$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa File: 4499D9921F4A11F0AF06577CC4F9AE02.roa (raw, json) Hash identifier: z4+GScQPXNK7dMow5YJdd1dCjH7Fb4eyJ+GMu8LPShY= Subject key identifier: 6F:EF:92:EF:41:EB:0B:7D:7D:8C:4D:D8:B1:17:DA:4A:E6:87:F4:60 Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Certificate serial: 02 Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa Signing time: Tue 22 Apr 2025 07:20:29 +0000 ROA not before: Tue 22 Apr 2025 07:20:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133925 IP address blocks: 163.61.118.0/24 maxlen: 24 163.61.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Validity Not Before: Apr 22 07:20:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6807433c-43f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:91:93:49:be:59:e7:d5:0d:b5:46:5d:4b: 24:ce:4b:f2:e4:b4:c9:04:51:59:9a:bc:df:b8:57: 78:8e:d5:39:88:4c:6d:6f:88:37:22:88:67:b5:09: fb:b1:fa:5d:ec:b5:c1:bf:75:06:7c:1e:5f:c2:2c: 42:b5:cc:b7:b8:6e:c8:f5:a7:b9:55:9d:e7:ba:2d: cc:ec:81:68:50:d1:6d:8c:d7:58:dc:06:1d:65:68: f7:78:3a:db:0e:28:11:23:df:f2:4b:6c:5c:7d:42: 5e:d6:c4:b4:da:77:87:78:96:37:69:72:f5:c5:80: f3:5c:ae:e8:c4:d2:1d:cd:ed:cf:70:98:76:7f:52: bd:fe:40:99:af:5e:6e:9d:f9:9b:f4:ca:6b:da:54: b9:8e:54:d1:bc:b6:7d:ae:82:f8:d6:f7:ef:b8:a1: 88:be:7b:fd:a4:85:d6:d4:f9:ee:58:b9:5d:0a:3b: e5:25:91:a6:76:ad:28:63:c0:ab:68:da:b6:dc:ad: 39:a5:27:ab:65:58:b4:13:8c:b6:13:85:e7:03:70: ad:4e:cd:7e:9d:ef:31:78:bb:f8:2d:73:77:7a:50: 9b:c0:5d:d6:66:8d:d1:82:58:66:d4:50:05:dc:4b: 07:9f:75:0d:27:24:39:50:35:2e:c9:96:f2:c4:46: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:92:EF:41:EB:0B:7D:7D:8C:4D:D8:B1:17:DA:4A:E6:87:F4:60 X509v3 Authority Key Identifier: keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.118.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:17:fd:bb:54:03:6a:2e:38:cb:2c:04:6d:e5:9d:06:56:0b: 82:48:5b:bb:31:bb:8e:d0:3e:b9:1c:5c:69:fd:87:1e:3f:d4: 6a:f9:37:8d:c9:a8:5a:06:52:00:da:14:91:9c:ea:40:cb:48: 9d:db:91:52:b2:8c:d1:5c:8d:41:3a:6d:e6:d0:da:fc:66:e8: 08:a5:99:d4:e1:94:e9:7c:6b:d2:4d:c6:d4:e1:01:61:6c:02: ff:8e:13:da:f8:55:ad:6b:8e:03:dc:33:f8:5f:c2:45:5b:a0: 9f:de:a6:5d:e2:fe:b0:f9:3b:7c:4c:74:93:0b:e4:4b:b2:d5: 2a:de:c2:82:ac:37:17:c8:0b:3d:5a:23:39:a9:86:b6:ce:71: f3:db:8a:e1:0b:37:1e:00:af:f4:0f:e6:54:3a:33:10:4f:0b: f4:c7:39:6b:1c:13:8c:37:97:dc:40:b5:b4:8b:ed:19:b1:3d: 5b:5f:36:d3:bb:ee:0e:ee:fb:a2:5d:f9:60:49:57:b3:dd:3d: 0a:4c:6b:3d:58:92:4d:aa:3d:1b:21:0c:66:3f:48:ab:c7:57: 90:4f:7c:5c:c3:97:8a:16:6a:b0:e8:ed:73:9b:c5:e6:fb:21: bf:73:0f:65:66:ec:68:db:9f:a3:11:92:31:bc:77:06:f0:c5: e8:41:6f:a5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTUxNDExMC8GA1UEBRMoNTU0RDBFRkYyMjBENjZCNkU5QTQwOTBGMERDQ0JBOUEy OTVDRERCNTAeFw0yNTA0MjIwNzIwMjlaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MDc0MzNjLTQzZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwUZGTSb5Z59UNtUZdSyTOS/LktMkEUVmavN+4V3iO1TmITG1viDciiGe1Cfux +l3stcG/dQZ8Hl/CLEK1zLe4bsj1p7lVnee6LczsgWhQ0W2M11jcBh1laPd4OtsO KBEj3/JLbFx9Ql7WxLTad4d4ljdpcvXFgPNcrujE0h3N7c9wmHZ/Ur3+QJmvXm6d +Zv0ymvaVLmOVNG8tn2ugvjW9++4oYi+e/2khdbU+e5YuV0KO+UlkaZ2rShjwKto 2rbcrTmlJ6tlWLQTjLYThecDcK1OzX6d7zF4u/gtc3d6UJvAXdZmjdGCWGbUUAXc SwefdQ0nJDlQNS7JlvLERpY3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUb++S70Hr C319jE3YsRfaSuaH9GAwHwYDVR0jBBgwFoAUVU0O/yINZrbppAkPDcy6milc3bUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTE0LzNGRjI1QUZBMUY0 OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJicHBBa1BEY3k2bWlsYzNi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlUwT195SU5acmJwcEFrUERjeTZtaWxjM2JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTUxNC8zRkYyNUFGQTFGNDkxMUYwOTZGN0FFN0FDNEY5QUUwMi80NDk5RDk5MjFG NEExMUYwQUYwNjU3N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaM9djANBgkqhkiG9w0BAQsFAAOCAQEAfBf9u1QDai44yywE beWdBlYLgkhbuzG7jtA+uRxcaf2HHj/Uavk3jcmoWgZSANoUkZzqQMtInduRUrKM 0VyNQTpt5tDa/GboCKWZ1OGU6Xxr0k3G1OEBYWwC/44T2vhVrWuOA9wz+F/CRVug n96mXeL+sPk7fEx0kwvkS7LVKt7Cgqw3F8gLPVojOamGts5x89uK4Qs3HgCv9A/m VDozEE8L9Mc5axwTjDeX3EC1tIvtGbE9W18207vuDu77ol35YElXs909CkxrPViS Tao9GyEMZj9Iq8dXkE98XMOXihZqsOjtc5vF5vshv3MPZWbsaNufoxGSMbx3BvDF 6EFvpQ== -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:53 2025 by rpki-client