$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/68B7296E3B9811F0B5021A77C4F9AE02.roa File: 68B7296E3B9811F0B5021A77C4F9AE02.roa (raw, json) Hash identifier: gg4F5Zc8aQptm/CJNjYOsxzEWveMotdNbcTxAKleXkE= Subject key identifier: E6:93:65:1D:7B:14:86:8D:5A:C2:E3:E4:BD:90:E4:FE:63:18:2C:7D Certificate issuer: /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Certificate serial: 02 Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/68B7296E3B9811F0B5021A77C4F9AE02.roa Signing time: Wed 28 May 2025 07:50:23 +0000 ROA not before: Wed 28 May 2025 07:50:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4764 IP address blocks: 163.223.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7 Validity Not Before: May 28 07:50:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6836c03e-116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:69:eb:df:64:52:e2:f0:65:3d:9a:5a:17: 99:39:9e:04:99:5e:d5:b1:f2:f1:6d:b2:59:f3:42: 37:b9:ea:d4:24:35:62:09:32:8d:6b:1f:0e:35:c0: 51:6a:18:91:dd:74:2c:5d:e5:77:93:6b:3b:67:ee: 64:54:c1:41:8a:5f:a7:2c:f4:83:bd:cb:08:27:7c: 5f:4e:93:5c:7b:de:f6:2c:8e:da:1c:b3:10:74:14: 1e:8d:88:e4:15:af:ef:fb:a2:9e:4d:ff:91:29:8b: 2a:6c:95:9d:d4:78:0c:9b:ce:59:88:b6:e5:4c:08: cf:05:fe:03:c6:6e:44:d3:1e:30:a6:33:63:1f:de: 84:1c:52:c0:8f:65:e9:09:f0:fe:3a:0f:76:40:1a: 70:a0:9c:02:34:72:18:13:8a:3c:04:33:0a:a2:95: 47:45:41:80:59:b2:41:32:77:d4:cb:f1:7e:82:02: 9a:89:39:c2:54:9a:a0:5b:2a:58:94:15:bc:b7:e8: df:64:f9:28:b5:6e:db:a7:91:3c:b2:94:c1:fc:da: f8:2f:0d:47:15:8b:89:8c:10:3c:23:0f:eb:06:b0: e8:11:1b:1f:f5:a1:b2:4a:4d:40:c1:8a:ce:00:fa: 8e:f8:ff:1b:ae:a2:f5:93:a4:be:f5:65:d3:1d:1f: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:65:1D:7B:14:86:8D:5A:C2:E3:E4:BD:90:E4:FE:63:18:2C:7D X509v3 Authority Key Identifier: keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/68B7296E3B9811F0B5021A77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.22.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:48:db:92:a2:ec:54:6a:15:52:b4:90:52:af:9b:81:7e:96: 09:11:3d:c9:a0:82:6d:14:05:a8:04:2f:6d:69:e9:ba:e5:d1: 44:05:e3:4f:c5:e2:e3:65:43:04:a1:7f:84:81:06:59:56:7a: 2e:20:a6:93:a5:c5:1b:81:9b:52:ed:0c:58:13:d0:99:58:95: 45:4d:b0:70:38:81:0d:8f:19:b1:dc:86:f7:31:4c:8f:fc:60: e7:8d:54:b1:0f:db:5e:73:41:96:f0:08:47:7a:06:00:da:aa: d2:e3:25:c3:8a:3f:45:3e:ab:b1:e6:bd:d7:48:34:fc:53:ea: b7:d3:ed:e5:f7:29:99:6f:75:5f:6e:79:a5:87:a0:7f:2f:37: e2:e6:97:c0:dc:c2:93:b8:76:cf:3d:65:0e:af:0d:ce:e0:61: 15:ba:27:63:06:80:6b:81:2e:77:37:42:6b:5e:4f:e5:9a:00: 8b:5c:79:c3:2c:fb:d6:0e:64:fd:48:5e:1a:ee:df:5c:f8:5c: b4:5a:90:f5:d5:91:d5:35:c6:34:ab:b8:fa:bd:9f:5a:e4:11: 50:b7:ea:50:1b:a1:30:cb:bf:38:93:42:76:34:1d:c9:62:ca: 93:e9:11:9e:e4:eb:5e:de:cb:60:33:b4:0b:b2:36:c2:5d:a7: ae:e1:ba:6b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDIwODExMC8GA1UEBRMoNEJBMTNENTQ5QTA1NjRDMzFFQThCMjMxNUZDRTMwMjNC QjYyODhBNzAeFw0yNTA1MjgwNzUwMjNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzZjMDNlLTExNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnpGnr32RS4vBlPZpaF5k5ngSZXtWx8vFtslnzQje56tQkNWIJMo1rHw41wFFq GJHddCxd5XeTaztn7mRUwUGKX6cs9IO9ywgnfF9Ok1x73vYsjtocsxB0FB6NiOQV r+/7op5N/5EpiypslZ3UeAybzlmItuVMCM8F/gPGbkTTHjCmM2Mf3oQcUsCPZekJ 8P46D3ZAGnCgnAI0chgTijwEMwqilUdFQYBZskEyd9TL8X6CApqJOcJUmqBbKliU Fby36N9k+Si1btunkTyylMH82vgvDUcVi4mMEDwjD+sGsOgRGx/1obJKTUDBis4A +o74/xuuovWTpL71ZdMdH+03AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5pNlHXsU ho1awuPkvZDk/mMYLH0wHwYDVR0jBBgwFoAUS6E9VJoFZMMeqLIxX84wI7tiiKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwMjA4L0JBODY3NDI2M0I5 NzExRjBBMTcwQzc3NUM0RjlBRTAyL1M2RTlWSm9GWk1NZXFMSXhYODR3STd0aWlL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZFOVZKb0ZaTU1lcUxJeFg4NHdJN3RpaUtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDIwOC9CQTg2NzQyNjNCOTcxMUYwQTE3MEM3NzVDNEY5QUUwMi82OEI3Mjk2RTNC OTgxMUYwQjUwMjFBNzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfFjANBgkqhkiG9w0BAQsFAAOCAQEAXUjbkqLsVGoVUrSQ Uq+bgX6WCRE9yaCCbRQFqAQvbWnpuuXRRAXjT8Xi42VDBKF/hIEGWVZ6LiCmk6XF G4GbUu0MWBPQmViVRU2wcDiBDY8ZsdyG9zFMj/xg541UsQ/bXnNBlvAIR3oGANqq 0uMlw4o/RT6rsea910g0/FPqt9Pt5fcpmW91X255pYegfy834uaXwNzCk7h2zz1l Dq8NzuBhFbonYwaAa4EudzdCa15P5ZoAi1x5wyz71g5k/UheGu7fXPhctFqQ9dWR 1TXGNKu4+r2fWuQRULfqUBuhMMu/OJNCdjQdyWLKk+kRnuTrXt7LYDO0C7I2wl2n ruG6aw== -----END CERTIFICATE-----Generated at Mon Jun 2 07:20:40 2025 by rpki-client