8:1f:be:90:7c:3f: cf:72:81:45:56:ec:bf:68:1a:fc:06:17:9c:46:30: 18:eb:6a:9a:27:30:2b:9f:65:ad:b2:32:10:ab:c6: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:7C:DB:9F:55:00:FB:74:F2:44:2B:8D:1D:C0:6E:5E:D9:4C:07 X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/E42D85E2F1CA11EFB62D3031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.17.0/24 Signature Algorithm: sha256WithRSAEncryption c3:71:52:80:26:fb:6e:f4:a9:d5:5a:63:21:5d:a4:b2:6d:ae: 78:0f:ed:04:77:45:c3:8c:62:e9:38:97:9a:c0:c7:ae:3c:f0: 27:40:4e:76:8b:d6:e7:a1:8a:61:19:25:8d:30:05:6e:aa:7f: d9:f3:e9:5c:df:cf:09:42:57:e6:f7:6b:c7:c7:4e:75:9c:2c: 67:af:13:88:e2:ab:75:73:29:04:14:81:89:63:61:23:e2:c0: cf:50:f9:ff:60:50:a0:ae:4b:89:ff:1b:09:a0:81:06:9f:d1: cd:93:04:9a:ec:59:76:bc:e6:6f:b6:89:9d:a9:38:a4:fe:33: a7:10:b6:07:2a:12:6e:eb:3d:01:d9:7c:43:7f:77:d8:1e:c9: 26:bd:81:31:d8:ff:2b:ed:fc:83:2e:d2:b7:d8:c1:c0:b4:c4: 3f:34:9e:05:5d:29:5f:96:fa:44:76:33:7c:34:a4:19:f3:e0: 6b:9d:34:d4:16:53:65:77:04:da:75:38:e5:02:8c:ce:69:2a: ad:43:5e:61:5e:2b:f8:83:c9:7b:5e:3d:9a:b4:bc:96:c2:22: 99:31:25:b2:cb:66:cc:56:98:56:8f:81:ef:77:84:17:33:3b: 73:4e:1a:1d:31:8c:0b:89:91:b8:19:3f:ba:22:31:c7:ff:91: df:de:07:da -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTY0ODExMC8GA1UEBRMoMkMxQzA3RDE1MTI3MTk2OUUxM0UxQ0ZEMTYxQjFGNjA3 NzBFMjkwRDAeFw0yNTAyMjMwOTQ1MTlaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmFlZTJlLWJlY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx8U9fyMSPvCe5qp5LOaT4y2tNO2COXV9ZNVUrCgt54UePrkENojE9cXgqJ5sw xccBkTZA38yLcuuQzvJgTbcNjIhnzS+Sys/j6cgRuMxDZsJ48gNHWPFwj9enRtvz uMW7oJmaEbscBHmYRBlPWNJoVpy+0g1OfMEP24CgHhHCN3gHQzHzOhd6MIwyj/mk mP8owFBUiBToeexY12nf90fnTlYiv7WMy1WgYrYJ4nonnVRbckkWf46IUEPPsFyn rYgVubuh3Vta3b8rFGm8H8Vgcr4Tl47VndR/UMgfvpB8P89ygUVW7L9oGvwGF5xG MBjraponMCufZa2yMhCrxmDLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUClF8259V APt08kQrjR3Abl7ZTAcwHwYDVR0jBBgwFoAULBwH0VEnGWnhPhz9FhsfYHcOKQ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NjQ4LzIxOEYyNjhBREM5 RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tR MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEJ3SDBWRW5HV25oUGh6OUZoc2ZZSGNPS1EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9FNDJEODVFMkYx Q0ExMUVGQjYyRDMwMzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9ETANBgkqhkiG9w0BAQsFAAOCAQEAw3FSgCb7bvSp1Vpj IV2ksm2ueA/tBHdFw4xi6TiXmsDHrjzwJ0BOdovW56GKYRkljTAFbqp/2fPpXN/P CUJX5vdrx8dOdZwsZ68TiOKrdXMpBBSBiWNhI+LAz1D5/2BQoK5Lif8bCaCBBp/R zZMEmuxZdrzmb7aJnak4pP4zpxC2ByoSbus9Adl8Q3932B7JJr2BMdj/K+38gy7S t9jBwLTEPzSeBV0pX5b6RHYzfDSkGfPga5001BZTZXcE2nU45QKMzmkqrUNeYV4r +IPJe149mrS8lsIimTElsstmzFaYVo+B73eEFzM7c04aHTGMC4mRuBk/uiIxx/+R 394H2g== -----END CERTIFICATE-----Generated at Sat Apr 5 23:04:47 2025 by rpki-client