$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa File: 9A3B7A6C5C8111F09B95A34AC4F9AE02.roa (raw, json) Hash identifier: 7D5PJVZwcB8TD96OC04PT62QGoRafof25RhAPo9RTRk= Subject key identifier: 3A:ED:06:72:1D:AF:21:08:21:14:E4:B6:18:48:9B:3F:66:5E:53:3E Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: 9E Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa Signing time: Tue 05 Aug 2025 17:21:48 +0000 ROA not before: Tue 05 Aug 2025 17:21:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215750 IP address blocks: 163.223.178.0/24 maxlen: 24 2401:f860::/44 maxlen: 44 2401:f860::/48 maxlen: 48 2401:f860:1::/48 maxlen: 48 2401:f860:2::/48 maxlen: 48 2401:f860:3::/48 maxlen: 48 2401:f860:4::/48 maxlen: 48 2401:f860:5::/48 maxlen: 48 2401:f860:6::/48 maxlen: 48 2401:f860:7::/48 maxlen: 48 2401:f860:8::/48 maxlen: 48 2401:f860:9::/48 maxlen: 48 2401:f860:a::/48 maxlen: 48 2401:f860:b::/48 maxlen: 48 2401:f860:c::/48 maxlen: 48 2401:f860:d::/48 maxlen: 48 2401:f860:e::/48 maxlen: 48 2401:f860:f::/48 maxlen: 48 2401:f860:88::/48 maxlen: 48 2401:f860:89::/48 maxlen: 48 2401:f860:90::/48 maxlen: 48 2401:f860:94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Aug 5 17:21:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68923dac-253d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:6c:b3:f4:e2:c1:9e:4f:8d:7b:3c:ee:d7: 73:e0:a5:6b:44:9b:7b:37:0f:9c:6b:dd:37:a1:33: f0:58:34:d9:64:97:b9:4e:f9:bd:a7:74:4c:d1:40: 78:8d:16:ae:d9:db:a5:15:8d:b2:7b:4f:f8:61:4b: e9:d8:79:d7:7e:7f:86:0f:67:54:ce:b3:d0:d5:13: 20:69:0a:94:56:0c:bb:99:88:e7:45:9e:db:57:d9: dd:7a:1f:dd:5c:4e:0c:0d:38:52:fb:c4:c8:03:89: 0a:5b:64:51:3e:a9:4a:76:9c:31:1d:56:12:8c:19: 4d:f2:9c:21:3d:6b:de:48:b1:1e:65:2f:dd:a3:ce: 58:b7:7c:49:b1:9a:00:74:d3:88:c7:3c:ba:bb:5a: 54:9e:f3:9d:60:9b:5c:26:26:48:c1:b3:67:1c:28: 80:1c:a6:96:15:8b:17:9f:03:6d:1f:fc:f4:f8:16: ac:de:ee:83:2d:20:ae:00:e9:1b:b9:f5:fb:8f:9b: 3c:94:f7:a1:25:34:60:13:13:f0:88:f7:0a:2b:a3: 3a:a2:17:8e:cf:46:0d:43:0d:5e:ec:b8:61:79:59: 7a:51:2f:72:55:cd:70:89:20:ff:89:55:6f:9c:5b: 2e:45:08:48:89:67:72:b9:b9:c4:ec:0a:73:bf:61: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:06:72:1D:AF:21:08:21:14:E4:B6:18:48:9B:3F:66:5E:53:3E X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/9A3B7A6C5C8111F09B95A34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.178.0/24 IPv6: 2401:f860::/44 2401:f860:88::/47 2401:f860:90::/48 2401:f860:94::/48 Signature Algorithm: sha256WithRSAEncryption 3c:34:0b:c9:85:0b:ed:e1:d1:5c:4e:25:09:5a:5f:a5:19:f7: c6:ea:24:0e:b1:ff:8f:ce:55:01:85:3f:cf:b4:2b:0d:51:f3: 55:49:25:17:33:eb:2f:b8:e3:55:bf:eb:03:bf:be:2f:a0:cd: 8c:9f:83:a3:c6:d4:ec:36:c6:e7:0f:e9:1e:0e:88:25:5b:de: de:dd:a0:b6:cd:59:8d:21:13:98:27:d7:29:ca:10:3d:25:0c: ae:2a:13:2c:5f:f4:ce:e3:4c:8d:c2:67:b2:60:90:27:28:fc: 60:ad:92:5c:a4:dc:be:a6:d4:80:f9:7e:a0:34:aa:71:54:a0: 02:72:c7:4f:6a:48:22:51:f6:b0:53:77:32:87:87:ce:00:5f: bd:09:f0:0f:3a:a2:4d:d7:c4:35:38:b6:1e:d5:ed:37:a5:74: c3:21:0a:2c:7b:dc:8f:da:a2:6a:0b:f9:33:1e:f7:49:83:90: 6d:5e:32:0e:7b:ce:db:1c:9b:6f:9a:90:9d:bb:d4:bd:7f:6b: 55:d4:7c:fc:13:6d:86:61:ba:57:a7:54:ce:ea:b5:a5:15:66: e5:10:c4:32:45:f3:04:3f:ee:dc:85:ec:e5:f4:1a:4a:91:34: 83:dd:b7:8b:1c:5c:77:f3:d8:15:69:66:2d:d1:02:e5:05:57: 37:b4:43:e8 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUwODA1MTcyMTQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkyM2RhYy0yNTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRJss/TiwZ5PjXs87tdz4KVrRJt7Nw+ca903oTPwWDTZZJe5Tvm9p3RM0UB4 jRau2dulFY2ye0/4YUvp2HnXfn+GD2dUzrPQ1RMgaQqUVgy7mYjnRZ7bV9ndeh/d XE4MDThS+8TIA4kKW2RRPqlKdpwxHVYSjBlN8pwhPWveSLEeZS/do85Yt3xJsZoA dNOIxzy6u1pUnvOdYJtcJiZIwbNnHCiAHKaWFYsXnwNtH/z0+Bas3u6DLSCuAOkb ufX7j5s8lPehJTRgExPwiPcKK6M6oheOz0YNQw1e7LhheVl6US9yVc1wiSD/iVVv nFsuRQhIiWdyubnE7Apzv2HCrwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDrtBnId ryEIIRTkthhImz9mXlM+MB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDOTgvQUJBRkY1RUEwNjEyMTFGMDhFOUFFNTI5QzRGOUFFMDIvOUEzQjdBNkM1 QzgxMTFGMDlCOTVBMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MAwEAgABMAYDBACj37IwKgQCAAIwJAMHBCQB+GAAAAMHASQB+GAAiAMHACQB +GAAkAMHACQB+GAAlDANBgkqhkiG9w0BAQsFAAOCAQEAPDQLyYUL7eHRXE4lCVpf pRn3xuokDrH/j85VAYU/z7QrDVHzVUklFzPrL7jjVb/rA7++L6DNjJ+Do8bU7DbG 5w/pHg6IJVve3t2gts1ZjSETmCfXKcoQPSUMrioTLF/0zuNMjcJnsmCQJyj8YK2S XKTcvqbUgPl+oDSqcVSgAnLHT2pIIlH2sFN3MoeHzgBfvQnwDzqiTdfENTi2HtXt N6V0wyEKLHvcj9qiagv5Mx73SYOQbV4yDnvO2xybb5qQnbvUvX9rVdR8/BNthmG6 V6dUzuq1pRVm5RDEMkXzBD/u3IXs5fQaSpE0g923ixxcd/PYFWlmLdEC5QVXN7RD 6A== -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:34 2025 by rpki-client