$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa File: 4F2C3D2C00A111F0890E9154C4F9AE02.roa (raw, json) Hash identifier: lHae4Z7yEo3J+DzSRFDkYh/8wUpEdOCy4jst8ikU4Go= Subject key identifier: 2B:E2:93:4F:47:FF:8C:2E:44:6A:5A:B7:85:B2:72:40:5A:6D:AF:78 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A1D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa Signing time: Mon 17 Mar 2025 09:41:07 +0000 ROA not before: Mon 17 Mar 2025 09:41:07 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153683 IP address blocks: 163.223.58.0/23 maxlen: 23 2001:df5:33c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18973 (0x4a1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 17 09:41:07 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d7ee32-1f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:19:55:8b:ea:e2:4e:44:1f:2a:14:d9:b8: b7:75:11:45:7e:5f:c7:75:65:6b:6f:ba:93:6f:e0: 25:f1:b5:18:20:99:fe:f2:24:3a:6d:6c:eb:21:db: 98:05:15:14:db:ce:b4:be:50:08:03:ba:91:ea:52: 8a:3a:00:b1:92:2d:87:0d:50:b8:d0:b6:18:ed:a3: 5e:d0:1f:e4:65:e6:25:73:a5:7c:af:52:a9:ec:3e: d1:48:b7:2a:26:61:19:2c:df:f8:66:b8:20:b3:ec: 75:1e:8e:5c:92:ff:a7:c5:53:f6:dc:78:11:b8:49: 7a:0a:4f:f4:b5:e4:1f:2e:45:0d:e4:10:6b:96:7e: 36:02:24:5d:36:ce:3b:82:be:4f:07:b2:c1:63:15: 09:93:49:fd:2d:f9:b4:d9:cd:08:9b:08:ce:f6:0d: ee:fe:4d:9a:e4:65:14:76:09:c5:37:ac:ed:1d:7c: 77:70:b2:be:d9:f1:14:78:cd:57:3b:06:e1:5c:3b: d4:4d:50:18:7f:9f:c3:b0:99:b9:fa:cd:ad:5c:97: 87:34:78:5a:1e:2a:e9:a0:a9:66:ce:83:9f:96:74: ea:2d:f6:9f:14:0f:52:fa:3e:16:d5:e5:b1:c3:ea: 62:f9:56:06:7d:93:4a:a9:dc:ae:e0:e4:e1:5d:07: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:93:4F:47:FF:8C:2E:44:6A:5A:B7:85:B2:72:40:5A:6D:AF:78 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.58.0/23 IPv6: 2001:df5:33c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:94:09:de:12:82:e0:7d:02:01:c2:f7:cd:72:62:64:a0:e7: 8d:35:03:92:d4:1f:48:b2:ab:8c:ab:95:c9:e8:61:73:cc:24: 13:46:10:45:6e:ec:4f:13:19:01:28:f0:d9:41:3f:51:2c:a8: 46:30:a2:e4:f0:86:30:8e:92:86:d7:39:aa:23:8a:a9:ff:ae: 5b:a4:78:ca:a8:5d:20:6f:76:0f:3f:70:53:21:f4:a6:77:42: 46:44:96:d0:2b:31:95:b9:67:2d:82:51:f2:97:55:c7:e9:a4: ab:fa:ef:e2:37:e5:b4:44:bc:4e:bc:bc:8e:f9:0d:ca:b7:03: a0:79:5e:88:8b:a3:5d:fd:3c:2f:4b:c2:91:15:e4:bb:cf:67: 03:c1:4f:f1:c0:23:4c:9b:5c:01:16:a1:87:cf:07:f9:c6:22: 07:09:3f:6d:12:e2:ff:ae:63:01:5a:ac:51:50:2b:d2:f0:42: 50:b9:e8:64:5b:0d:4a:96:5f:5a:d5:64:57:70:74:3f:c5:59: 3d:10:be:8d:74:33:48:6f:4b:cd:e5:8e:a5:ad:67:60:e0:3b: 86:33:9b:43:55:2c:9d:19:98:43:a0:c3:b9:32:29:58:39:52: 93:3e:3a:70:04:20:b8:61:82:b6:ec:f6:69:de:ab:0b:53:7f: 2d:68:7c:90 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICSh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMzE3MDk0MTA3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q3ZWUzMi0xZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvgZVYvq4k5EHyoU2bi3dRFFfl/HdWVrb7qTb+Al8bUYIJn+8iQ6bWzrIduY BRUU2860vlAIA7qR6lKKOgCxki2HDVC40LYY7aNe0B/kZeYlc6V8r1Kp7D7RSLcq JmEZLN/4Zrggs+x1Ho5ckv+nxVP23HgRuEl6Ck/0teQfLkUN5BBrln42AiRdNs47 gr5PB7LBYxUJk0n9Lfm02c0ImwjO9g3u/k2a5GUUdgnFN6ztHXx3cLK+2fEUeM1X OwbhXDvUTVAYf5/DsJm5+s2tXJeHNHhaHirpoKlmzoOflnTqLfafFA9S+j4W1eWx w+pi+VYGfZNKqdyu4OThXQdtiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCvik09H /4wuRGpat4WyckBaba94MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEYyQzNEMkMw MEExMTFGMDg5MEU5MTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAGj3zowDwQCAAIwCQMHACABDfUzwDANBgkqhkiG9w0BAQsF AAOCAQEAZJQJ3hKC4H0CAcL3zXJiZKDnjTUDktQfSLKrjKuVyehhc8wkE0YQRW7s TxMZASjw2UE/USyoRjCi5PCGMI6Shtc5qiOKqf+uW6R4yqhdIG92Dz9wUyH0pndC RkSW0CsxlblnLYJR8pdVx+mkq/rv4jfltES8Try8jvkNyrcDoHleiIujXf08L0vC kRXku89nA8FP8cAjTJtcARahh88H+cYiBwk/bRLi/65jAVqsUVAr0vBCULnoZFsN SpZfWtVkV3B0P8VZPRC+jXQzSG9LzeWOpa1nYOA7hjObQ1UsnRmYQ6DDuTIpWDlS kz46cAQguGGCtuz2ad6rC1N/LWh8kA== -----END CERTIFICATE-----Generated at Sat Apr 5 15:15:09 2025 by rpki-client