$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa File: B3849A9A359311F09B54926FC4F9AE02.roa (raw, json) Hash identifier: Y+aC1xM6nmmoKwU/+TkwylgFTc7TBvkghCXTXAy84ng= Subject key identifier: B7:07:20:F5:F3:44:74:EF:A2:91:6F:49:11:84:09:AD:8C:23:6B:9F Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 29 Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa Signing time: Tue 20 May 2025 16:01:34 +0000 ROA not before: Tue 20 May 2025 16:01:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137453 IP address blocks: 163.223.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: May 20 16:01:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682ca75d-eba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:7b:d3:af:9e:d1:60:47:56:06:41:ed:e0: 94:38:78:62:4c:df:43:31:01:f3:40:cd:a9:1e:24: f7:e0:9d:10:16:c9:a6:6f:63:c4:89:ac:db:a8:6e: a4:eb:92:02:1a:9b:d4:4b:91:75:ac:3b:91:29:fd: b4:aa:5f:f9:a2:91:91:c5:91:87:81:f2:1e:15:af: f2:a7:62:6b:50:0f:c4:2d:a4:3a:ce:e2:45:75:fa: 86:4a:ae:70:70:2c:92:be:e4:0a:5d:7d:7e:44:e1: 1b:3a:78:15:d3:a7:1f:bd:08:cc:5e:3a:43:ad:4a: 83:5f:ea:7a:07:e5:fa:40:f3:af:9f:ec:59:ec:01: f3:6e:5e:74:f6:39:5c:9d:4d:d6:4c:f3:6f:3f:a8: f9:48:2f:56:c7:22:ae:2b:9f:1c:67:0b:ed:0e:a3: e3:6a:35:e1:03:18:57:11:93:2f:ca:d4:5f:f1:3d: dc:93:4e:e3:67:c4:a2:f9:2d:db:96:bb:cf:56:13: 66:0b:21:bb:bc:9d:13:70:82:d1:07:3a:c7:f3:ec: f6:b8:1f:9e:67:be:3f:e5:59:29:14:de:e0:f9:b5: 4b:16:7d:05:f0:c8:37:cd:fd:8d:e2:b6:61:94:3e: b3:84:9b:1d:69:8b:17:d1:d8:0a:13:fc:fe:0d:60: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:20:F5:F3:44:74:EF:A2:91:6F:49:11:84:09:AD:8C:23:6B:9F X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/B3849A9A359311F09B54926FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.205.0/24 Signature Algorithm: sha256WithRSAEncryption 12:b2:c0:11:97:6c:75:4c:63:df:f0:4b:0b:0a:78:72:78:7c: 58:b3:6e:85:1e:40:6e:6a:5f:ea:a6:f3:76:43:59:0f:19:e3: 5c:9e:bf:5b:1a:f1:77:79:bf:35:e5:46:11:da:d1:f6:2a:73: 38:e4:25:0f:c2:38:41:ac:40:88:98:78:ae:b6:3d:8f:e0:5b: 3c:3e:70:b3:6c:f1:ce:b8:1a:d2:75:97:aa:3e:08:86:ab:84: b9:26:1b:33:98:79:5d:ab:ae:ae:08:92:4c:89:3c:9c:4c:5e: 8c:4b:23:c0:56:45:67:aa:15:57:39:49:46:05:3d:45:15:ef: 9b:d9:d9:bf:84:96:b3:6b:85:55:63:76:e6:aa:94:af:3d:94: bb:1b:8d:0f:9c:49:63:35:fc:2a:00:77:77:90:8a:b1:bc:dc: c3:fa:14:41:0d:42:f1:b4:bf:9d:ab:7d:ae:ca:99:70:c5:79: ff:f8:40:98:d8:a6:26:80:9d:2d:53:08:47:d5:17:b1:ca:1d: 1b:b7:c7:d9:89:11:60:53:4f:7e:09:42:ba:73:bb:00:ea:a0: fd:e6:89:38:07:23:8f:94:f8:17:88:d9:ac:94:52:ab:75:d1: 67:9a:ef:6a:06:08:2b:5c:c1:d6:14:ca:c8:ee:03:06:02:69: 63:88:44:67 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTA1MjAxNjAxMzRaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MmNhNzVkLWViYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJP3vTr57RYEdWBkHt4JQ4eGJM30MxAfNAzakeJPfgnRAWyaZvY8SJrNuobqTr kgIam9RLkXWsO5Ep/bSqX/mikZHFkYeB8h4Vr/KnYmtQD8QtpDrO4kV1+oZKrnBw LJK+5ApdfX5E4Rs6eBXTpx+9CMxeOkOtSoNf6noH5fpA86+f7FnsAfNuXnT2OVyd TdZM828/qPlIL1bHIq4rnxxnC+0Oo+NqNeEDGFcRky/K1F/xPdyTTuNnxKL5LduW u89WE2YLIbu8nRNwgtEHOsfz7Pa4H55nvj/lWSkU3uD5tUsWfQXwyDfN/Y3itmGU PrOEmx1pixfR2AoT/P4NYB1BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtwcg9fNE dO+ikW9JEYQJrYwja58wHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y2QS83QTUyOTg3NjBBRjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9CMzg0OUE5QTM1 OTMxMUYwOUI1NDkyNkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPfzTANBgkqhkiG9w0BAQsFAAOCAQEAErLAEZdsdUxj3/BL Cwp4cnh8WLNuhR5Abmpf6qbzdkNZDxnjXJ6/Wxrxd3m/NeVGEdrR9ipzOOQlD8I4 QaxAiJh4rrY9j+BbPD5ws2zxzrga0nWXqj4IhquEuSYbM5h5XauurgiSTIk8nExe jEsjwFZFZ6oVVzlJRgU9RRXvm9nZv4SWs2uFVWN25qqUrz2UuxuND5xJYzX8KgB3 d5CKsbzcw/oUQQ1C8bS/nat9rsqZcMV5//hAmNimJoCdLVMIR9UXscodG7fH2YkR YFNPfglCunO7AOqg/eaJOAcjj5T4F4jZrJRSq3XRZ5rvagYIK1zB1hTKyO4DBgJp Y4hEZw== -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:30 2025 by rpki-client