$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/3A43EE161B3E11F08ACA8E28C4F9AE02.roa File: 3A43EE161B3E11F08ACA8E28C4F9AE02.roa (raw, json) Hash identifier: ut5MbOjLOWJ86rU4TrjNMT9S3CVA8XefSFjTd7svnW4= Subject key identifier: 18:2E:9E:1E:53:C8:86:DF:14:08:3A:51:5F:3F:0D:EE:55:6B:C3:7C Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 02 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/3A43EE161B3E11F08ACA8E28C4F9AE02.roa Signing time: Thu 17 Apr 2025 03:44:13 +0000 ROA not before: Thu 17 Apr 2025 03:44:13 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152565 IP address blocks: 163.227.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Apr 17 03:44:13 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6800790d-8e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:69:21:fb:8b:a7:75:b9:ad:0d:4c:c0:a2: 3a:de:ad:9f:70:c8:d3:56:e0:1a:0e:28:24:ad:53: e5:0f:26:b1:e8:55:87:6b:22:05:60:94:2d:1b:85: 90:c0:b2:26:96:9e:bc:17:4a:1d:3d:b7:d2:a4:5e: 6c:d7:f6:e3:27:9e:aa:77:a0:25:65:09:ea:9c:ff: 0d:7f:e5:76:e5:43:81:de:99:ac:0e:84:3d:5f:79: a2:9f:cf:95:d0:cd:1f:4f:87:cd:28:9c:81:7b:30: 79:90:e6:d4:da:f2:a3:a0:5b:13:f5:f0:c3:5c:cd: 91:ee:5c:64:65:32:06:7f:dd:d1:66:c5:e3:a3:fb: e4:84:81:8c:ee:b7:e1:82:b5:bd:63:8c:00:d0:12: 64:f3:6f:67:9e:fe:22:9f:d7:e7:cf:df:44:17:64: 1a:29:61:3f:79:1f:35:94:3a:58:c5:31:68:4c:88: b6:05:2e:ef:8f:6a:08:f5:56:da:a4:ed:46:88:2b: 12:4a:6e:b5:df:03:4c:85:f2:36:02:4d:1e:d7:2c: 7c:95:eb:99:92:49:52:b4:6e:e9:aa:af:40:43:42: 31:b3:c4:a9:09:56:e5:48:54:b3:f3:cc:28:b9:2b: de:75:b1:1a:0a:4b:d9:6b:96:2f:c2:79:0b:bd:dd: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:9E:1E:53:C8:86:DF:14:08:3A:51:5F:3F:0D:EE:55:6B:C3:7C X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/3A43EE161B3E11F08ACA8E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.92.0/23 Signature Algorithm: sha256WithRSAEncryption a1:44:2f:11:c2:9d:d8:3e:2c:68:20:c9:ac:eb:ad:a1:4a:25: 00:32:87:52:db:c3:38:84:ba:ef:f5:12:d9:ff:be:67:08:54: 84:ce:06:aa:d0:71:85:54:b8:7c:7f:0a:12:3e:27:fc:80:21: e3:4d:6e:c5:17:e8:f7:01:df:f8:21:57:bc:6d:e6:84:1d:17: c9:d5:f0:a0:a6:23:d1:aa:48:4d:f7:a1:ca:53:88:c0:6b:cf: 3e:27:c0:d8:bb:2f:e8:48:a3:00:e3:ef:ee:3f:d0:46:48:64: a1:d9:b0:71:39:d2:1a:6a:24:13:43:5a:58:65:3f:6b:31:25: 2d:b2:a3:14:80:39:df:6f:7d:64:33:96:8f:66:0a:80:51:fd: 78:a2:aa:16:0b:99:41:8e:90:db:a7:e3:65:09:ca:f0:09:a4: 1b:ca:93:3b:d0:2f:48:66:0e:f4:18:d5:7c:42:ed:53:60:37: 1e:5e:a0:4b:46:23:29:9a:1a:2e:60:57:18:47:ad:e0:fc:3f: f5:af:20:e6:58:86:c1:d6:6d:84:19:18:9c:b5:c1:29:57:3f: 17:d8:fa:a2:2c:d0:5a:f1:61:e1:53:52:7e:b4:46:29:a4:cd: 00:ff:65:9b:cc:d1:00:f2:0c:aa:02:07:5b:8a:95:66:64:14: c4:85:59:d9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTA0MTcwMzQ0MTNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MDA3OTBkLThlOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9rWkh+4undbmtDUzAojrerZ9wyNNW4BoOKCStU+UPJrHoVYdrIgVglC0bhZDA siaWnrwXSh09t9KkXmzX9uMnnqp3oCVlCeqc/w1/5XblQ4HemawOhD1feaKfz5XQ zR9Ph80onIF7MHmQ5tTa8qOgWxP18MNczZHuXGRlMgZ/3dFmxeOj++SEgYzut+GC tb1jjADQEmTzb2ee/iKf1+fP30QXZBopYT95HzWUOljFMWhMiLYFLu+Pagj1Vtqk 7UaIKxJKbrXfA0yF8jYCTR7XLHyV65mSSVK0bumqr0BDQjGzxKkJVuVIVLPzzCi5 K951sRoKS9lrli/CeQu93S9tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGC6eHlPI ht8UCDpRXz8N7lVrw3wwHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkFDQi83NEJEODU4QTFCM0QxMUYwQTYwQzIyMjZDNEY5QUUwMi8zQTQzRUUxNjFC M0UxMUYwOEFDQThFMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPjXDANBgkqhkiG9w0BAQsFAAOCAQEAoUQvEcKd2D4saCDJ rOutoUolADKHUtvDOIS67/US2f++ZwhUhM4GqtBxhVS4fH8KEj4n/IAh401uxRfo 9wHf+CFXvG3mhB0XydXwoKYj0apITfehylOIwGvPPifA2Lsv6EijAOPv7j/QRkhk odmwcTnSGmokE0NaWGU/azElLbKjFIA53299ZDOWj2YKgFH9eKKqFguZQY6Q26fj ZQnK8AmkG8qTO9AvSGYO9BjVfELtU2A3Hl6gS0YjKZoaLmBXGEet4Pw/9a8g5liG wdZthBkYnLXBKVc/F9j6oizQWvFh4VNSfrRGKaTNAP9lm8zRAPIMqgIHW4qVZmQU xIVZ2Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:41 2025 by rpki-client