$ rpki-client -vvf rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/FC25E548019411F0A44E3285C4F9AE02.roa File: FC25E548019411F0A44E3285C4F9AE02.roa (raw, json) Hash identifier: OOiuBnmO2r+s7R41Nu9crqcm0POtH9RoB3Tt79fatwg= Subject key identifier: 88:3B:05:EE:0C:8F:BD:E0:BD:15:F9:92:4E:86:41:51:F5:1E:3B:E5 Certificate issuer: /CN=A9128F1E/serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Certificate serial: 02 Authority key identifier: FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/FC25E548019411F0A44E3285C4F9AE02.roa Signing time: Sat 15 Mar 2025 11:59:44 +0000 ROA not before: Sat 15 Mar 2025 11:59:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153696 IP address blocks: 163.223.108.0/24 maxlen: 24 2001:df5:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128F1E, serialNumber=FEEB72B47E0FBD9EB2683E259FA6436BA56523D4 Validity Not Before: Mar 15 11:59:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67d56bb0-e34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:e2:bd:0a:72:6b:8d:1c:e7:f8:62:f4:22: 38:21:50:81:93:37:12:cb:19:80:f3:bb:2b:15:a1: 39:35:09:3a:82:b4:a4:d9:d1:be:d5:43:bd:56:9c: 00:cc:22:be:cc:ac:7b:51:be:ee:f9:44:e0:90:0c: 17:c7:f5:99:d7:24:46:c4:e4:63:5b:37:ef:fb:5c: a0:06:b8:ad:f5:95:4b:8b:c1:5c:dd:c8:be:e8:e9: f0:ef:2c:87:f5:eb:41:e9:c9:75:86:85:50:41:e0: 71:c4:26:89:4b:e5:06:d2:6c:8e:0e:42:12:98:b8: 86:79:65:55:58:77:ac:3e:3f:7c:73:0d:dc:a2:14: bb:1f:fc:36:6f:d9:89:cf:d8:2b:50:a8:2e:e3:a1: f9:c1:aa:a7:dd:de:89:5a:0a:10:ea:45:c7:b1:4e: e3:d4:c3:df:c8:e6:37:07:a7:c5:74:4f:0a:d7:ed: 93:a1:1b:56:a3:99:bd:17:3b:ce:c6:45:6d:d3:bf: 85:1f:ef:3a:70:74:ac:ff:cc:44:81:ca:3b:6b:84: 37:f1:3c:1d:8c:c9:18:0f:79:28:7f:69:20:4e:8e: e3:0a:9d:ab:52:97:3c:f2:fb:18:3d:ed:a3:0a:0f: 60:31:a7:82:1c:6c:5e:96:36:55:5a:72:57:b2:05: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3B:05:EE:0C:8F:BD:E0:BD:15:F9:92:4E:86:41:51:F5:1E:3B:E5 X509v3 Authority Key Identifier: keyid:FE:EB:72:B4:7E:0F:BD:9E:B2:68:3E:25:9F:A6:43:6B:A5:65:23:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_utytH4PvZ6yaD4ln6ZDa6VlI9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128F1E/44B81B20019311F089D49282C4F9AE02/FC25E548019411F0A44E3285C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.108.0/24 IPv6: 2001:df5:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption dd:d4:3c:4e:1c:fb:29:a9:a4:85:4c:82:dc:63:51:34:1c:0b: 36:04:39:5e:00:4e:77:0a:c5:a0:84:07:83:8a:15:ad:21:2e: de:be:8c:9d:87:ad:96:6a:ba:ed:7a:69:1f:ff:bd:b3:cb:b0: f3:33:c0:a3:34:95:3b:05:69:3a:e3:c7:1b:91:85:6a:5a:dd: 04:25:b5:50:d4:dc:d8:41:cf:21:c0:49:bb:6d:81:a4:eb:c5: 02:7f:40:1d:fc:53:da:a7:b2:9f:6e:7a:b0:6d:9b:99:89:c9: 89:17:6f:18:b5:53:bc:98:33:bf:28:87:63:f1:ab:b0:f6:df: dc:4b:71:89:02:0f:88:a8:10:26:1b:1e:ee:44:a5:75:12:2f: 2d:97:f3:f6:73:ee:26:57:1d:54:e5:b9:77:5b:37:e5:f2:35: bb:d1:93:e3:20:f9:22:41:4e:28:dc:8e:20:ff:1a:c5:00:7b: 66:b4:54:fd:30:02:32:db:8a:d7:85:4b:45:d7:dc:75:68:8a: b8:20:43:6f:a8:6e:e2:fe:e8:24:96:7c:33:f2:9d:dd:d9:75: 57:65:48:5d:89:d3:ec:5b:58:9f:4a:d5:b3:57:e3:0b:d4:55: 0f:6c:a6:e0:9c:55:80:4b:52:1c:44:0e:75:97:e6:aa:37:83: b4:ca:41:f1 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OEYxRTExMC8GA1UEBRMoRkVFQjcyQjQ3RTBGQkQ5RUIyNjgzRTI1OUZBNjQzNkJB NTY1MjNENDAeFw0yNTAzMTUxMTU5NDRaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDU2YmIwLWUzNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJYOK9CnJrjRzn+GL0IjghUIGTNxLLGYDzuysVoTk1CTqCtKTZ0b7VQ71WnADM Ir7MrHtRvu75ROCQDBfH9ZnXJEbE5GNbN+/7XKAGuK31lUuLwVzdyL7o6fDvLIf1 60HpyXWGhVBB4HHEJolL5QbSbI4OQhKYuIZ5ZVVYd6w+P3xzDdyiFLsf/DZv2YnP 2CtQqC7jofnBqqfd3olaChDqRcexTuPUw9/I5jcHp8V0TwrX7ZOhG1ajmb0XO87G RW3Tv4Uf7zpwdKz/zESByjtrhDfxPB2MyRgPeSh/aSBOjuMKnatSlzzy+xg97aMK D2Axp4IcbF6WNlVacleyBYC3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUiDsF7gyP veC9FfmSToZBUfUeO+UwHwYDVR0jBBgwFoAU/utytH4PvZ6yaD4ln6ZDa6VlI9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4RjFFLzQ0QjgxQjIwMDE5 MzExRjA4OUQ0OTI4MkM0RjlBRTAyL191dHl0SDRQdlo2eWFENGxuNlpEYTZWbEk5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3V0eXRINFB2WjZ5YUQ0bG42WkRhNlZsSTlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEYxRS80NEI4MUIyMDAxOTMxMUYwODlENDkyODJDNEY5QUUwMi9GQzI1RTU0ODAx OTQxMUYwQTQ0RTMyODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAKPfbDAPBAIAAjAJAwcAIAEN9TvAMA0GCSqGSIb3DQEBCwUA A4IBAQDd1DxOHPspqaSFTILcY1E0HAs2BDleAE53CsWghAeDihWtIS7evoydh62W arrtemkf/72zy7DzM8CjNJU7BWk648cbkYVqWt0EJbVQ1NzYQc8hwEm7bYGk68UC f0Ad/FPap7KfbnqwbZuZicmJF28YtVO8mDO/KIdj8auw9t/cS3GJAg+IqBAmGx7u RKV1Ei8tl/P2c+4mVx1U5bl3Wzfl8jW70ZPjIPkiQU4o3I4g/xrFAHtmtFT9MAIy 24rXhUtF19x1aIq4IENvqG7i/ugklnwz8p3d2XVXZUhdidPsW1ifStWzV+ML1FUP bKbgnFWAS1IcRA51l+aqN4O0ykHx -----END CERTIFICATE-----Generated at Sat Apr 26 09:39:40 2025 by rpki-client