$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa File: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (raw, json) Hash identifier: vDWq5W9RCH51uCc7RR26CZCfoA3jrfAEXK2LnEYPwlQ= Subject key identifier: A4:5E:FC:83:81:12:A3:79:B7:D1:C8:5F:6E:DA:E2:D1:9B:33:17:56 Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Certificate serial: 02 Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa Signing time: Tue 13 May 2025 08:23:55 +0000 ROA not before: Tue 13 May 2025 08:23:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142276 IP address blocks: 163.227.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9 Validity Not Before: May 13 08:23:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6823019a-a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:46:c7:f1:9d:16:33:18:0e:74:02:b7:ee:66: 8d:7d:de:32:d4:f2:7e:b0:2e:52:6f:31:ce:7a:e9: db:f9:52:ee:bb:58:76:68:3c:2f:0b:94:c8:dd:cc: 03:7e:12:0c:66:95:76:5a:1c:5c:e7:40:e4:bc:22: 67:cd:76:c0:fa:14:e1:a2:fd:76:89:07:a2:59:41: 98:18:54:be:64:00:78:5a:a4:bb:31:0f:bc:14:70: bf:97:f4:09:0f:6f:2b:e7:9c:e8:b2:75:fa:81:98: 1d:10:1c:75:f6:c0:df:b2:10:c4:a1:6d:5c:cc:79: a8:ed:fd:8b:16:5f:bf:06:42:1d:f3:f3:e4:ac:fa: 20:1c:5a:72:e3:e4:25:32:44:f0:2d:4a:0f:9b:d2: 0d:5b:8b:62:1e:d8:85:00:da:2b:31:a6:d8:9a:51: 4a:77:9e:1c:76:a2:92:ad:a7:9d:69:56:23:04:a1: d2:08:23:7b:f8:eb:c2:fd:6f:5d:0f:d6:57:8b:c3: 97:0a:32:bb:4d:e3:a6:5e:b2:7f:b4:8d:3a:5b:b0: ce:82:3b:d9:cf:24:62:92:3c:fb:49:4b:66:ea:3e: da:ec:a1:99:b4:98:f9:1d:c7:40:6f:23:af:b7:e6: 99:92:77:f6:c7:10:42:9e:d4:f3:f1:7c:00:d5:8b: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5E:FC:83:81:12:A3:79:B7:D1:C8:5F:6E:DA:E2:D1:9B:33:17:56 X509v3 Authority Key Identifier: keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.208.0/24 Signature Algorithm: sha256WithRSAEncryption 75:3a:f5:b1:ab:ee:cf:41:fe:f2:e8:f4:3e:96:e3:99:9a:a9: 41:fc:e2:22:1e:13:95:c6:e3:c6:88:df:b7:d9:bf:e7:07:98: 1e:cd:12:8d:54:f4:aa:4c:7b:73:c2:cc:18:c6:d6:1a:96:fb: b8:94:41:6f:44:9f:30:56:40:f9:0e:44:86:9b:b0:7b:2d:74: 00:5a:fa:d0:7c:fa:b8:19:1f:69:d2:13:7a:80:e5:6d:60:a3: ed:35:57:c1:8b:49:39:b6:3c:8f:d6:b6:70:00:e8:da:a0:23: 76:d0:b5:6f:5f:ff:06:46:32:75:80:4b:97:0d:91:bb:de:fd: 15:3a:0f:6f:75:d2:64:4e:4d:4b:7e:f8:2c:b7:a4:e0:38:c2: 47:e1:81:b3:48:8b:4a:73:f8:95:bd:09:19:e5:80:b7:80:be: 5f:22:2d:09:5a:20:83:55:8f:4b:af:ec:78:40:a1:1d:d7:ee: 5e:cc:f8:22:56:12:b1:c3:89:60:cc:48:60:94:86:fa:23:06: 78:f8:e4:ad:e4:c7:2f:26:3d:d5:14:3c:8d:2c:2f:db:1e:74: 08:35:ed:cc:05:18:e7:60:ab:db:07:bd:4a:b8:66:90:e3:d6: 0c:09:90:d3:13:8c:95:ca:8c:69:ab:f5:e9:6f:c5:31:54:d3: 2e:b6:44:d1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEREOTExMC8GA1UEBRMoN0ZGQzgwNTY1MDc0MkNFQTUwOTg2RDExQUJDQjczRTBG NTUwNThGOTAeFw0yNTA1MTMwODIzNTVaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjMwMTlhLWE3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2RsfxnRYzGA50ArfuZo193jLU8n6wLlJvMc566dv5Uu67WHZoPC8LlMjdzAN+ EgxmlXZaHFznQOS8ImfNdsD6FOGi/XaJB6JZQZgYVL5kAHhapLsxD7wUcL+X9AkP byvnnOiydfqBmB0QHHX2wN+yEMShbVzMeajt/YsWX78GQh3z8+Ss+iAcWnLj5CUy RPAtSg+b0g1bi2Ie2IUA2isxptiaUUp3nhx2opKtp51pViMEodIII3v468L9b10P 1leLw5cKMrtN46Zesn+0jTpbsM6CO9nPJGKSPPtJS2bqPtrsoZm0mPkdx0BvI6+3 5pmSd/bHEEKe1PPxfADVi0U1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpF78g4ES o3m30chfbtri0ZszF1YwHwYDVR0jBBgwFoAUf/yAVlB0LOpQmG0Rq8tz4PVQWPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4REQ5L0EzODdDRjhFMkZE MjExRjBBOUFDNUUyRkM0RjlBRTAyL2ZfeUFWbEIwTE9wUW1HMFJxOHR6NFBWUVdQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZl95QVZsQjBMT3BRbUcwUnE4dHo0UFZRV1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEREOS9BMzg3Q0Y4RTJGRDIxMUYwQTlBQzVFMkZDNEY5QUUwMi85QkNEN0M4RTJG RDMxMUYwQTkzRjIyNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPj0DANBgkqhkiG9w0BAQsFAAOCAQEAdTr1savuz0H+8uj0 PpbjmZqpQfziIh4Tlcbjxojft9m/5weYHs0SjVT0qkx7c8LMGMbWGpb7uJRBb0Sf MFZA+Q5Ehpuwey10AFr60Hz6uBkfadITeoDlbWCj7TVXwYtJObY8j9a2cADo2qAj dtC1b1//BkYydYBLlw2Ru979FToPb3XSZE5NS374LLek4DjCR+GBs0iLSnP4lb0J GeWAt4C+XyItCVogg1WPS6/seEChHdfuXsz4IlYSscOJYMxIYJSG+iMGePjkreTH LyY91RQ8jSwv2x50CDXtzAUY52Cr2we9SrhmkOPWDAmQ0xOMlcqMaav16W/FMVTT LrZE0Q== -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:28 2025 by rpki-client