$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa File: 4499D9921F4A11F0AF06577CC4F9AE02.roa (raw, json) Hash identifier: 22OD3LRGDCNECXd/CFSHge2YqhsRF1PsexljEXFJrwU= Subject key identifier: 52:3A:5C:51:2D:2F:D8:09:EC:10:02:CB:C6:EF:60:17:17:0A:A8:45 Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Certificate serial: 11 Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa Signing time: Wed 14 May 2025 06:29:16 +0000 ROA not before: Wed 14 May 2025 06:29:16 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133925 IP address blocks: 163.61.118.0/23 maxlen: 23 163.61.118.0/24 maxlen: 24 163.61.119.0/24 maxlen: 24 2001:df5:1540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Validity Not Before: May 14 06:29:16 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6824383c-d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:e1:c7:1d:1f:65:22:f9:4e:24:46:4c:bb: 86:c3:66:87:d8:3e:bc:96:9c:35:3a:15:92:b9:eb: ca:02:84:d2:10:23:eb:80:5d:6c:7a:03:6a:b8:50: 1b:4b:7b:45:40:be:42:af:9b:72:b5:95:61:87:80: 54:49:5f:42:b7:bf:b1:b6:59:8e:af:48:8d:82:9f: d8:48:07:f1:ec:4a:1f:a0:b9:fd:bc:91:bc:ae:7c: b1:57:7f:7d:6a:75:49:bd:0b:58:b6:44:09:cd:48: 01:93:21:a7:fc:5c:d9:0c:59:40:5f:a8:2e:d2:23: 53:e6:89:de:c5:db:bb:80:99:63:30:79:f1:c9:6f: 33:80:4f:51:47:22:d7:b7:90:8e:48:58:e6:b8:2d: 41:86:da:33:18:f6:34:e5:46:a6:f4:59:61:94:b2: 78:85:00:65:94:85:5d:66:5b:60:59:0d:17:cd:08: 5b:03:02:1b:45:77:b8:64:85:00:1e:ca:6c:0d:02: a7:ea:d5:a8:ef:be:e7:31:8d:f7:1b:f6:a6:52:4d: 18:01:08:e7:70:00:6d:ba:a1:eb:16:9f:d9:38:ac: 76:c4:bd:29:73:ca:d6:c4:b7:c8:a2:77:70:12:cb: 4c:6f:b3:ad:db:87:a8:9d:a2:8a:79:a9:e5:30:9f: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:5C:51:2D:2F:D8:09:EC:10:02:CB:C6:EF:60:17:17:0A:A8:45 X509v3 Authority Key Identifier: keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.118.0/23 IPv6: 2001:df5:1540::/48 Signature Algorithm: sha256WithRSAEncryption b6:ee:0c:de:bc:f4:0d:d0:4b:82:ed:71:24:81:53:8a:9a:a1: c9:2c:c4:e9:e0:a7:3a:3f:b8:11:c8:c5:08:e2:42:b3:34:27: f5:f0:22:2d:71:01:4e:fa:e8:9d:e6:78:38:3b:82:3e:c2:af: 17:50:b0:d6:3e:2f:63:b7:d4:09:d3:fc:96:cc:05:9c:be:5e: 69:eb:7e:28:65:83:3f:d6:5c:00:aa:6a:61:fe:66:2c:65:87: e1:34:46:30:d4:e6:60:68:6e:da:71:93:51:e1:d0:23:5c:97: 08:38:8b:28:d8:37:2b:73:e7:2f:16:07:a4:7d:f2:70:45:76: 69:5f:c4:96:1c:0f:a8:5c:d7:2f:63:01:22:f6:9e:0a:f4:28: ab:7b:c0:f1:4e:5e:89:d6:e6:5b:7b:44:88:3d:82:d7:1e:7c: 30:dc:8e:e2:72:95:4c:59:7c:4f:82:b0:e3:85:6d:45:a5:81: 98:a2:51:a6:21:3d:f4:fb:98:4d:6c:d6:e3:16:ec:b5:c6:52: a7:b4:12:ec:62:af:21:52:56:96:6f:68:84:cd:76:3c:95:03: f6:1f:9e:fe:49:0a:f8:09:e1:5f:55:14:85:a3:20:26:66:2b: 15:83:78:20:b0:98:27:9f:04:f1:cf:f5:c9:c0:2d:03:5b:89: ce:9b:8b:32 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTUxNDExMC8GA1UEBRMoNTU0RDBFRkYyMjBENjZCNkU5QTQwOTBGMERDQ0JBOUEy OTVDRERCNTAeFw0yNTA1MTQwNjI5MTZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjQzODNjLWQ2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwKeHHHR9lIvlOJEZMu4bDZofYPryWnDU6FZK568oChNIQI+uAXWx6A2q4UBtL e0VAvkKvm3K1lWGHgFRJX0K3v7G2WY6vSI2Cn9hIB/HsSh+guf28kbyufLFXf31q dUm9C1i2RAnNSAGTIaf8XNkMWUBfqC7SI1Pmid7F27uAmWMwefHJbzOAT1FHIte3 kI5IWOa4LUGG2jMY9jTlRqb0WWGUsniFAGWUhV1mW2BZDRfNCFsDAhtFd7hkhQAe ymwNAqfq1ajvvucxjfcb9qZSTRgBCOdwAG26oesWn9k4rHbEvSlzytbEt8iid3AS y0xvs63bh6idoop5qeUwn1NbAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUUjpcUS0v 2AnsEALLxu9gFxcKqEUwHwYDVR0jBBgwFoAUVU0O/yINZrbppAkPDcy6milc3bUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTE0LzNGRjI1QUZBMUY0 OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJicHBBa1BEY3k2bWlsYzNi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlUwT195SU5acmJwcEFrUERjeTZtaWxjM2JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTUxNC8zRkYyNUFGQTFGNDkxMUYwOTZGN0FFN0FDNEY5QUUwMi80NDk5RDk5MjFG NEExMUYwQUYwNjU3N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaM9djAPBAIAAjAJAwcAIAEN9RVAMA0GCSqGSIb3DQEBCwUA A4IBAQC27gzevPQN0EuC7XEkgVOKmqHJLMTp4Kc6P7gRyMUI4kKzNCf18CItcQFO +uid5ng4O4I+wq8XULDWPi9jt9QJ0/yWzAWcvl5p634oZYM/1lwAqmph/mYsZYfh NEYw1OZgaG7acZNR4dAjXJcIOIso2Dcrc+cvFgekffJwRXZpX8SWHA+oXNcvYwEi 9p4K9Cire8DxTl6J1uZbe0SIPYLXHnww3I7icpVMWXxPgrDjhW1FpYGYolGmIT30 +5hNbNbjFuy1xlKntBLsYq8hUlaWb2iEzXY8lQP2H57+SQr4CeFfVRSFoyAmZisV g3ggsJgnnwTxz/XJwC0DW4nOm4sy -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:26 2025 by rpki-client