$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/F8C2A4E4359311F08C686E1BC4F9AE02.roa File: F8C2A4E4359311F08C686E1BC4F9AE02.roa (raw, json) Hash identifier: vSYTG4FiK7ZLm+rL5F5xQfklb4JbIfkyGEDj5czTJUY= Subject key identifier: 91:BE:FE:03:79:07:B2:7C:1C:D3:BD:B8:68:38:0C:00:36:3C:DA:E6 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 2B Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/F8C2A4E4359311F08C686E1BC4F9AE02.roa Signing time: Tue 20 May 2025 16:03:30 +0000 ROA not before: Tue 20 May 2025 16:03:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153737 IP address blocks: 163.223.204.0/23 maxlen: 23 163.223.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: May 20 16:03:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682ca7d2-711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:a5:a7:3f:d6:76:c7:59:47:6e:6c:1d:84: d6:4f:ea:be:9d:2a:b6:76:3a:4a:85:c0:1d:0b:b3: f2:3b:a5:4d:00:9a:9f:8e:65:6b:be:68:51:73:8b: e8:a2:0d:37:26:ee:a2:c0:69:12:d1:1e:94:27:1b: 55:b5:cb:8c:49:bb:2d:9a:11:11:24:18:7f:69:a4: 2d:32:cd:51:66:cc:dd:3b:7e:74:1f:17:fa:8f:67: 1b:a0:66:41:9c:43:f0:57:f4:25:7f:5f:97:36:7f: eb:6d:a8:b2:2e:03:96:d7:5d:e9:79:47:54:ba:8f: 77:fa:10:13:7f:58:d7:f6:a1:c2:ec:37:3a:9f:46: 02:f1:af:84:e5:94:38:35:e0:46:7a:fe:67:dd:9e: ec:7d:df:0d:1b:27:d7:26:25:ed:b8:80:c4:a5:e4: 11:9b:a0:47:ff:41:fc:c3:77:b2:34:c9:6d:e4:5b: e1:8c:4a:30:1c:f5:00:c9:ea:c6:ed:89:85:40:53: ab:9b:d1:0b:20:d4:e6:32:09:2f:86:c3:71:49:c7: f6:b9:dd:8e:74:32:15:6c:55:a0:a1:e2:e6:f8:b9: cf:e0:92:68:63:2c:e9:04:33:fb:72:98:a1:57:52: 19:15:3a:e4:14:d2:e3:3f:41:22:98:a3:62:8f:01: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:FE:03:79:07:B2:7C:1C:D3:BD:B8:68:38:0C:00:36:3C:DA:E6 X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/F8C2A4E4359311F08C686E1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.204.0/23 Signature Algorithm: sha256WithRSAEncryption 19:33:3b:fe:a1:c2:bf:50:74:c4:e2:0f:44:36:a1:06:0e:ec: d0:5b:1c:9b:80:37:e1:8a:61:8a:10:b4:19:74:9d:ad:da:a5: be:8a:96:c8:c3:a3:e1:86:e9:fc:8e:89:f6:f6:8c:98:33:61: 84:9f:2d:fd:11:80:be:2e:79:fd:97:5c:0a:6b:b0:aa:52:51: 90:73:5b:aa:6e:cf:ff:6c:6b:79:7b:d1:58:b2:b4:4a:94:ca: 29:98:66:05:d9:a6:3d:03:c2:26:1f:46:43:6c:b3:2a:47:cc: 62:ce:22:a0:ad:9a:19:b5:48:ab:ff:7d:d7:6f:14:e1:c4:46: b7:80:35:d3:05:54:5d:e4:63:9a:82:02:42:3d:19:bc:b0:5c: 12:b3:b4:c8:60:ea:c2:21:0c:b7:66:09:ed:14:c2:d0:46:65: 67:36:96:bf:cd:52:e8:7a:fb:e0:58:6f:a9:38:7f:32:68:f4: 0a:48:3e:e3:38:f6:cf:cd:c0:ee:4c:70:3d:75:c7:e2:14:06: 8b:f0:9f:32:4e:6a:3f:ca:77:54:13:b5:9c:4c:bd:1a:b5:a4: 16:9c:28:77:25:1e:d9:8f:56:c4:2c:b1:6b:81:38:99:ba:67: 92:f4:14:cc:c9:e6:ce:91:40:f9:a8:5f:5a:8e:7e:37:a3:be: 07:a2:8b:a0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTA1MjAxNjAzMzBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MmNhN2QyLTcxMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKjaWnP9Z2x1lHbmwdhNZP6r6dKrZ2OkqFwB0Ls/I7pU0Amp+OZWu+aFFzi+ii DTcm7qLAaRLRHpQnG1W1y4xJuy2aEREkGH9ppC0yzVFmzN07fnQfF/qPZxugZkGc Q/BX9CV/X5c2f+ttqLIuA5bXXel5R1S6j3f6EBN/WNf2ocLsNzqfRgLxr4TllDg1 4EZ6/mfdnux93w0bJ9cmJe24gMSl5BGboEf/QfzDd7I0yW3kW+GMSjAc9QDJ6sbt iYVAU6ub0Qsg1OYyCS+Gw3FJx/a53Y50MhVsVaCh4ub4uc/gkmhjLOkEM/tymKFX UhkVOuQU0uM/QSKYo2KPAfURAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkb7+A3kH snwc0724aDgMADY82uYwHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y2QS83QTUyOTg3NjBBRjAxMUYwODUzMUQ0M0NDNEY5QUUwMi9GOEMyQTRFNDM1 OTMxMUYwOEM2ODZFMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfzDANBgkqhkiG9w0BAQsFAAOCAQEAGTM7/qHCv1B0xOIP RDahBg7s0Fscm4A34YphihC0GXSdrdqlvoqWyMOj4Ybp/I6J9vaMmDNhhJ8t/RGA vi55/ZdcCmuwqlJRkHNbqm7P/2xreXvRWLK0SpTKKZhmBdmmPQPCJh9GQ2yzKkfM Ys4ioK2aGbVIq/99128U4cRGt4A10wVUXeRjmoICQj0ZvLBcErO0yGDqwiEMt2YJ 7RTC0EZlZzaWv81S6Hr74FhvqTh/Mmj0Ckg+4zj2z83A7kxwPXXH4hQGi/CfMk5q P8p3VBO1nEy9GrWkFpwodyUe2Y9WxCyxa4E4mbpnkvQUzMnmzpFA+ahfWo5+N6O+ B6KLoA== -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:07 2025 by rpki-client