$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa File: CB67B90812E811F0B8DAD875C4F9AE02.roa (raw, json) Hash identifier: ghA9EEgI0e+9HlkDLrK1eM2MR4ZuQ4ALmiWbqOT3M5E= Subject key identifier: 19:AF:57:37:05:E1:0C:56:7D:7F:48:F4:31:D4:4D:78:2B:1E:4B:89 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 04 Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa Signing time: Sun 06 Apr 2025 13:36:19 +0000 ROA not before: Sun 06 Apr 2025 13:36:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 147181 IP address blocks: 163.223.240.0/24 maxlen: 24 163.223.241.0/24 maxlen: 24 2001:df5:5140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Apr 6 13:36:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=67f28353-bf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:46:77:90:03:fb:f1:4b:94:82:7d:dd:78: 45:8b:32:89:f7:14:47:23:67:f9:20:40:94:3b:18: e1:05:c7:0e:f4:eb:64:ab:eb:ba:b3:14:74:9d:12: a7:57:aa:52:11:5b:c9:85:55:b2:ed:ea:ca:0c:c0: 6c:09:7c:4c:61:65:49:fe:9d:59:b1:cd:c1:12:16: 65:22:06:dd:9a:ff:5a:85:e8:83:47:8a:45:54:15: 4f:24:9c:7c:47:ce:99:ef:45:2b:7d:ca:41:75:c2: f1:c6:fa:bd:13:3b:b0:02:a2:08:67:65:d3:9b:66: d5:7d:02:99:67:79:0f:5f:aa:dc:98:9c:5f:40:6a: aa:02:f2:a4:bf:49:38:be:05:39:35:a6:df:21:d0: 8f:80:91:df:3e:d7:e8:c4:f9:7b:c7:97:b5:11:25: 2d:22:fb:44:06:27:5e:35:aa:d4:e4:cf:4b:e0:12: 69:0d:09:1e:fe:d4:90:fb:a7:c7:f2:df:62:a3:7d: 5f:20:9a:5a:c9:89:93:2c:2f:c7:7e:d1:dd:ff:b0: 2f:ea:dd:34:27:9c:0a:6f:8e:b2:05:95:19:79:18: b0:2f:70:fb:c7:80:37:f3:a5:ee:91:1a:84:df:24: d4:d1:9f:00:ea:5e:dd:eb:17:93:18:22:a7:4a:9c: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AF:57:37:05:E1:0C:56:7D:7F:48:F4:31:D4:4D:78:2B:1E:4B:89 X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/CB67B90812E811F0B8DAD875C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.240.0/23 IPv6: 2001:df5:5140::/48 Signature Algorithm: sha256WithRSAEncryption 3f:26:9c:88:bf:0b:58:db:20:11:6b:f9:51:30:ce:2c:0d:41: 75:5a:50:c6:b3:33:59:6a:48:55:a9:8f:20:2c:f2:3f:21:72: 69:6b:ee:12:50:57:e8:c3:a1:40:a4:a6:33:90:92:93:7f:05: 63:8f:ae:28:eb:17:a5:3a:f3:3d:a9:e8:3a:b9:a5:eb:a3:72: 6c:b9:c8:7d:d8:04:26:24:ea:ac:b1:f4:24:f1:c3:6a:80:c7: d5:1d:89:8c:c9:83:a0:02:5e:30:be:cd:90:e4:cb:e2:b5:ca: 7e:d6:90:2b:b5:5a:97:24:aa:69:cd:51:f7:02:4a:56:12:59: 0a:aa:00:87:05:0f:27:eb:c2:54:56:1a:da:30:77:ae:2f:a3: a6:82:dd:c2:96:96:24:f2:80:0a:1f:ba:c8:7b:00:77:23:09: 22:66:2c:b5:df:7f:de:c8:f5:d7:88:70:40:e6:3f:1a:36:c8: 15:52:48:32:24:f1:3b:bb:5c:31:ec:c6:13:f0:e5:13:d0:a1: b5:66:a1:26:94:18:3b:cd:00:51:02:9e:fd:37:e6:bc:a3:d1: a1:73:b5:55:6d:98:53:23:4f:f2:cb:0f:0b:ae:5a:87:9c:c6: 20:a4:dd:bd:e9:f8:42:a6:eb:db:ff:b7:0d:d8:7f:dd:a0:51: 51:65:21:09 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTA0MDYxMzM2MTlaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjI4MzUzLWJmNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTakZ3kAP78UuUgn3deEWLMon3FEcjZ/kgQJQ7GOEFxw7062Sr67qzFHSdEqdX qlIRW8mFVbLt6soMwGwJfExhZUn+nVmxzcESFmUiBt2a/1qF6INHikVUFU8knHxH zpnvRSt9ykF1wvHG+r0TO7ACoghnZdObZtV9AplneQ9fqtyYnF9AaqoC8qS/STi+ BTk1pt8h0I+Akd8+1+jE+XvHl7URJS0i+0QGJ141qtTkz0vgEmkNCR7+1JD7p8fy 32KjfV8gmlrJiZMsL8d+0d3/sC/q3TQnnApvjrIFlRl5GLAvcPvHgDfzpe6RGoTf JNTRnwDqXt3rF5MYIqdKnKKfAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUGa9XNwXh DFZ9f0j0MdRNeCseS4kwHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y5NS83RDMzRkQzODEyRTcxMUYwQkRCOTQ1NERDNEY5QUUwMi9DQjY3QjkwODEy RTgxMUYwQjhEQUQ4NzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPf8DAPBAIAAjAJAwcAIAEN9VFAMA0GCSqGSIb3DQEBCwUA A4IBAQA/JpyIvwtY2yARa/lRMM4sDUF1WlDGszNZakhVqY8gLPI/IXJpa+4SUFfo w6FApKYzkJKTfwVjj64o6xelOvM9qeg6uaXro3Jsuch92AQmJOqssfQk8cNqgMfV HYmMyYOgAl4wvs2Q5Mvitcp+1pArtVqXJKppzVH3AkpWElkKqgCHBQ8n68JUVhra MHeuL6Omgt3ClpYk8oAKH7rIewB3IwkiZiy133/eyPXXiHBA5j8aNsgVUkgyJPE7 u1wx7MYT8OUT0KG1ZqEmlBg7zQBRAp79N+a8o9Ghc7VVbZhTI0/yyw8LrlqHnMYg pN296fhCpuvb/7cN2H/doFFRZSEJ -----END CERTIFICATE-----Generated at Sat Apr 26 08:34:35 2025 by rpki-client