$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa File: D7605790272B11F08FF39632C4F9AE02.roa (raw, json) Hash identifier: Fi0yCP05HdRSZdYqPkFnS/jg/xhA2BNVnmSoNmrn8ME= Subject key identifier: 26:E1:B5:1E:E5:9E:62:57:31:BD:C1:9D:9A:69:1D:9D:1A:36:87:77 Certificate issuer: /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Certificate serial: 02 Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa Signing time: Fri 02 May 2025 08:02:50 +0000 ROA not before: Fri 02 May 2025 08:02:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153695 IP address blocks: 163.223.110.0/24 maxlen: 24 163.223.111.0/24 maxlen: 24 2001:df5:3c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7 Validity Not Before: May 2 08:02:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68147c2a-9426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fb:8d:c3:3e:2e:1b:bc:a5:b4:31:09:12:ed: 4f:ed:92:0f:45:b5:fd:50:d5:d6:57:3c:dc:37:a4: af:6c:2c:3f:c2:da:7d:45:27:1d:b3:01:a4:88:5d: c1:5f:e7:11:85:1b:92:ed:31:e1:2d:52:a3:a0:e6: 9c:22:71:f5:4b:81:7a:26:45:28:8d:41:c1:99:9f: eb:b3:c0:e7:89:ed:2c:8f:79:ce:70:4d:0d:86:3f: ae:36:28:52:86:a9:13:64:aa:06:9a:90:12:8d:29: e6:23:c2:23:f7:fe:5a:66:1d:e0:f5:f1:06:a3:fe: 9a:8a:8d:a4:5e:23:dc:7a:3b:84:1a:d7:66:71:8d: da:ad:e1:c5:4b:5f:54:9a:ea:3d:e1:88:6f:ea:67: f7:34:5a:0e:a4:53:d9:2d:65:ca:fb:49:d6:a8:1c: 21:23:2e:5b:e6:9c:57:94:6c:a3:5d:9d:a6:34:23: 54:d5:e8:cb:e1:58:c1:0c:b6:3f:5b:24:6b:da:23: c6:60:1a:01:d1:11:55:d6:d2:c5:27:a0:42:53:03: 5a:08:4a:7d:27:03:16:c9:7b:75:52:3f:4a:fa:a2: 00:c6:be:17:b9:61:be:a1:00:e1:8c:bf:89:6e:74: 04:6e:e1:e4:a3:01:ae:34:f3:eb:56:fc:3c:ea:7c: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E1:B5:1E:E5:9E:62:57:31:BD:C1:9D:9A:69:1D:9D:1A:36:87:77 X509v3 Authority Key Identifier: keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.110.0/23 IPv6: 2001:df5:3c40::/48 Signature Algorithm: sha256WithRSAEncryption ac:51:ed:82:05:c5:9f:73:74:04:3b:9f:5d:88:34:03:0b:a4: fd:75:ec:c2:c3:21:8a:f8:29:81:68:74:01:1b:78:c6:ef:99: 54:2b:c0:d2:4a:7b:c8:b3:41:6c:c3:03:bd:72:6a:8f:0c:d3: f0:05:aa:d7:87:7e:c0:af:c6:8e:bc:0e:2a:93:c9:d4:67:2a: 60:51:86:2f:58:90:59:e2:03:2b:7a:48:14:c0:89:db:35:0c: 22:15:33:48:dd:d3:f3:30:7f:80:0e:77:76:d4:bb:8d:79:d8: a4:65:28:72:c0:05:e0:f1:d9:7c:61:2c:8a:8f:e0:a7:6d:08: a0:d6:26:03:39:74:d2:8b:6b:1e:96:a5:c6:1a:a6:21:7b:9a: 78:2b:50:ff:c0:6e:c7:dc:5a:cf:0d:80:02:1f:af:88:77:4c: 17:46:1a:fc:2e:f2:4a:c1:e4:a0:bb:c7:e9:02:e8:d2:15:06: c9:58:e8:44:f0:9c:99:51:05:44:52:34:a0:2b:86:70:10:db: 4d:15:86:5f:09:90:69:c8:7a:b3:19:4e:60:69:df:3e:cb:91: 61:6d:51:39:bb:19:da:6f:37:49:79:44:c1:f0:e2:ba:97:30: ba:ab:c0:a6:de:d6:6d:20:6b:4b:e1:c0:df:3f:6b:63:af:c3: 54:b6:bf:4d -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0U2RjExMC8GA1UEBRMoMUIxQUYxODM1MTA2QzkzMzlBREQzMTQ1RTkwMEIwNkZE QTlFNTZFNzAeFw0yNTA1MDIwODAyNTBaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MTQ3YzJhLTk0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw+43DPi4bvKW0MQkS7U/tkg9Ftf1Q1dZXPNw3pK9sLD/C2n1FJx2zAaSIXcFf 5xGFG5LtMeEtUqOg5pwicfVLgXomRSiNQcGZn+uzwOeJ7SyPec5wTQ2GP642KFKG qRNkqgaakBKNKeYjwiP3/lpmHeD18Qaj/pqKjaReI9x6O4Qa12Zxjdqt4cVLX1Sa 6j3hiG/qZ/c0Wg6kU9ktZcr7SdaoHCEjLlvmnFeUbKNdnaY0I1TV6MvhWMEMtj9b JGvaI8ZgGgHREVXW0sUnoEJTA1oISn0nAxbJe3VSP0r6ogDGvhe5Yb6hAOGMv4lu dARu4eSjAa408+tW/DzqfDZBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUJuG1HuWe YlcxvcGdmmkdnRo2h3cwHwYDVR0jBBgwFoAUGxrxg1EGyTOa3TFF6QCwb9qeVucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRTZGLzJEMTgxN0I0Mjcy QjExRjBBMEM2NzQ0REM0RjlBRTAyL0d4cnhnMUVHeVRPYTNURkY2UUN3YjlxZVZ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR3hyeGcxRUd5VE9hM1RGRjZRQ3diOXFlVnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0U2Ri8yRDE4MTdCNDI3MkIxMUYwQTBDNjc0NERDNEY5QUUwMi9ENzYwNTc5MDI3 MkIxMUYwOEZGMzk2MzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPfbjAPBAIAAjAJAwcAIAEN9TxAMA0GCSqGSIb3DQEBCwUA A4IBAQCsUe2CBcWfc3QEO59diDQDC6T9dezCwyGK+CmBaHQBG3jG75lUK8DSSnvI s0FswwO9cmqPDNPwBarXh37Ar8aOvA4qk8nUZypgUYYvWJBZ4gMrekgUwInbNQwi FTNI3dPzMH+ADnd21LuNedikZShywAXg8dl8YSyKj+CnbQig1iYDOXTSi2selqXG GqYhe5p4K1D/wG7H3FrPDYACH6+Id0wXRhr8LvJKweSgu8fpAujSFQbJWOhE8JyZ UQVEUjSgK4ZwENtNFYZfCZBpyHqzGU5gad8+y5FhbVE5uxnabzdJeUTB8OK6lzC6 q8Cm3tZtIGtL4cDfP2tjr8NUtr9N -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:23 2025 by rpki-client