$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa File: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: 7ge7oc+Q12aZ6z9y4wrsw9dW7SCxd3kpwR7gaglsC78= Subject key identifier: C5:5A:B8:14:08:2F:CC:DF:6B:5A:BD:21:5A:91:45:AA:A8:B7:16:18 Certificate issuer: /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Certificate serial: 0316 Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa Signing time: Thu 17 Apr 2025 01:07:12 +0000 ROA not before: Thu 17 Apr 2025 01:07:12 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 18390 IP address blocks: 27.96.192.0/19 maxlen: 24 115.69.0.0/18 maxlen: 24 202.172.96.0/19 maxlen: 24 203.23.236.0/22 maxlen: 24 203.29.65.0/24 maxlen: 24 203.29.124.0/23 maxlen: 24 203.31.202.0/23 maxlen: 24 203.56.244.0/22 maxlen: 24 203.57.48.0/23 maxlen: 24 210.1.192.0/19 maxlen: 24 2407:e400::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6 Validity Not Before: Apr 17 01:07:12 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68005440-f47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:97:d9:bd:fc:1b:16:c4:d2:dc:b6:48:6f:8a: 78:f5:75:b5:bb:d3:e3:12:eb:c7:b7:8c:46:0b:65: 61:fa:71:f8:ff:07:58:54:46:2a:b4:21:84:c7:dc: 2d:e9:ba:3f:76:b5:b5:e5:df:1d:4e:cb:2d:f0:83: 54:7a:32:41:34:e3:9a:37:52:d6:0b:d6:a2:df:84: 6d:ce:31:40:ea:0a:5a:c5:69:39:05:54:e2:9a:d4: f2:10:e2:ae:c8:b9:ab:82:f5:95:47:f2:e3:0e:32: 90:00:eb:00:15:d8:7b:44:2e:c4:fb:86:02:14:68: 8b:5a:da:68:cd:56:5b:33:05:27:6d:73:62:e1:85: 37:57:ad:2b:4d:cb:af:ab:af:a9:99:f5:3f:56:d3: ae:37:c2:3a:08:a1:05:6f:49:b5:b8:b8:9f:65:6c: 1f:56:4e:dc:39:4c:56:05:c7:e6:d5:1f:91:5f:5a: 2e:58:b9:33:04:99:be:d5:60:95:fd:53:dc:1e:60: 80:27:e2:ba:0c:95:fa:fb:4c:f0:cb:f3:f4:e9:47: 6b:e0:7b:c4:7b:1d:f7:09:ea:ae:54:0e:34:f1:ac: 23:30:ac:98:51:ac:43:f4:c2:7e:f4:ee:20:aa:19: f9:69:21:94:77:0a:4b:13:a9:a9:87:24:7f:38:e8: 54:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:B8:14:08:2F:CC:DF:6B:5A:BD:21:5A:91:45:AA:A8:B7:16:18 X509v3 Authority Key Identifier: keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.96.192.0/19 115.69.0.0/18 202.172.96.0/19 203.23.236.0/22 203.29.65.0/24 203.29.124.0/23 203.31.202.0/23 203.56.244.0/22 203.57.48.0/23 210.1.192.0/19 IPv6: 2407:e400::/32 Signature Algorithm: sha256WithRSAEncryption 61:4b:3b:17:07:e3:57:e1:33:26:a4:80:da:1b:55:4c:65:9a: 08:75:86:1a:99:f7:ec:16:f6:61:e9:4c:c3:70:9a:2b:17:20: a1:b2:cd:51:8d:32:45:ad:07:48:26:83:12:07:5c:70:a8:e4: 73:21:70:b7:5c:56:13:ed:0f:72:34:43:54:a2:b0:f2:a2:c5: 47:43:cf:26:91:e2:b7:0d:20:7f:10:77:51:d2:0c:92:22:c0: ba:c4:fa:81:0b:1e:72:25:4a:fb:2a:f9:54:24:16:bf:81:34: d6:7f:f9:a7:f9:4b:8e:44:44:de:69:4b:76:6b:f7:54:12:a4: 36:c3:d1:b5:35:24:27:d3:0f:95:f8:c2:08:c4:99:5f:cb:ee: 3f:92:36:c9:77:4c:33:71:fa:9f:70:15:d3:39:01:f4:fc:dd: 46:af:ea:a0:3e:17:05:96:b5:9e:5f:28:09:77:ac:87:c6:05: 54:64:8f:16:a0:72:ae:e3:86:50:5f:19:b9:d9:46:30:97:76: 27:6f:67:94:61:cf:0a:c5:fa:42:8d:5e:6e:42:4d:fc:64:e1: 2a:89:7f:6a:eb:09:76:ca:35:bb:b0:0b:b1:69:54:9a:3c:bf: 0a:c0:58:de:ed:fa:ff:e3:15:80:ce:59:56:8c:c9:cf:ea:01: 07:4f:86:fd -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MzExMTAvBgNVBAUTKDdCRDNFNDNEMTM0RTUyMzVFOTc2MDNDRThCQTk0ODZC NjJBOUIxRTYwHhcNMjUwNDE3MDEwNzEyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwNTQ0MC1mNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pfZvfwbFsTS3LZIb4p49XW1u9PjEuvHt4xGC2Vh+nH4/wdYVEYqtCGEx9wt 6bo/drW15d8dTsst8INUejJBNOOaN1LWC9ai34RtzjFA6gpaxWk5BVTimtTyEOKu yLmrgvWVR/LjDjKQAOsAFdh7RC7E+4YCFGiLWtpozVZbMwUnbXNi4YU3V60rTcuv q6+pmfU/VtOuN8I6CKEFb0m1uLifZWwfVk7cOUxWBcfm1R+RX1ouWLkzBJm+1WCV /VPcHmCAJ+K6DJX6+0zwy/P06Udr4HvEex33CequVA408awjMKyYUaxD9MJ+9O4g qhn5aSGUdwpLE6mphyR/OOhUCQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFMVauBQI L8zfa1q9IVqRRaqotxYYMB8GA1UdIwQYMBaAFHvT5D0TTlI16XYDzoupSGtiqbHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYzMS8zOUU0RDdBOERD NzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1VqWHBkZ1BPaTZsSWEyS3Bz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5UGtQUk5PVWpYcGRnUE9pNmxJYTJLcHNlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM2MzEvMzlFNEQ3QThEQzc4MTFFQ0E0RTMwNjE3QzRGOUFFMDIvNjNGMDVERTAy RjFEMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E VTBTMEIEAgABMDwDBAUbYMADBAZzRQADBAXKrGADBALLF+wDBADLHUEDBAHLHXwD BAHLH8oDBALLOPQDBAHLOTADBAXSAcAwDQQCAAIwBwMFACQH5AAwDQYJKoZIhvcN AQELBQADggEBAGFLOxcH41fhMyakgNobVUxlmgh1hhqZ9+wW9mHpTMNwmisXIKGy zVGNMkWtB0gmgxIHXHCo5HMhcLdcVhPtD3I0Q1SisPKixUdDzyaR4rcNIH8Qd1HS DJIiwLrE+oELHnIlSvsq+VQkFr+BNNZ/+af5S45ERN5pS3Zr91QSpDbD0bU1JCfT D5X4wgjEmV/L7j+SNsl3TDNx+p9wFdM5AfT83Uav6qA+FwWWtZ5fKAl3rIfGBVRk jxagcq7jhlBfGbnZRjCXdidvZ5RhzwrF+kKNXm5CTfxk4SqJf2rrCXbKNbuwC7Fp VJo8vwrAWN7t+v/jFYDOWVaMyc/qAQdPhv0= -----END CERTIFICATE-----Generated at Sat Apr 26 07:43:47 2025 by rpki-client