$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa File: 2CA96408FD8811EF9404CD48C4F9AE02.roa (raw, json) Hash identifier: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw= Subject key identifier: C5:A1:AA:96:EA:89:F1:D2:12:E6:A8:E8:C5:92:A6:F2:66:0E:19:AB Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 04 Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa Signing time: Mon 10 Mar 2025 08:21:07 +0000 ROA not before: Mon 10 Mar 2025 08:21:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153681 IP address blocks: 163.223.60.0/23 maxlen: 24 2001:df5:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD Validity Not Before: Mar 10 08:21:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67cea0f2-0fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c5:8b:4b:69:40:e6:55:67:51:fe:b8:0b:1a: aa:48:cc:1d:cb:5d:59:79:6a:8b:e8:9a:77:a1:5c: a5:18:e9:e8:5e:1d:d8:9d:46:f2:01:5c:a1:6e:c3: 82:1e:51:cc:37:72:d1:22:4d:ac:19:da:11:ee:50: 8e:db:81:d7:da:cf:e2:3a:4d:3e:72:07:9b:26:0b: 1c:ae:45:a8:e0:3e:a8:03:c3:85:f4:b4:61:fc:89: b2:b2:5e:0f:2f:6b:2a:f1:ec:95:54:c5:2a:37:2f: b5:5a:47:4a:29:6e:5a:bf:ac:9e:1d:58:0c:3b:01: 68:48:bf:c9:61:35:8d:55:ae:be:bb:4b:d3:8b:69: 4e:20:a4:cb:b2:ed:2d:d1:3a:09:40:7f:b1:50:a2: 43:d3:9e:3b:d4:28:75:e3:36:52:5e:8a:67:df:04: 03:eb:da:0b:88:b8:00:e0:b2:ad:54:70:b5:1c:80: 4a:67:73:02:42:62:9b:a6:8d:9f:84:9b:30:3e:10: 58:d4:1e:47:45:c0:3c:00:4f:c9:9a:40:9b:82:7d: 37:16:ae:d2:65:02:44:e6:ee:25:b6:39:0d:aa:65: d6:df:51:e5:7f:5a:1a:55:55:13:4d:44:66:94:05: 65:90:67:95:88:eb:c9:8b:be:8b:a9:cb:6d:2b:3d: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A1:AA:96:EA:89:F1:D2:12:E6:A8:E8:C5:92:A6:F2:66:0E:19:AB X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.60.0/23 IPv6: 2001:df5:3440::/48 Signature Algorithm: sha256WithRSAEncryption 02:ee:c2:48:f8:0d:d6:17:1d:73:a5:b3:2c:2e:e0:87:13:f2: e3:0e:fa:b6:37:fc:05:96:03:da:c3:f2:39:fc:6b:1c:92:e9: 9e:78:b6:50:1e:2a:42:0c:21:df:19:06:e5:eb:0c:6d:04:5f: 40:6a:4e:39:a6:bb:30:dd:a8:b8:9b:6f:8a:02:a2:0b:d0:0f: 3f:8d:af:4c:b0:91:60:cb:c9:de:a4:c2:43:29:3a:06:09:e9: 99:e6:5a:9e:31:9f:29:a0:7d:3e:70:d6:42:af:1e:7a:0c:69: c9:c8:b8:08:4c:cc:b7:4b:76:9d:f2:d9:96:cd:23:76:26:ae: 78:43:10:1c:06:d9:20:60:d5:2d:85:23:1e:a9:50:42:da:3a: e3:33:ea:9d:0b:35:32:cb:6f:ff:b0:cf:73:17:35:85:70:e8: 06:9f:c3:dc:3d:5a:33:24:27:66:e8:99:76:31:cf:79:f6:5e: 62:a1:b5:6d:1a:57:ef:35:e5:1f:8f:32:9a:84:e9:87:83:df: ef:6f:33:1a:e2:0e:13:32:e7:c0:45:c1:7f:39:6f:b8:54:4a: 3a:93:b2:cd:5c:cb:7a:c5:79:ca:59:1a:64:6e:be:76:64:2b: f3:28:0f:61:52:ab:12:df:aa:ac:89:e5:59:ab:f9:43:c8:5b: 03:1e:8e:ae -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTAzMTAwODIxMDdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2VhMGYyLTBmYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/xYtLaUDmVWdR/rgLGqpIzB3LXVl5aovomnehXKUY6eheHdidRvIBXKFuw4Ie Ucw3ctEiTawZ2hHuUI7bgdfaz+I6TT5yB5smCxyuRajgPqgDw4X0tGH8ibKyXg8v ayrx7JVUxSo3L7VaR0opblq/rJ4dWAw7AWhIv8lhNY1Vrr67S9OLaU4gpMuy7S3R OglAf7FQokPTnjvUKHXjNlJeimffBAPr2guIuADgsq1UcLUcgEpncwJCYpumjZ+E mzA+EFjUHkdFwDwAT8maQJuCfTcWrtJlAkTm7iW2OQ2qZdbfUeV/WhpVVRNNRGaU BWWQZ5WI68mLvoupy20rPYV7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUxaGqluqJ 8dIS5qjoxZKm8mYOGaswHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTRDRC9EMkUyQ0E3Q0ZEODcxMUVGQjY2MjRBMjhDNEY5QUUwMi8yQ0E5NjQwOEZE ODgxMUVGOTQwNENENDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPfPDAPBAIAAjAJAwcAIAEN9TRAMA0GCSqGSIb3DQEBCwUA A4IBAQAC7sJI+A3WFx1zpbMsLuCHE/LjDvq2N/wFlgPaw/I5/GsckumeeLZQHipC DCHfGQbl6wxtBF9Aak45prsw3ai4m2+KAqIL0A8/ja9MsJFgy8nepMJDKToGCemZ 5lqeMZ8poH0+cNZCrx56DGnJyLgITMy3S3ad8tmWzSN2Jq54QxAcBtkgYNUthSMe qVBC2jrjM+qdCzUyy2//sM9zFzWFcOgGn8PcPVozJCdm6Jl2Mc959l5iobVtGlfv NeUfjzKahOmHg9/vbzMa4g4TMufARcF/OW+4VEo6k7LNXMt6xXnKWRpkbr52ZCvz KA9hUqsS36qsieVZq/lDyFsDHo6u -----END CERTIFICATE-----Generated at Sat Apr 5 02:02:52 2025 by rpki-client