$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa File: 45A63E5E34C911F09E00523CC4F9AE02.roa (raw, json) Hash identifier: UgHJ4HCtUSU7Mhsy3F8cs/81Xi5bIE2mJ11AdKYHzQg= Subject key identifier: BA:34:C4:B2:3F:A9:2A:67:18:BC:E6:4E:91:DE:63:D1:24:75:9F:20 Certificate issuer: /CN=A9181CB2/serialNumber=5A86FED84155BBE475894ACAC52AA76566944094 Certificate serial: 13 Authority key identifier: 5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa Signing time: Mon 19 May 2025 15:52:31 +0000 ROA not before: Mon 19 May 2025 15:52:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153844 IP address blocks: 163.227.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181CB2, serialNumber=5A86FED84155BBE475894ACAC52AA76566944094 Validity Not Before: May 19 15:52:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682b53bf-73d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6b:14:e2:c1:81:6a:a9:38:e4:7c:85:7e:2e: f0:3b:8c:f1:66:31:81:b3:d0:b6:36:76:c6:44:4f: 19:ac:fd:34:81:b1:63:1d:42:83:9a:ae:52:76:0e: 74:e9:ff:a3:a9:e1:86:62:1c:b1:c7:3d:70:81:c8: 33:82:39:36:e5:55:de:42:d6:10:d7:47:fd:02:e3: a9:f7:ca:d3:a2:43:ac:72:de:3f:61:c7:92:ae:e9: 05:8d:1d:97:e1:d4:3e:ba:fa:24:09:18:57:7b:9d: a2:6e:fd:13:a5:45:45:17:3c:62:ea:ee:bb:90:9c: 2f:fe:1f:7d:43:bd:2a:6f:46:af:62:b5:29:02:fc: 93:14:9c:a4:fb:12:78:75:10:9f:30:00:c4:ac:00: 19:98:14:30:36:ef:a7:50:1d:ca:38:d7:a2:66:7a: 7a:f2:8f:54:6c:f4:d2:5e:24:43:42:b8:f8:05:db: 3d:bb:e4:aa:f7:2c:ac:d9:3d:df:e5:6b:4d:bb:79: 35:e1:2a:af:8d:64:58:ba:e1:86:d2:50:a6:be:ce: 43:32:ab:ea:57:12:fd:ae:90:20:04:21:8f:dc:a4: a2:91:28:71:5c:51:36:85:d8:cd:0c:ea:27:c1:1c: 81:5f:4c:a1:19:22:2d:1a:ea:99:41:6c:8e:45:1c: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:C4:B2:3F:A9:2A:67:18:BC:E6:4E:91:DE:63:D1:24:75:9F:20 X509v3 Authority Key Identifier: keyid:5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.212.0/23 Signature Algorithm: sha256WithRSAEncryption 67:43:5d:a2:54:53:54:28:14:34:f4:09:a0:b0:5a:f6:b4:12: 78:7c:05:7f:f8:fc:a4:48:65:e5:5a:a1:4f:93:db:c7:66:e0: 2a:7a:5a:95:87:39:ea:27:af:d2:a3:78:07:41:c9:bb:e5:13: c5:40:c4:8d:c9:0b:6f:f2:b4:4a:e0:3c:25:e2:d5:5f:2d:fe: 2d:f3:b8:a5:44:a8:2e:5e:ed:30:4d:05:1d:e1:36:a5:65:a1: 43:8f:a8:69:c7:d4:4c:6c:51:80:ce:4a:09:ff:e5:f6:d4:98: 89:56:07:4f:0e:05:13:67:d2:de:9c:14:0d:c0:0a:c8:a0:a7: 33:31:c4:84:4c:ee:74:eb:23:69:78:2f:90:b8:b7:12:26:8b: 92:38:ab:27:0c:d9:52:10:a4:f7:af:59:b6:2b:3f:28:d0:2b: a9:e7:7e:24:40:70:e5:2b:d1:5d:d6:6c:03:f8:32:45:bf:30: 74:b6:04:7f:b7:0c:cc:6b:0e:b2:93:78:92:71:dc:be:4c:f4: 14:d7:cb:4c:cf:f2:41:ec:c1:bc:c5:4f:23:99:92:69:13:8a: fd:ea:a1:43:53:3d:d7:a4:0d:b6:30:c7:52:d2:f9:bc:6a:c7: af:e5:3e:8a:8d:7d:b5:a0:35:25:99:55:9a:5e:d5:07:88:e0: 7d:b2:47:a0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MUNCMjExMC8GA1UEBRMoNUE4NkZFRDg0MTU1QkJFNDc1ODk0QUNBQzUyQUE3NjU2 Njk0NDA5NDAeFw0yNTA1MTkxNTUyMzFaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MmI1M2JmLTczZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuaxTiwYFqqTjkfIV+LvA7jPFmMYGz0LY2dsZETxms/TSBsWMdQoOarlJ2DnTp /6Op4YZiHLHHPXCByDOCOTblVd5C1hDXR/0C46n3ytOiQ6xy3j9hx5Ku6QWNHZfh 1D66+iQJGFd7naJu/ROlRUUXPGLq7ruQnC/+H31DvSpvRq9itSkC/JMUnKT7Enh1 EJ8wAMSsABmYFDA276dQHco416Jmenryj1Rs9NJeJENCuPgF2z275Kr3LKzZPd/l a027eTXhKq+NZFi64YbSUKa+zkMyq+pXEv2ukCAEIY/cpKKRKHFcUTaF2M0M6ifB HIFfTKEZIi0a6plBbI5FHF3ZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUujTEsj+p KmcYvOZOkd5j0SR1nyAwHwYDVR0jBBgwFoAUWob+2EFVu+R1iUrKxSqnZWaUQJQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxQ0IyL0RDOUE3ODFFMjhF MTExRjBBMjMwNDE2OEM0RjlBRTAyL1dvYi0yRUZWdS1SMWlVckt4U3FuWldhVVFK US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV29iLTJFRlZ1LVIxaVVyS3hTcW5aV2FVUUpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUNCMi9EQzlBNzgxRTI4RTExMUYwQTIzMDQxNjhDNEY5QUUwMi80NUE2M0U1RTM0 QzkxMUYwOUUwMDUyM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPj1DANBgkqhkiG9w0BAQsFAAOCAQEAZ0NdolRTVCgUNPQJ oLBa9rQSeHwFf/j8pEhl5VqhT5Pbx2bgKnpalYc56iev0qN4B0HJu+UTxUDEjckL b/K0SuA8JeLVXy3+LfO4pUSoLl7tME0FHeE2pWWhQ4+oacfUTGxRgM5KCf/l9tSY iVYHTw4FE2fS3pwUDcAKyKCnMzHEhEzudOsjaXgvkLi3EiaLkjirJwzZUhCk969Z tis/KNArqed+JEBw5SvRXdZsA/gyRb8wdLYEf7cMzGsOspN4knHcvkz0FNfLTM/y QezBvMVPI5mSaROK/eqhQ1M916QNtjDHUtL5vGrHr+U+io19taA1JZlVml7VB4jg fbJHoA== -----END CERTIFICATE-----Generated at Thu Jun 5 19:49:15 2025 by rpki-client