$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa File: 362EF79CFB2911EF8C103876C4F9AE02.roa (raw, json) Hash identifier: Ar+onOWOPH7xuawAkKNR4USGgISAZHmjzcJHYy39Fms= Subject key identifier: 06:54:3A:C1:C1:DB:71:A2:85:58:E3:22:BE:B8:40:9F:D6:FD:47:63 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 02 Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa Signing time: Fri 07 Mar 2025 07:53:09 +0000 ROA not before: Fri 07 Mar 2025 07:53:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9304 IP address blocks: 163.61.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026 Validity Not Before: Mar 7 07:53:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67caa5e5-6d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:88:77:73:d2:bb:6f:b2:5a:0a:92:44:80: 70:24:28:dd:8a:71:57:25:e7:61:a5:e4:76:f3:7a: a3:b9:38:ee:5a:bb:be:e1:e9:fd:c2:b2:0f:d9:db: 96:e2:f1:a5:9c:14:ab:3a:67:f4:c1:a5:85:3f:62: de:86:5f:17:02:b5:56:6a:5f:5b:9e:b3:2a:1a:a8: 4a:a1:e4:bd:65:92:c2:e0:35:56:39:f3:98:89:c1: ad:97:2b:8c:30:15:5b:1a:9c:52:bb:9c:cb:4a:fb: b0:3c:12:34:15:80:4e:b4:10:fc:9b:8d:24:59:b5: 19:43:78:ca:9c:ba:79:f8:34:00:4c:77:80:0f:e2: 7f:00:95:31:fe:bd:76:62:9d:8c:d2:be:9d:8b:56: 6a:40:08:24:21:92:63:19:9f:7f:6a:b1:da:50:6c: f5:f4:dc:b2:3e:25:62:7b:21:c3:ae:6a:d5:bc:e9: 6f:d4:96:00:6c:7a:a5:cb:8d:57:f4:68:75:ac:61: cc:14:80:11:33:b6:74:ec:e2:79:eb:9d:73:a9:98: 0c:06:60:c6:8f:c3:6e:ac:c0:b7:cc:11:72:3b:a9: b4:18:3a:2b:41:9b:d8:d3:ca:d8:48:51:b6:56:ef: 94:cb:27:5a:5c:85:fb:e3:82:8f:7d:7c:80:76:b2: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:54:3A:C1:C1:DB:71:A2:85:58:E3:22:BE:B8:40:9F:D6:FD:47:63 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/362EF79CFB2911EF8C103876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.208.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:58:45:df:5c:cf:c1:c8:68:07:1f:41:b1:8c:33:35:73:8e: fa:59:a1:ec:d5:83:3f:6d:87:ef:7d:97:b6:91:0b:7b:55:46: f3:9d:90:bc:d4:06:d0:df:88:7a:00:57:8d:45:5f:ad:66:ad: 8c:6d:fc:2d:f8:90:ac:aa:d1:96:4a:39:26:4a:b5:b7:e3:f2: cb:81:9b:c6:32:e0:46:93:67:a4:71:5a:17:36:5c:a8:67:05: 3e:e6:9f:73:34:ed:a4:48:6e:70:7a:0d:6c:dc:41:e9:e6:20: b7:ec:8b:62:bb:ea:7e:cd:52:98:c5:96:c8:d3:8c:d3:82:aa: 87:6e:2d:e8:81:d6:09:5e:4e:0e:91:61:5f:5f:ba:eb:05:07: c2:61:02:c2:ca:dc:db:c7:ab:48:98:8d:92:a1:c0:bc:5e:51: 2a:a6:43:a2:ac:f4:53:4f:af:79:b5:97:dd:1f:6a:c5:2c:a6: 78:71:15:86:3f:b2:b4:de:82:b7:cf:01:1e:f7:ed:a2:bc:72: 68:9c:fb:c0:b5:34:38:a1:3f:84:94:56:42:9b:89:69:70:b1: 5b:d1:6f:4c:c5:7d:1b:8e:a5:59:39:e7:b6:b3:81:9e:bd:2f: 22:1a:1c:a6:3d:83:a9:ec:b4:1c:32:e1:e8:d3:3c:58:8a:a3: af:c2:5f:7c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjAyNjExMC8GA1UEBRMoQkQ3OUFDNzY0MEM5NTVDNDM1QzhDRjU1QzI5MUYxMjJC NzBFMkY5OTAeFw0yNTAzMDcwNzUzMDlaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2FhNWU1LTZkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuI4h3c9K7b7JaCpJEgHAkKN2KcVcl52Gl5HbzeqO5OO5au77h6f3Csg/Z25bi 8aWcFKs6Z/TBpYU/Yt6GXxcCtVZqX1uesyoaqEqh5L1lksLgNVY585iJwa2XK4ww FVsanFK7nMtK+7A8EjQVgE60EPybjSRZtRlDeMqcunn4NABMd4AP4n8AlTH+vXZi nYzSvp2LVmpACCQhkmMZn39qsdpQbPX03LI+JWJ7IcOuatW86W/UlgBseqXLjVf0 aHWsYcwUgBEztnTs4nnrnXOpmAwGYMaPw26swLfMEXI7qbQYOitBm9jTythIUbZW 75TLJ1pchfvjgo99fIB2skOrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBlQ6wcHb caKFWOMivrhAn9b9R2MwHwYDVR0jBBgwFoAUvXmsdkDJVcQ1yM9VwpHxIrcOL5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGMDI2LzNCQUFBQzQ0RkIy ODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhtc2RrREpWY1ExeU05VndwSHhJcmNPTDVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi8zNjJFRjc5Q0ZC MjkxMUVGOEMxMDM4NzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaM90DANBgkqhkiG9w0BAQsFAAOCAQEAjFhF31zPwchoBx9B sYwzNXOO+lmh7NWDP22H732XtpELe1VG852QvNQG0N+IegBXjUVfrWatjG38LfiQ rKrRlko5Jkq1t+Pyy4GbxjLgRpNnpHFaFzZcqGcFPuafczTtpEhucHoNbNxB6eYg t+yLYrvqfs1SmMWWyNOM04Kqh24t6IHWCV5ODpFhX1+66wUHwmECwsrc28erSJiN kqHAvF5RKqZDoqz0U0+vebWX3R9qxSymeHEVhj+ytN6Ct88BHvftorxyaJz7wLU0 OKE/hJRWQpuJaXCxW9FvTMV9G46lWTnntrOBnr0vIhocpj2Dqey0HDLh6NM8WIqj r8JffA== -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:50 2025 by rpki-client