$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa File: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (raw, json) Hash identifier: LcUO14s0wegdTiNX+dgH1WWwhW/HYrgfbp8JINcrU+U= Subject key identifier: 3A:A5:20:C5:63:E7:93:06:1B:7F:B9:19:78:E7:16:E8:46:9C:DF:71 Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 04 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa Signing time: Thu 13 Feb 2025 11:16:58 +0000 ROA not before: Thu 13 Feb 2025 11:16:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 163.61.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC Validity Not Before: Feb 13 11:16:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67add4a9-2204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:98:d4:0d:7e:17:2b:dd:f7:68:38:fd:cd: 16:d6:84:84:e4:11:d0:e6:53:76:9f:92:71:7b:f0: 8b:a3:82:15:4c:f7:0a:f9:71:28:b1:ba:42:9c:7a: b2:3a:01:92:74:43:12:65:3b:6f:c1:35:59:bd:ef: 58:26:5d:d8:50:ff:3d:ea:5b:94:8b:44:b9:67:7d: ea:83:e1:e7:ef:b8:75:22:a2:00:54:59:4f:59:c5: 2f:ee:96:2c:46:0b:c0:50:50:8c:89:88:f0:5e:64: b7:a5:33:f0:7e:56:9e:9f:88:a1:fa:31:7a:15:50: 26:e5:e6:ac:2b:1a:8d:1f:df:7f:12:2c:92:6a:f3: 3d:94:8f:e1:78:1b:05:3d:9c:51:a1:69:20:cc:e1: 0d:ef:7c:04:be:bc:c2:d6:bf:aa:95:64:26:02:e2: 52:48:09:14:6f:2a:8a:b6:ee:49:9c:5a:37:6d:37: d2:d0:c3:75:75:fb:dc:dd:e8:ba:52:cd:6d:98:0f: 48:55:5b:90:d9:79:e4:b5:05:1b:25:c3:9c:0c:23: cc:1c:8f:2d:0e:23:6c:e6:a7:da:b6:6b:f7:a4:4b: 94:1d:90:f5:87:f8:c6:a8:e0:22:b7:88:80:78:3b: a1:12:a9:bd:6c:95:92:70:ed:1d:03:ba:7d:87:91: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A5:20:C5:63:E7:93:06:1B:7F:B9:19:78:E7:16:E8:46:9C:DF:71 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/09852FF6E9FC11EF9D3DE972C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.116.0/24 Signature Algorithm: sha256WithRSAEncryption 78:1c:54:fa:4b:14:2a:23:98:f8:68:d4:63:b4:6f:39:94:00: e1:46:81:da:2e:47:9f:61:03:2f:3c:8e:b4:57:7f:90:6c:83: c3:48:4e:f6:a1:80:de:68:09:f7:ab:b8:99:42:02:e3:7c:dd: 74:63:bf:0d:78:79:1c:cd:3f:b8:ed:b7:17:d9:dc:9c:b0:5f: 36:f1:70:d4:79:74:75:30:f3:55:46:35:68:2a:1c:4d:b1:68: 1f:34:d8:df:7a:60:c1:f4:2c:ff:53:ed:09:c4:9e:d3:0c:28: d8:55:1c:2f:7a:58:d4:bd:22:ce:4c:ae:76:83:96:a7:f4:b3: ce:88:98:11:32:8c:8f:9e:ab:bb:59:e1:80:71:b9:2b:bd:ff: a7:aa:37:2e:6b:32:5a:a4:19:b0:19:25:26:f2:bf:52:02:7a: 68:d9:e0:4f:30:7e:a1:9f:b4:f9:9b:9e:f3:d4:fb:6b:bb:9a: f1:97:9b:e3:a3:42:49:06:b7:74:06:19:9e:ec:a7:e4:84:c7: 2c:6f:5a:7e:dd:75:c2:5e:84:27:5e:aa:9d:20:4d:42:cc:78: 91:76:cf:6a:15:89:6f:4d:ea:e1:f9:59:0b:4d:da:21:c8:74: d8:78:fd:3f:8d:2a:e0:c7:33:bf:cf:cb:bd:61:d4:91:5a:30: 33:6f:50:a2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTAyMTMxMTE2NThaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWRkNGE5LTIyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjXpjUDX4XK933aDj9zRbWhITkEdDmU3afknF78IujghVM9wr5cSixukKcerI6 AZJ0QxJlO2/BNVm971gmXdhQ/z3qW5SLRLlnfeqD4efvuHUiogBUWU9ZxS/ulixG C8BQUIyJiPBeZLelM/B+Vp6fiKH6MXoVUCbl5qwrGo0f338SLJJq8z2Uj+F4GwU9 nFGhaSDM4Q3vfAS+vMLWv6qVZCYC4lJICRRvKoq27kmcWjdtN9LQw3V1+9zd6LpS zW2YD0hVW5DZeeS1BRslw5wMI8wcjy0OI2zmp9q2a/ekS5QdkPWH+Mao4CK3iIB4 O6ESqb1slZJw7R0Dun2HkZAJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOqUgxWPn kwYbf7kZeOcW6Eac33EwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi8wOTg1MkZGNkU5 RkMxMUVGOUQzREU5NzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9dDANBgkqhkiG9w0BAQsFAAOCAQEAeBxU+ksUKiOY+GjU Y7RvOZQA4UaB2i5Hn2EDLzyOtFd/kGyDw0hO9qGA3mgJ96u4mUIC43zddGO/DXh5 HM0/uO23F9ncnLBfNvFw1Hl0dTDzVUY1aCocTbFoHzTY33pgwfQs/1PtCcSe0wwo 2FUcL3pY1L0izkyudoOWp/SzzoiYETKMj56ru1nhgHG5K73/p6o3LmsyWqQZsBkl JvK/UgJ6aNngTzB+oZ+0+Zue89T7a7ua8Zeb46NCSQa3dAYZnuyn5ITHLG9aft11 wl6EJ16qnSBNQsx4kXbPahWJb03q4flZC03aIch02Hj9P40q4Mczv8/LvWHUkVow M29Qog== -----END CERTIFICATE-----Generated at Sat Apr 5 00:00:28 2025 by rpki-client