$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60CFC590F98911EFB58DFF43C4F9AE02.roa File: 60CFC590F98911EFB58DFF43C4F9AE02.roa (raw, json) Hash identifier: /Ko7UH1DNlthJNOPFmUCkzM7fu44JOLpQ/IY8l/Y8YY= Subject key identifier: 13:CE:C8:01:8A:28:6C:A8:53:DB:05:DA:D7:0D:E2:E5:62:DA:80:9A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A921 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60CFC590F98911EFB58DFF43C4F9AE02.roa Signing time: Wed 05 Mar 2025 06:16:30 +0000 ROA not before: Wed 05 Mar 2025 06:16:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137210 IP address blocks: 163.223.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43297 (0xa921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 5 06:16:30 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67c7ec3e-c512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:bb:fc:c0:d7:dd:97:46:5b:dc:bb:4e:e1: 40:37:e6:5c:bb:30:01:af:e2:c1:7f:ff:49:16:d0: 96:2e:e3:17:d1:64:4f:30:5c:17:70:40:71:47:20: af:03:b1:6a:50:3c:93:21:d7:fe:e4:84:2c:4f:8b: 88:02:73:89:55:a1:21:7d:9a:2a:40:2c:82:cd:7f: 26:e0:0c:d9:80:79:23:11:f9:3d:40:21:37:fb:2b: 4f:83:1d:7c:8c:0a:d1:70:4c:18:fa:f1:de:19:05: 88:95:6c:65:ff:46:cd:ce:b0:4a:10:f5:80:8c:74: e6:9c:aa:39:46:34:15:31:50:25:df:db:5d:f6:1d: 39:f8:32:d9:4b:43:43:96:06:a6:51:ab:2b:06:59: ff:6a:ad:b1:2f:34:07:99:82:fe:4b:ec:0f:6d:b3: 11:d1:32:fc:93:80:f1:32:65:f6:24:3c:31:c9:87: 8a:92:c4:85:c8:d4:06:9b:f5:63:47:b7:d5:93:62: a0:3f:30:df:66:02:88:43:3b:62:da:2c:f0:a5:60: 48:53:c1:c7:d0:21:33:f9:84:ae:16:36:1e:58:e8: 11:de:ec:b5:77:7e:bd:a6:1f:67:4b:30:c1:de:55: 4a:c4:43:95:85:cf:e3:be:57:f7:8c:00:0b:43:d1: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CE:C8:01:8A:28:6C:A8:53:DB:05:DA:D7:0D:E2:E5:62:DA:80:9A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/60CFC590F98911EFB58DFF43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.0.0/23 Signature Algorithm: sha256WithRSAEncryption 50:91:c2:13:c7:11:61:31:72:67:98:72:ab:5e:1d:37:66:d2: 62:48:8e:d7:b8:03:0d:55:ed:b5:16:8e:1f:1e:66:9b:42:16: 02:7c:ef:3d:8a:5e:08:5c:e7:66:38:3c:ad:d8:e5:6f:a1:c7: 5d:28:df:60:b6:59:db:bf:e2:6a:b0:ae:a1:8d:1c:b9:9e:f2: 05:4e:4d:30:9d:ed:81:49:f7:51:9b:e4:1f:d9:18:03:fb:64: 72:3b:b4:75:21:d7:47:e0:3f:0b:ca:c2:ae:e8:fe:3d:1d:d4: 90:1e:b9:2b:11:07:a6:9a:bf:73:80:8d:57:d1:8b:a6:ef:9e: ad:d5:1c:fb:d9:39:ec:63:45:54:a5:75:b6:0a:89:bd:32:74: d6:7d:b6:81:63:08:3e:df:7f:4a:1c:ac:21:f9:94:58:46:4e: 27:55:4e:af:96:06:14:5e:d8:32:cf:70:2f:e0:68:72:60:cd: e2:f8:29:d2:af:ea:54:cb:30:cf:43:ec:87:a8:89:b9:4d:26: e0:09:8c:3a:34:33:58:81:a8:c6:fe:08:37:3b:89:7b:75:04: df:90:48:60:0a:0f:08:71:d2:c8:97:2f:f9:86:da:d0:f9:ba: 49:b3:17:f7:36:08:7d:8a:93:46:17:61:26:3a:11:57:f3:4d: d9:97:cf:0a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKkhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMwNTA2MTYzMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdjN2VjM2UtYzUxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXtu/zA192XRlvcu07hQDfmXLswAa/iwX//SRbQli7jF9FkTzBcF3BAcUcg rwOxalA8kyHX/uSELE+LiAJziVWhIX2aKkAsgs1/JuAM2YB5IxH5PUAhN/srT4Md fIwK0XBMGPrx3hkFiJVsZf9Gzc6wShD1gIx05pyqOUY0FTFQJd/bXfYdOfgy2UtD Q5YGplGrKwZZ/2qtsS80B5mC/kvsD22zEdEy/JOA8TJl9iQ8McmHipLEhcjUBpv1 Y0e31ZNioD8w32YCiEM7Ytos8KVgSFPBx9AhM/mErhY2HljoEd7stXd+vaYfZ0sw wd5VSsRDlYXP475X94wAC0PRLAsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQTzsgB iihsqFPbBdrXDeLlYtqAmjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYwQ0ZDNTkw Rjk4OTExRUZCNThERkY0M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBo98AMA0GCSqGSIb3DQEBCwUAA4IBAQBQkcITxxFhMXJn mHKrXh03ZtJiSI7XuAMNVe21Fo4fHmabQhYCfO89il4IXOdmODyt2OVvocddKN9g tlnbv+JqsK6hjRy5nvIFTk0wne2BSfdRm+Qf2RgD+2RyO7R1IddH4D8LysKu6P49 HdSQHrkrEQemmr9zgI1X0Yum756t1Rz72TnsY0VUpXW2Com9MnTWfbaBYwg+339K HKwh+ZRYRk4nVU6vlgYUXtgyz3Av4GhyYM3i+CnSr+pUyzDPQ+yHqIm5TSbgCYw6 NDNYgajG/gg3O4l7dQTfkEhgCg8IcdLIly/5htrQ+bpJsxf3Ngh9ipNGF2EmOhFX 803Zl88K -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:34 2025 by rpki-client