$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa File: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (raw, json) Hash identifier: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4= Subject key identifier: D5:3B:0F:0B:B5:0E:C4:37:3B:C6:7E:01:A1:F3:EB:B7:B6:EC:81:3A Certificate issuer: /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Certificate serial: 02 Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa Signing time: Wed 07 May 2025 06:25:48 +0000 ROA not before: Wed 07 May 2025 06:25:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153854 IP address blocks: 163.227.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Validity Not Before: May 7 06:25:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681afceb-593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:c6:e3:0b:7c:0a:2e:06:0f:d9:18:24:99: bb:1c:b6:35:f1:2d:35:46:64:e9:d4:fb:c8:44:82: af:40:e5:a9:ab:f4:88:95:8c:2a:5a:c4:d2:40:8a: db:f6:fb:19:b7:d9:f1:ae:91:05:2c:3e:30:a5:e8: 80:e6:df:14:07:fb:a9:f5:c2:3c:63:d1:b7:08:67: 69:ce:40:a6:79:17:ca:bc:07:aa:9e:8f:40:f5:b5: b2:a6:be:03:fa:1d:84:f8:db:f8:80:9e:22:96:77: a9:da:88:ca:52:15:db:06:69:b9:6b:32:9d:bd:28: 71:51:f2:3d:71:a7:f6:60:86:a6:77:11:a8:c2:a8: bb:fa:a2:15:35:df:e1:21:31:99:78:d2:18:e1:e5: 07:7b:55:d2:27:b2:02:d6:3c:99:45:6e:5b:67:fb: 47:b7:ac:d7:0d:65:fa:71:c0:57:99:8c:78:1c:64: 63:c4:84:f3:ec:48:72:ca:e8:7d:26:88:71:af:b4: 08:7a:c8:9c:f5:8a:8d:29:4e:a5:2b:50:ac:f1:50: 14:1f:8b:27:37:2e:df:de:27:36:59:5b:ad:d3:cc: 41:d0:47:6b:f5:b4:5b:63:1c:e1:54:27:b8:c5:7d: 73:ff:91:02:25:4a:16:38:b2:1c:db:69:a8:b8:43: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3B:0F:0B:B5:0E:C4:37:3B:C6:7E:01:A1:F3:EB:B7:B6:EC:81:3A X509v3 Authority Key Identifier: keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.255.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fc:d1:5d:26:24:5d:4c:02:b0:7f:25:98:b7:38:c8:68:6b: 41:f5:07:bf:56:44:6c:3c:87:b4:90:87:aa:7b:21:9e:1a:0f: ff:28:6f:86:ac:e9:70:7b:91:0e:5e:80:5c:58:a4:a0:f7:a0: dd:3e:9f:e8:76:bb:2a:a3:f0:88:b5:dd:c2:bb:a1:34:1a:88: c9:fd:ca:49:48:ab:2e:21:f9:33:22:96:b2:cc:f0:d7:12:84: 75:55:7b:a5:87:ab:e9:ca:bb:52:73:4c:e1:0e:25:69:a0:38: c6:9c:ad:78:0a:90:c6:e9:5d:39:87:7c:64:ac:b7:11:d8:08: 3f:79:a3:86:e4:be:b6:3f:0e:89:4d:0b:6b:1f:28:17:2c:53: 7a:ca:2a:dd:7c:95:29:ac:bb:28:d6:d3:b0:81:18:2f:13:14: 88:8c:ec:cf:51:f0:7c:b1:2b:2c:00:dc:1e:b8:0c:62:2f:60: a0:1f:ad:4a:82:76:ef:70:19:fa:10:8e:a5:56:9d:d4:04:0b: 34:61:c6:f8:ce:1b:fe:5b:13:fe:bc:a3:13:d1:27:f2:55:0d: c4:a1:c7:a2:ff:e0:e2:d7:e9:4e:31:1a:3b:38:49:34:77:df: 98:94:2d:4d:eb:b7:87:88:85:b9:5e:d0:ae:8a:ef:a7:30:12: a2:5c:98:37 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTU1OTExMC8GA1UEBRMoMjdGNUFEQTlBMTcxMzA3MzkzMTA5Mzg0NTlCMTRBREEy REQyRjUwNzAeFw0yNTA1MDcwNjI1NDhaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWFmY2ViLTU5M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaG8bjC3wKLgYP2RgkmbsctjXxLTVGZOnU+8hEgq9A5amr9IiVjCpaxNJAitv2 +xm32fGukQUsPjCl6IDm3xQH+6n1wjxj0bcIZ2nOQKZ5F8q8B6qej0D1tbKmvgP6 HYT42/iAniKWd6naiMpSFdsGablrMp29KHFR8j1xp/ZghqZ3EajCqLv6ohU13+Eh MZl40hjh5Qd7VdInsgLWPJlFbltn+0e3rNcNZfpxwFeZjHgcZGPEhPPsSHLK6H0m iHGvtAh6yJz1io0pTqUrUKzxUBQfiyc3Lt/eJzZZW63TzEHQR2v1tFtjHOFUJ7jF fXP/kQIlShY4shzbaai4Q0wlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1TsPC7UO xDc7xn4BofPrt7bsgTowHwYDVR0jBBgwFoAUJ/WtqaFxMHOTEJOEWbFK2i3S9Qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNTU5LzI3QzJFM0U2MkIw QjExRjBCOTJFQ0Y4MUM0RjlBRTAyL0pfV3RxYUZ4TUhPVEVKT0VXYkZLMmkzUzlR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSl9XdHFhRnhNSE9URUpPRVdiRksyaTNTOVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU1OS8yN0MyRTNFNjJCMEIxMUYwQjkyRUNGODFDNEY5QUUwMi8xQ0Y3MkE0ODJC MEMxMUYwOEI3QTI1MTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPj/zANBgkqhkiG9w0BAQsFAAOCAQEAEPzRXSYkXUwCsH8l mLc4yGhrQfUHv1ZEbDyHtJCHqnshnhoP/yhvhqzpcHuRDl6AXFikoPeg3T6f6Ha7 KqPwiLXdwruhNBqIyf3KSUirLiH5MyKWsszw1xKEdVV7pYer6cq7UnNM4Q4laaA4 xpyteAqQxuldOYd8ZKy3EdgIP3mjhuS+tj8OiU0Lax8oFyxTesoq3XyVKay7KNbT sIEYLxMUiIzsz1HwfLErLADcHrgMYi9goB+tSoJ273AZ+hCOpVad1AQLNGHG+M4b /lsT/ryjE9En8lUNxKHHov/g4tfpTjEaOzhJNHffmJQtTeu3h4iFuV7QrorvpzAS olyYNw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:09 2025 by rpki-client