$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa File: CDD0BE9EF99111EF945B6751C4F9AE02.roa (raw, json) Hash identifier: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk= Subject key identifier: F0:7C:99:A9:0C:56:38:4D:A7:25:B5:9D:46:BA:C9:00:FE:13:7D:51 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: 05 Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa Signing time: Wed 05 Mar 2025 07:17:13 +0000 ROA not before: Wed 05 Mar 2025 07:17:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45691 IP address blocks: 163.61.206.0/23 maxlen: 24 2001:df5:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: Mar 5 07:17:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c7fa79-91df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:96:e8:c2:ac:bd:31:37:7c:92:2c:95:45: c9:43:25:d8:78:90:f2:13:4e:a0:2a:9c:7c:7d:3d: d3:4c:45:55:b7:a4:ff:bc:2e:bf:40:7c:5a:e5:4d: 30:f9:38:33:8c:43:cb:30:4e:c6:91:05:d6:56:84: d9:cc:b1:1d:d2:a9:13:23:f7:90:b4:fe:d1:49:5e: 7b:b6:46:6a:d2:6c:4f:d3:7c:c1:d2:d0:c5:2c:e7: 1d:59:f5:5b:bf:2c:7e:db:b1:14:14:52:11:99:e8: 33:ae:90:6e:b7:37:d0:78:0a:c1:c2:fd:4f:89:49: d2:b3:c3:c4:19:b9:61:88:68:88:46:20:e5:45:6b: 53:12:6a:b5:95:66:78:7d:11:fb:41:3b:56:bd:d6: b2:a2:8e:eb:f1:42:93:d1:7c:be:2c:22:e7:d5:73: 67:3b:cc:b5:77:e8:9b:a0:86:28:51:ba:8f:21:36: 1d:25:8d:f1:57:ad:43:b5:13:65:dc:88:02:56:56: 0a:d0:d7:7f:00:83:52:d8:c3:3e:ae:8b:33:4f:7c: 17:86:92:79:42:6a:56:4e:3c:d3:eb:ec:76:e4:10: c1:e2:63:a7:ef:88:d9:f3:a6:db:e1:60:60:db:40: 17:fb:cc:20:c2:9d:09:0e:ce:94:3f:14:e9:52:da: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7C:99:A9:0C:56:38:4D:A7:25:B5:9D:46:BA:C9:00:FE:13:7D:51 X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.206.0/23 IPv6: 2001:df5:2040::/48 Signature Algorithm: sha256WithRSAEncryption 04:f5:58:4a:1c:26:72:75:78:b7:08:24:fe:7c:0e:f8:7b:e0: 06:09:e3:27:4b:9d:7c:e9:77:b5:bc:23:8a:e9:a2:10:b6:49: 9c:9c:83:1e:45:cc:94:32:9f:38:17:fc:d5:10:06:a4:ee:5b: 76:31:b6:75:23:1c:ad:16:88:25:2c:c8:3b:90:51:e5:1e:b9: 8f:e0:0c:ee:16:6b:32:8a:45:28:41:0b:3e:36:25:32:cb:0b: 9c:51:ac:be:b9:2e:6b:05:d6:1c:25:0b:b6:5f:7f:b4:2c:51: 60:e9:7d:32:cb:29:42:39:f6:fa:9c:c1:46:48:ef:13:2b:98: 4c:21:ba:d4:24:d9:84:95:bc:48:19:5b:d6:cc:2d:e2:60:40: c8:21:b8:10:80:ed:79:9f:af:2d:c4:eb:40:0a:2c:09:e1:85: 88:c1:d2:be:06:92:48:83:73:af:48:04:c1:4f:2e:42:e5:06: a9:9e:57:e0:ce:56:f7:d3:ac:2d:e1:31:2f:1e:ca:d0:65:f9: fc:67:ae:6d:a3:55:49:51:fc:92:e2:5d:6b:e1:90:31:b2:9f: 5d:b7:91:86:b9:14:92:f1:6b:3f:42:d0:ae:4f:6b:e1:e2:7a: dd:27:1c:b4:8c:db:89:a9:c4:87:2a:16:79:06:6a:d9:f0:c9: 97:9a:f1:87 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MThDNzExMC8GA1UEBRMoRTM2OTI5MEZENzE5RTNFNDk4N0Q3MTlBNzNCMUVDNzdB QUFGNDlCNjAeFw0yNTAzMDUwNzE3MTNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzdmYTc5LTkxZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7v5bowqy9MTd8kiyVRclDJdh4kPITTqAqnHx9PdNMRVW3pP+8Lr9AfFrlTTD5 ODOMQ8swTsaRBdZWhNnMsR3SqRMj95C0/tFJXnu2RmrSbE/TfMHS0MUs5x1Z9Vu/ LH7bsRQUUhGZ6DOukG63N9B4CsHC/U+JSdKzw8QZuWGIaIhGIOVFa1MSarWVZnh9 EftBO1a91rKijuvxQpPRfL4sIufVc2c7zLV36JughihRuo8hNh0ljfFXrUO1E2Xc iAJWVgrQ138Ag1LYwz6uizNPfBeGknlCalZOPNPr7HbkEMHiY6fviNnzptvhYGDb QBf7zCDCnQkOzpQ/FOlS2iENAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU8HyZqQxW OE2nJbWdRrrJAP4TfVEwHwYDVR0jBBgwFoAU42kpD9cZ4+SYfXGac7Hsd6qvSbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxOEM3L0Y5MzAwMUI2RjhD RjExRUY4MkQ4RDUyQkM0RjlBRTAyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDJrcEQ5Y1o0LVNZZlhHYWM3SHNkNnF2U2JZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi9DREQwQkU5RUY5 OTExMUVGOTQ1QjY3NTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaM9zjAPBAIAAjAJAwcAIAEN9SBAMA0GCSqGSIb3DQEBCwUA A4IBAQAE9VhKHCZydXi3CCT+fA74e+AGCeMnS5186Xe1vCOK6aIQtkmcnIMeRcyU Mp84F/zVEAak7lt2MbZ1IxytFoglLMg7kFHlHrmP4AzuFmsyikUoQQs+NiUyywuc Uay+uS5rBdYcJQu2X3+0LFFg6X0yyylCOfb6nMFGSO8TK5hMIbrUJNmElbxIGVvW zC3iYEDIIbgQgO15n68txOtACiwJ4YWIwdK+BpJIg3OvSATBTy5C5Qapnlfgzlb3 06wt4TEvHsrQZfn8Z65to1VJUfyS4l1r4ZAxsp9dt5GGuRSS8Ws/QtCuT2vh4nrd Jxy0jNuJqcSHKhZ5BmrZ8MmXmvGH -----END CERTIFICATE-----Generated at Sat Apr 26 08:11:30 2025 by rpki-client