$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa File: E7193BDA352611F0B2DE9741C4F9AE02.roa (raw, json) Hash identifier: 8CClipKjk39s1WSkpri19+gl1Zy4hIIN5Zm3RI380fQ= Subject key identifier: 20:77:E3:4F:F6:26:3F:20:0F:86:5D:DC:B0:11:44:14:B4:29:D9:73 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4B41 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa Signing time: Tue 20 May 2025 03:02:45 +0000 ROA not before: Tue 20 May 2025 03:02:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149107 IP address blocks: 163.47.30.0/23 maxlen: 23 2001:df4:1bc0::/48 maxlen: 48 2001:df4:bac0::/48 maxlen: 48 2001:df4:bb40::/48 maxlen: 48 2001:df4:bbc0::/48 maxlen: 48 2001:df4:fc40::/48 maxlen: 48 2401:8e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19265 (0x4b41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: May 20 03:02:45 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=682bf0d5-dd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:53:d7:de:a9:dd:65:55:18:36:0d:e6:5c: 9f:fe:66:54:c3:58:b6:02:2b:f5:38:0c:59:ca:ce: 47:2c:a5:6f:9e:87:ff:b9:f9:89:b7:90:aa:81:b2: 66:75:b8:82:71:69:c5:28:89:05:fe:92:e2:e5:49: 47:f3:09:05:05:12:37:54:da:eb:c3:20:ee:c1:60: 9b:39:ae:98:e7:b9:7f:63:1f:cd:19:f5:77:4d:a2: 2c:5f:48:e5:f5:a4:8f:46:b9:0c:3e:d8:f2:e7:4b: b1:59:fe:03:10:92:eb:b6:fd:4e:61:94:ee:bb:67: d6:dc:e0:86:0b:49:b0:15:94:be:48:0e:27:77:ab: 05:ac:2f:83:b0:4e:65:93:e9:51:5d:34:06:82:08: 6b:f5:b1:9a:c8:19:b5:74:d3:e0:bc:1a:41:b5:2b: 27:b2:9d:2c:0a:55:96:64:bf:80:fd:08:61:b7:08: 61:0f:dc:d1:55:d1:fa:8f:c6:5d:58:96:39:e5:b8: 33:b3:38:5a:ef:73:0b:c8:28:3b:37:cb:6c:20:1d: c9:b8:22:3e:f1:76:16:ec:60:ca:87:65:aa:67:e0: 26:f6:3f:3e:97:19:f9:70:0c:a2:94:14:4d:73:b1: 10:70:fd:31:b7:04:0b:b0:e4:f4:f0:a7:26:35:18: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:77:E3:4F:F6:26:3F:20:0F:86:5D:DC:B0:11:44:14:B4:29:D9:73 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E7193BDA352611F0B2DE9741C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.47.30.0/23 IPv6: 2001:df4:1bc0::/48 2001:df4:bac0::/48 2001:df4:bb40::/48 2001:df4:bbc0::/48 2001:df4:fc40::/48 2401:8e20::/48 Signature Algorithm: sha256WithRSAEncryption 83:6e:70:fd:e1:4e:3a:53:93:da:a5:9a:2f:76:79:1c:95:15: 8d:87:76:81:18:22:89:43:12:ff:fb:9d:52:13:e1:95:7e:9f: b3:22:a3:e6:b4:32:43:e9:f1:49:2d:40:53:4a:3f:00:a9:08: 48:3d:cc:1f:97:04:b0:c1:4a:3c:33:58:07:d7:78:f4:a4:c9: 92:34:7f:50:bf:a8:3b:d5:90:29:35:f0:9f:cf:33:cb:39:e8: ad:ed:34:d9:00:d6:ab:c9:72:6d:d7:fe:df:d9:50:76:af:b5: d6:72:a7:9f:11:17:cd:0c:93:91:bd:e0:da:41:60:5e:1c:15: d1:e4:db:5a:22:71:71:89:48:da:21:c7:dc:89:03:d5:38:16: ce:7d:70:2f:a2:81:82:d1:b3:5b:c1:03:be:25:8d:17:88:cd: df:d8:9b:2f:28:ef:8e:26:f7:f9:12:ad:21:6b:d7:f7:80:d3: 20:b5:97:cd:70:be:ae:01:9f:54:4c:e4:84:1b:6c:e5:b1:77: a8:b2:40:12:3b:a9:7c:1e:bf:30:f5:e1:7a:0e:fd:f2:85:84: 5c:26:f2:12:41:23:14:be:4c:ef:e2:81:0d:d0:89:39:2f:5c: 46:52:9b:f2:73:43:37:a5:fa:6e:1f:a2:81:0e:71:f4:70:ac: 10:54:05:6c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgICS0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNTIwMDMwMjQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJiZjBkNS1kZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFdT196p3WVVGDYN5lyf/mZUw1i2Aiv1OAxZys5HLKVvnof/ufmJt5CqgbJm dbiCcWnFKIkF/pLi5UlH8wkFBRI3VNrrwyDuwWCbOa6Y57l/Yx/NGfV3TaIsX0jl 9aSPRrkMPtjy50uxWf4DEJLrtv1OYZTuu2fW3OCGC0mwFZS+SA4nd6sFrC+DsE5l k+lRXTQGgghr9bGayBm1dNPgvBpBtSsnsp0sClWWZL+A/QhhtwhhD9zRVdH6j8Zd WJY55bgzszha73MLyCg7N8tsIB3JuCI+8XYW7GDKh2WqZ+Am9j8+lxn5cAyilBRN c7EQcP0xtwQLsOT08KcmNRj35QIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFCB340/2 Jj8gD4Zd3LARRBS0KdlzMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTcxOTNCREEz NTI2MTFGMEIyREU5NzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXQYIKwYBBQUHAQcBAf8E TjBMMAwEAgABMAYDBAGjLx4wPAQCAAIwNgMHACABDfQbwAMHACABDfS6wAMHACAB DfS7QAMHACABDfS7wAMHACABDfT8QAMHACQBjiAAADANBgkqhkiG9w0BAQsFAAOC AQEAg25w/eFOOlOT2qWaL3Z5HJUVjYd2gRgiiUMS//udUhPhlX6fsyKj5rQyQ+nx SS1AU0o/AKkISD3MH5cEsMFKPDNYB9d49KTJkjR/UL+oO9WQKTXwn88zyznore00 2QDWq8lybdf+39lQdq+11nKnnxEXzQyTkb3g2kFgXhwV0eTbWiJxcYlI2iHH3IkD 1TgWzn1wL6KBgtGzW8EDviWNF4jN39ibLyjvjib3+RKtIWvX94DTILWXzXC+rgGf VEzkhBts5bF3qLJAEjupfB6/MPXheg798oWEXCbyEkEjFL5M7+KBDdCJOS9cRlKb 8nNDN6X6bh+igQ5x9HCsEFQFbA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:51 2025 by rpki-client