$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa File: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (raw, json) Hash identifier: CFjfwtbnARFkiBTSkHxcw566lVz+R0FjE0lSqqgVvOk= Subject key identifier: 12:E7:D7:A1:CC:F4:54:65:B5:48:4C:79:86:1E:DE:C0:6C:6E:A8:70 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 0A Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa Signing time: Sun 16 Mar 2025 15:08:59 +0000 ROA not before: Sun 16 Mar 2025 15:08:59 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 23532 IP address blocks: 163.61.208.0/23 maxlen: 24 2001:df5:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026 Validity Not Before: Mar 16 15:08:59 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d6e98b-3bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:59:8c:a8:62:e8:13:5d:1c:5e:8c:56:82: d1:2c:e2:8d:5f:0a:83:f9:37:67:97:07:e7:54:ae: cf:27:fd:48:31:8a:42:d4:31:e7:05:22:99:5c:ad: 84:c8:fa:9b:12:03:2b:ac:30:fc:1c:57:75:31:26: b4:b2:ce:ca:2b:fe:71:cb:25:81:33:28:81:4e:2b: a1:0a:cf:30:2d:86:b3:93:5d:98:fa:43:d7:b3:ff: e5:74:56:59:7d:ba:6a:e2:20:8b:80:0b:32:5c:36: 57:57:5f:0b:b0:28:50:12:4b:2c:48:30:9f:9a:81: 0c:b1:75:8f:f9:9e:7a:05:fa:56:cb:cd:3f:e8:19: 14:80:47:03:8d:c9:73:e2:aa:97:21:1c:91:3d:31: 28:b7:77:fc:3e:36:99:bd:7b:83:d7:bf:d7:1e:e9: e6:de:de:95:74:93:df:09:48:e7:1a:44:5a:ce:5b: 81:ae:4b:6b:9f:31:98:1f:3b:c9:e8:32:40:1c:84: 8c:c0:fb:cd:e0:68:77:b7:4e:c7:86:27:ae:1a:bc: 23:d5:e2:39:d2:05:46:a0:74:0e:80:2b:a7:5e:c4: ad:ec:31:d0:a6:f1:a1:e1:00:87:8a:5c:5c:d9:e8: 46:1f:73:c7:12:80:89:e5:7d:de:4b:9c:c2:b7:03: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:D7:A1:CC:F4:54:65:B5:48:4C:79:86:1E:DE:C0:6C:6E:A8:70 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/3FCB43D2FB2911EF8A116D76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.208.0/23 IPv6: 2001:df5:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 52:04:5c:a8:fb:f9:42:38:be:75:f7:e7:76:85:ed:38:7f:70: 18:e9:6a:fb:dc:ef:17:1f:4c:7a:23:e8:39:ba:7e:c3:88:5c: 78:e8:c7:54:db:d0:62:5e:e1:cb:82:a2:65:3a:5b:ec:02:1d: 73:b4:82:48:8d:43:3b:de:5f:95:76:a2:84:fe:2a:48:24:19: 70:17:92:f8:05:9a:77:5e:3a:e6:24:b6:1f:c4:46:95:84:77: 54:b6:34:e3:5b:63:79:81:e5:f5:e9:43:01:04:56:53:22:5f: 74:d6:9f:bc:02:91:f1:3a:d4:c4:fe:53:58:0f:d1:00:25:16: e1:05:59:80:01:62:6b:92:51:52:78:2a:e0:78:ac:e5:80:49: 25:26:6b:7c:bf:eb:bc:5f:ff:4c:29:6e:f6:4d:8f:7f:12:d7: 20:4c:42:f8:d4:e0:44:b4:d2:02:83:8b:3f:95:65:78:cd:ee: 55:d6:08:05:9a:2a:b7:e0:a8:62:13:ce:bc:31:3a:c3:3e:4b: ae:0a:10:4a:e7:0b:21:06:8e:5a:f6:f9:38:57:58:26:84:8b: d4:17:8c:23:c4:1f:e5:4a:4a:3e:19:40:32:c4:ed:73:51:b9: cf:cb:4b:29:a0:87:29:82:42:42:8c:61:5b:8e:18:26:8f:45: 21:8d:7d:ca -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjAyNjExMC8GA1UEBRMoQkQ3OUFDNzY0MEM5NTVDNDM1QzhDRjU1QzI5MUYxMjJC NzBFMkY5OTAeFw0yNTAzMTYxNTA4NTlaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDZlOThiLTNiZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvhFmMqGLoE10cXoxWgtEs4o1fCoP5N2eXB+dUrs8n/UgxikLUMecFIplcrYTI +psSAyusMPwcV3UxJrSyzsor/nHLJYEzKIFOK6EKzzAthrOTXZj6Q9ez/+V0Vll9 umriIIuACzJcNldXXwuwKFASSyxIMJ+agQyxdY/5nnoF+lbLzT/oGRSARwONyXPi qpchHJE9MSi3d/w+Npm9e4PXv9ce6ebe3pV0k98JSOcaRFrOW4GuS2ufMZgfO8no MkAchIzA+83gaHe3TseGJ64avCPV4jnSBUagdA6AK6dexK3sMdCm8aHhAIeKXFzZ 6EYfc8cSgInlfd5LnMK3A9RvAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUEufXocz0 VGW1SEx5hh7ewGxuqHAwHwYDVR0jBBgwFoAUvXmsdkDJVcQ1yM9VwpHxIrcOL5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGMDI2LzNCQUFBQzQ0RkIy ODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhtc2RrREpWY1ExeU05VndwSHhJcmNPTDVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjAyNi8zQkFBQUM0NEZCMjgxMUVGOTU5RkM3NzRDNEY5QUUwMi8zRkNCNDNEMkZC MjkxMUVGOEExMTZENzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaM90DAPBAIAAjAJAwcAIAEN9SDAMA0GCSqGSIb3DQEBCwUA A4IBAQBSBFyo+/lCOL519+d2he04f3AY6Wr73O8XH0x6I+g5un7DiFx46MdU29Bi XuHLgqJlOlvsAh1ztIJIjUM73l+VdqKE/ipIJBlwF5L4BZp3XjrmJLYfxEaVhHdU tjTjW2N5geX16UMBBFZTIl901p+8ApHxOtTE/lNYD9EAJRbhBVmAAWJrklFSeCrg eKzlgEklJmt8v+u8X/9MKW72TY9/EtcgTEL41OBEtNICg4s/lWV4ze5V1ggFmiq3 4KhiE868MTrDPkuuChBK5wshBo5a9vk4V1gmhIvUF4wjxB/lSko+GUAyxO1zUbnP y0spoIcpgkJCjGFbjhgmj0UhjX3K -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:28 2025 by rpki-client