$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa File: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (raw, json) Hash identifier: mLH/qF33HuSxb2ZOhtlDD/C41cd08Ge05vK6Yy9o0+Q= Subject key identifier: 87:5E:4B:35:7B:67:50:69:AD:91:8F:B1:D2:4C:FA:85:C6:C2:AA:27 Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 05 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa Signing time: Thu 13 Feb 2025 11:16:59 +0000 ROA not before: Thu 13 Feb 2025 11:16:59 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 163.61.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC Validity Not Before: Feb 13 11:16:59 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67add4aa-341d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:13:09:75:0c:a4:03:1c:8b:43:a4:1f:74: 71:67:22:19:7b:0f:48:a6:7e:cc:a9:6b:1b:4c:9f: 32:be:49:95:bf:b0:13:20:99:0b:f6:e0:bd:44:5b: ab:8b:24:a5:35:50:cc:a2:71:87:26:96:03:b9:08: 39:91:5a:5c:92:51:30:c3:22:83:34:85:09:8b:3d: d6:e8:34:c5:44:6c:90:b3:63:f2:ed:e4:1d:68:98: df:1d:b4:da:cd:7d:1d:a3:44:1c:72:bb:c6:49:9b: 0f:78:75:ad:96:43:da:40:72:7a:c9:fa:f0:60:99: 35:8b:45:75:03:14:2d:b5:65:af:4f:cc:a4:b7:64: cf:e4:9d:6d:b2:ff:70:a5:83:6f:de:ca:2a:9e:ee: 3d:40:19:9e:0f:f9:07:c5:23:bd:24:aa:4b:22:bf: a6:0c:7e:6c:ad:47:f1:29:f6:c2:b6:11:1c:13:62: f7:dc:c5:f7:fd:17:90:6a:fa:31:2d:d6:c4:68:6c: 95:a6:e9:15:f1:63:40:99:1f:81:9f:83:cd:47:ce: c4:5c:28:ab:71:df:cd:bc:8b:ea:a9:38:49:bc:f4: 9b:3c:30:ee:d9:6b:d7:79:57:12:df:9e:a6:00:d8: 34:11:70:0d:bc:0d:39:f7:c5:a8:20:da:d5:a9:c7: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5E:4B:35:7B:67:50:69:AD:91:8F:B1:D2:4C:FA:85:C6:C2:AA:27 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.116.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:c6:21:0d:40:77:c4:2a:bf:a5:55:21:c4:5c:18:12:e8:7b: 02:f0:7c:bd:8d:08:25:21:02:ca:fb:96:32:fc:3b:f1:c0:79: ab:a4:62:9f:39:6d:51:9f:f6:ad:17:ed:54:dd:61:65:f5:07: 86:c3:ec:30:8f:59:b7:1f:d9:e7:d5:a6:df:6c:8d:36:90:0e: f7:bc:08:5f:44:1c:67:0c:f5:c0:21:11:72:fc:b7:9b:b7:69: bf:56:19:4b:7d:49:10:38:5e:fd:4d:a6:31:98:18:a4:a7:76: 53:79:29:de:79:f9:c7:b0:ac:dc:d6:1f:2b:e1:9e:5b:50:c6: e4:a0:92:fc:93:d4:3e:fc:98:7e:be:c7:9c:33:4d:0a:8c:56: d3:c4:39:0c:c0:5f:d6:b5:69:db:01:6a:4b:cf:32:36:34:f7: 39:c8:46:65:9f:40:9d:94:f4:ad:5f:6f:81:22:97:9f:fd:75: 50:59:b7:77:d7:3f:a1:60:49:8e:7e:be:1a:53:9e:24:3f:95: ea:ce:e2:bf:af:f1:55:d0:51:d9:5e:89:87:8c:6d:66:b0:a4: b7:f2:d7:9e:51:e7:b3:f1:a0:51:2a:6e:32:64:c6:51:8a:cf: 10:3d:77:27:59:42:80:cc:3f:6b:53:71:4e:c2:0b:19:2f:91: 9f:95:4f:78 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTAyMTMxMTE2NTlaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWRkNGFhLTM0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbWxMJdQykAxyLQ6QfdHFnIhl7D0imfsypaxtMnzK+SZW/sBMgmQv24L1EW6uL JKU1UMyicYcmlgO5CDmRWlySUTDDIoM0hQmLPdboNMVEbJCzY/Lt5B1omN8dtNrN fR2jRBxyu8ZJmw94da2WQ9pAcnrJ+vBgmTWLRXUDFC21Za9PzKS3ZM/knW2y/3Cl g2/eyiqe7j1AGZ4P+QfFI70kqksiv6YMfmytR/Ep9sK2ERwTYvfcxff9F5Bq+jEt 1sRobJWm6RXxY0CZH4Gfg81HzsRcKKtx3828i+qpOEm89Js8MO7Za9d5VxLfnqYA 2DQRcA28DTn3xagg2tWpx0NJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUh15LNXtn UGmtkY+x0kz6hcbCqicwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi8wQTM0MTgyQ0U5 RkMxMUVGOUQzREU5NzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9dDANBgkqhkiG9w0BAQsFAAOCAQEAnsYhDUB3xCq/pVUh xFwYEuh7AvB8vY0IJSECyvuWMvw78cB5q6RinzltUZ/2rRftVN1hZfUHhsPsMI9Z tx/Z59Wm32yNNpAO97wIX0QcZwz1wCERcvy3m7dpv1YZS31JEDhe/U2mMZgYpKd2 U3kp3nn5x7Cs3NYfK+GeW1DG5KCS/JPUPvyYfr7HnDNNCoxW08Q5DMBf1rVp2wFq S88yNjT3OchGZZ9AnZT0rV9vgSKXn/11UFm3d9c/oWBJjn6+GlOeJD+V6s7iv6/x VdBR2V6Jh4xtZrCkt/LXnlHns/GgUSpuMmTGUYrPED13J1lCgMw/a1NxTsILGS+R n5VPeA== -----END CERTIFICATE-----Generated at Sat Apr 5 03:35:46 2025 by rpki-client