$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa File: 96E040E063B211F09B18DA38C4F9AE02.roa (raw, json) Hash identifier: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8= Subject key identifier: EB:2B:EB:D3:94:07:32:E3:67:A2:91:F8:2F:45:C7:E6:3C:86:7B:2A Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 03 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa Signing time: Fri 18 Jul 2025 08:38:33 +0000 ROA not before: Fri 18 Jul 2025 08:38:33 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153710 IP address blocks: 163.223.158.0/23 maxlen: 27 2001:df5:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Jul 18 08:38:33 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=687a0809-fe0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:d0:f3:85:be:88:c9:c8:ea:7d:dc:f6:33: c2:11:1c:94:63:7b:6c:c8:02:e9:5a:68:dc:83:09: cb:24:80:00:7c:2f:67:0b:5a:30:8a:2f:9a:a9:af: 91:5a:27:bd:38:4d:d1:75:e4:a2:62:e4:ae:fa:fd: ed:b3:1a:68:85:91:ec:10:7b:bf:6f:54:15:0d:3e: 10:f0:f4:97:e9:92:ff:d3:f4:dc:85:55:a9:47:e3: fb:43:8b:91:c1:65:ab:0d:86:70:46:c5:28:61:6d: 80:9f:e2:39:23:c3:25:ac:36:91:30:7a:59:49:26: d8:7b:d8:f2:16:83:d4:8f:55:a4:7d:2b:23:f2:4d: 8e:c0:be:52:ca:44:cf:36:c7:d1:39:b0:3d:06:6f: 1e:af:d7:9f:91:1a:cf:40:ad:e8:5f:67:d5:0a:12: b9:c2:f5:b4:c7:28:d0:e7:2a:d4:4a:23:ec:b1:2a: ee:4d:25:39:7c:73:7c:d9:8f:66:ea:09:f9:4f:69: f4:ae:04:d8:c0:fc:21:49:c9:6c:c8:d1:6d:d1:7a: de:a2:97:68:73:db:19:9f:fb:49:39:13:b1:60:ea: 4f:75:e1:ea:b4:30:38:74:b4:c6:39:b9:85:04:00: a7:67:ae:d6:cd:5e:52:68:76:1d:55:31:ae:32:1d: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:EB:D3:94:07:32:E3:67:A2:91:F8:2F:45:C7:E6:3C:86:7B:2A X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.158.0/23 IPv6: 2001:df5:4540::/48 Signature Algorithm: sha256WithRSAEncryption c0:11:31:46:68:f0:4a:ec:72:e7:4a:d0:74:69:e0:81:65:32: 2c:36:7e:01:f5:f8:07:1a:35:4d:9b:0d:29:51:c3:56:73:6a: 4c:bb:17:e8:d9:a4:9d:52:7a:b0:09:23:82:d9:0c:9f:0f:7b: 54:a9:ac:66:86:fc:0f:93:8e:39:35:02:74:7e:78:2c:85:08: ea:bb:14:ce:71:3b:78:65:4c:75:5b:93:86:c4:48:4f:bc:ce: d5:48:54:8f:83:97:68:a4:ff:2a:fb:ab:02:bf:74:7d:c2:f1: 5a:6b:81:14:49:c3:e5:ef:7e:69:19:9e:9b:3c:16:50:c0:f8: 55:96:6e:90:79:fd:6f:0c:c3:00:f2:cb:c1:75:fd:8a:19:6a: 7e:88:09:dd:f0:0d:e0:1c:87:b8:ae:5f:75:fd:42:85:38:65: 53:93:01:32:04:17:18:c4:d1:a4:55:70:d2:80:bf:6c:41:6d: 35:a3:52:1b:01:13:b7:28:24:a3:a4:49:e0:15:37:b8:42:98: a0:2c:91:18:25:c1:65:b0:18:72:be:42:52:f5:55:c7:42:42: 8f:d6:ee:3d:bb:07:7b:97:f5:6d:c0:3d:b4:10:dd:7d:9d:a8: 2a:d6:c1:54:33:d6:00:5d:d2:09:5f:a1:31:c8:fd:9d:04:86: 98:6c:50:91 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNTA3MTgwODM4MzNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4N2EwODA5LWZlMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCja9Dzhb6Iycjqfdz2M8IRHJRje2zIAulaaNyDCcskgAB8L2cLWjCKL5qpr5Fa J704TdF15KJi5K76/e2zGmiFkewQe79vVBUNPhDw9Jfpkv/T9NyFValH4/tDi5HB ZasNhnBGxShhbYCf4jkjwyWsNpEwellJJth72PIWg9SPVaR9KyPyTY7AvlLKRM82 x9E5sD0Gbx6v15+RGs9ArehfZ9UKErnC9bTHKNDnKtRKI+yxKu5NJTl8c3zZj2bq CflPafSuBNjA/CFJyWzI0W3Ret6il2hz2xmf+0k5E7Fg6k914eq0MDh0tMY5uYUE AKdnrtbNXlJodh1VMa4yHbobAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU6yvr05QH MuNnopH4L0XH5jyGeyowHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkVBNC8yNjREQ0YxQzYzQUYxMUYwOEUwMDJCNENDNEY5QUUwMi85NkUwNDBFMDYz QjIxMUYwOUIxOERBMzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPfnjAPBAIAAjAJAwcAIAEN9UVAMA0GCSqGSIb3DQEBCwUA A4IBAQDAETFGaPBK7HLnStB0aeCBZTIsNn4B9fgHGjVNmw0pUcNWc2pMuxfo2aSd UnqwCSOC2QyfD3tUqaxmhvwPk445NQJ0fngshQjquxTOcTt4ZUx1W5OGxEhPvM7V SFSPg5dopP8q+6sCv3R9wvFaa4EUScPl735pGZ6bPBZQwPhVlm6Qef1vDMMA8svB df2KGWp+iAnd8A3gHIe4rl91/UKFOGVTkwEyBBcYxNGkVXDSgL9sQW01o1IbARO3 KCSjpEngFTe4QpigLJEYJcFlsBhyvkJS9VXHQkKP1u49uwd7l/VtwD20EN19nagq 1sFUM9YAXdIJX6ExyP2dBIaYbFCR -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:10 2025 by rpki-client