$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa File: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (raw, json) Hash identifier: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY= Subject key identifier: 36:6B:1A:9B:9B:4F:2F:03:85:75:A0:A2:EB:37:25:39:B0:81:99:04 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 02 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa Signing time: Sun 29 Jun 2025 06:10:45 +0000 ROA not before: Sun 29 Jun 2025 06:10:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153692 IP address blocks: 163.223.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 08:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Jun 29 06:10:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6860d8e5-2426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:7c:5a:16:04:35:c6:cd:6a:6e:a5:65:a6: 98:e8:7e:c8:53:dc:9e:f6:45:ac:bb:a3:ad:86:9b: 35:80:95:d4:a1:cc:a1:50:3e:b5:ee:10:c2:5a:6e: 77:ae:c6:96:b4:d3:b4:c6:f6:c4:5c:39:4c:40:7d: 5d:52:12:8a:45:5a:ec:a6:86:ed:cd:ac:e0:c1:a4: f8:19:0a:98:5e:24:fd:9b:d3:d8:09:5f:89:c5:e4: 5a:25:ce:5a:ec:8d:ce:53:9d:fd:24:a2:b8:d6:ba: 11:7b:f8:03:ed:36:02:45:f9:09:d1:fc:2c:6e:57: 98:8c:5f:3c:d0:09:c5:12:83:ab:98:78:fc:8c:4d: a3:d7:55:df:1f:df:5b:b6:38:ff:51:eb:4d:c8:4a: 1b:79:38:84:f6:50:16:5b:53:b8:da:30:bf:83:a5: 5d:3c:a7:22:4a:1f:0f:1a:a7:23:4e:64:49:f7:9c: 25:fa:cc:92:09:b7:28:6b:e8:b4:5c:97:d7:5d:13: a2:eb:a4:95:64:d5:98:92:d4:29:00:32:1d:e4:3f: 52:17:34:82:9c:db:a4:ae:f9:ef:1c:1c:2e:a8:ec: bc:f8:e9:29:ec:ff:17:ce:2f:b9:49:1f:f6:4a:69: 99:67:a7:8b:f7:e7:23:f0:ec:0d:43:e6:26:3a:05: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6B:1A:9B:9B:4F:2F:03:85:75:A0:A2:EB:37:25:39:B0:81:99:04 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.96.0/24 Signature Algorithm: sha256WithRSAEncryption 55:79:6d:be:44:07:6e:f5:8e:44:20:c1:72:e9:b9:e7:d6:2c: e8:33:5d:96:e0:54:e5:a0:a3:d4:96:6b:5d:42:a3:aa:74:27: 2f:fa:fd:3b:8c:72:b8:53:c5:7a:7a:2b:30:59:f0:36:ea:95: a9:c1:22:e2:9a:ca:05:c7:e7:2c:7a:1b:03:a0:5d:12:25:91: 4b:fd:d0:a2:83:0f:49:fd:f3:3d:ea:c7:ca:db:72:27:c8:e7: 52:2e:93:64:0e:a8:22:e3:e3:11:5c:de:93:3b:26:16:2e:8e: 42:bb:5a:7a:07:c2:78:e8:ad:47:87:ca:a0:33:f8:68:15:84: b7:74:91:1c:b3:9b:91:6a:39:8c:19:bb:49:58:14:87:aa:3f: 7a:95:2f:07:f7:98:9a:f5:6b:e4:e3:42:48:98:b0:11:f8:cb: f6:19:b9:a3:5c:32:19:67:4b:41:2e:0c:d1:15:96:de:7b:aa: 75:cd:91:42:58:4e:fa:ac:c8:77:91:ae:a0:b9:a6:fd:f9:12: d0:c9:d3:25:9e:e9:d4:53:a3:ed:9f:1f:96:a4:fe:8a:e0:83: ff:0a:c3:61:2b:38:2e:3f:fa:5c:fe:0c:25:34:bb:22:b5:3e: 24:0d:39:da:8f:87:e2:7e:42:43:c9:91:0c:b5:a9:cb:44:69: a3:cf:49:0a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTA2MjkwNjEwNDVaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjBkOGU1LTI0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYvXxaFgQ1xs1qbqVlppjofshT3J72Ray7o62GmzWAldShzKFQPrXuEMJabneu xpa007TG9sRcOUxAfV1SEopFWuymhu3NrODBpPgZCpheJP2b09gJX4nF5Folzlrs jc5Tnf0korjWuhF7+APtNgJF+QnR/CxuV5iMXzzQCcUSg6uYePyMTaPXVd8f31u2 OP9R603ISht5OIT2UBZbU7jaML+DpV08pyJKHw8apyNOZEn3nCX6zJIJtyhr6LRc l9ddE6LrpJVk1ZiS1CkAMh3kP1IXNIKc26Su+e8cHC6o7Lz46Sns/xfOL7lJH/ZK aZlnp4v35yPw7A1D5iY6BVQLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNmsam5tP LwOFdaCi6zclObCBmQQwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9DQjRBQ0RCQzU0 QUYxMUYwOTk5RkFBM0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPfYDANBgkqhkiG9w0BAQsFAAOCAQEAVXltvkQHbvWORCDB cum559Ys6DNdluBU5aCj1JZrXUKjqnQnL/r9O4xyuFPFenorMFnwNuqVqcEi4prK BcfnLHobA6BdEiWRS/3QooMPSf3zPerHyttyJ8jnUi6TZA6oIuPjEVzekzsmFi6O QrtaegfCeOitR4fKoDP4aBWEt3SRHLObkWo5jBm7SVgUh6o/epUvB/eYmvVr5ONC SJiwEfjL9hm5o1wyGWdLQS4M0RWW3nuqdc2RQlhO+qzId5GuoLmm/fkS0MnTJZ7p 1FOj7Z8flqT+iuCD/wrDYSs4Lj/6XP4MJTS7IrU+JA052o+H4n5CQ8mRDLWpy0Rp o89JCg== -----END CERTIFICATE-----Generated at Mon Jul 7 13:21:21 2025 by rpki-client