$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/C5B70210E46D11EF82B5C81EC4F9AE02.roa File: C5B70210E46D11EF82B5C81EC4F9AE02.roa (raw, json) Hash identifier: dIFQqFmec3JjXDYVi/rG2+bG0OcjYLfutfONK3TQQqY= Subject key identifier: 82:AD:B8:1C:CF:36:C8:74:C2:AC:F7:E4:C0:22:09:FD:26:54:C4:7A Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 184D Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/C5B70210E46D11EF82B5C81EC4F9AE02.roa Signing time: Thu 24 Apr 2025 03:48:57 +0000 ROA not before: Thu 24 Apr 2025 03:48:57 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152335 IP address blocks: 27.49.148.0/22 maxlen: 22 27.49.152.0/22 maxlen: 22 27.49.156.0/22 maxlen: 22 27.49.196.0/22 maxlen: 22 27.49.200.0/22 maxlen: 22 27.49.204.0/22 maxlen: 22 27.49.208.0/22 maxlen: 22 27.49.212.0/22 maxlen: 22 27.49.216.0/22 maxlen: 22 27.49.220.0/22 maxlen: 22 27.49.252.0/22 maxlen: 22 2403:4c0:fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6221 (0x184d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Apr 24 03:48:57 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6809b4a9-68bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:96:da:c5:29:66:81:a5:fc:8f:2a:3b:23: a8:95:71:87:69:ef:2c:45:48:f4:c0:fc:64:9e:90: b4:1b:14:fd:56:33:a3:f2:2d:cd:6c:f1:29:2e:cc: 21:59:5a:77:9a:70:58:c2:d4:54:f4:56:d0:9c:5f: e2:0e:b9:ff:a3:77:1b:d8:05:36:79:e2:b3:ce:6c: a3:fc:ed:d4:98:42:6a:ea:08:26:73:3e:fa:96:fd: c3:ba:c7:12:60:dc:e7:65:d0:c7:e1:3a:2c:9b:56: dc:4c:14:41:19:58:68:b7:c8:5c:2d:89:fa:91:3a: 23:d7:18:c1:e7:2c:00:28:ed:67:84:7e:07:8a:1e: 68:fa:cd:92:a7:3b:07:93:96:1b:9b:09:7e:b7:7e: ef:6f:a4:e2:3f:6b:15:9e:ae:1e:a0:03:31:46:59: 60:ef:1e:21:db:9e:18:20:38:3b:e4:9a:c1:61:db: 41:ff:c4:cc:1f:3d:e8:c1:57:7e:eb:b8:d6:1c:c5: d9:88:99:7b:93:48:f0:a9:fd:67:a9:38:58:28:6c: b4:20:cd:79:1c:66:68:d8:e3:77:8e:52:6a:37:6c: b3:39:3c:06:b7:12:af:b8:1c:85:0f:81:9f:49:87: 08:17:97:b6:b1:18:87:1a:24:56:16:af:1e:9a:a0: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AD:B8:1C:CF:36:C8:74:C2:AC:F7:E4:C0:22:09:FD:26:54:C4:7A X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/C5B70210E46D11EF82B5C81EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.49.148.0-27.49.159.255 27.49.196.0-27.49.223.255 27.49.252.0/22 IPv6: 2403:4c0:fb::/48 Signature Algorithm: sha256WithRSAEncryption ab:bb:e5:eb:01:40:71:ea:14:a7:a2:8a:05:9e:e3:c1:9c:7b: dd:21:ca:b4:38:b3:2d:27:eb:0c:74:8c:65:89:04:b7:17:ce: 80:b5:83:64:05:f6:84:c2:e6:62:a6:28:32:33:0a:3a:37:3e: 08:dd:93:f2:7a:16:58:f8:0c:fb:8e:7a:19:d6:04:8a:d2:26: 4e:cf:ca:46:f4:44:d9:bf:f3:32:93:f4:d2:7f:a1:d2:82:eb: 8e:8b:d8:a3:1f:bd:36:4f:ba:ba:b7:56:aa:3c:e9:2c:08:be: 8c:de:68:2b:c0:ab:9b:2a:9a:f6:6a:8f:e9:51:c4:25:41:aa: 56:ca:46:c5:71:4d:e5:8a:0e:e8:01:61:84:3c:85:73:69:5a: 2e:f4:21:51:ef:5b:d7:28:a0:67:c9:ba:5b:08:67:84:54:cd: da:48:67:28:ee:9a:0e:96:1d:81:b7:9b:ba:e8:39:34:2b:b5: 98:0d:b0:20:b7:28:61:16:26:eb:86:51:b9:ab:1e:94:11:52: b1:38:9e:c4:d5:52:a7:2c:38:ee:09:45:1a:f3:02:b5:d6:1c: 7e:9e:4c:3c:62:4b:4f:4b:47:16:4d:21:e4:18:77:e7:a9:5d: 9b:3a:25:36:2f:94:e9:63:f4:cd:c2:a0:4d:5f:c7:ae:5f:7f: 86:eb:34:a4 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICGE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUwNDI0MDM0ODU3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA5YjRhOS02OGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx+W2sUpZoGl/I8qOyOolXGHae8sRUj0wPxknpC0GxT9VjOj8i3NbPEpLswh WVp3mnBYwtRU9FbQnF/iDrn/o3cb2AU2eeKzzmyj/O3UmEJq6ggmcz76lv3DuscS YNznZdDH4Tosm1bcTBRBGVhot8hcLYn6kToj1xjB5ywAKO1nhH4Hih5o+s2SpzsH k5Ybmwl+t37vb6TiP2sVnq4eoAMxRllg7x4h254YIDg75JrBYdtB/8TMHz3owVd+ 67jWHMXZiJl7k0jwqf1nqThYKGy0IM15HGZo2ON3jlJqN2yzOTwGtxKvuByFD4Gf SYcIF5e2sRiHGiRWFq8emqBO9QIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFIKtuBzP Nsh0wqz35MAiCf0mVMR6MB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvNjI4REU1MDJERjIzMTFFNzk3MjI1RDJFQzRGOUFFMDIvQzVCNzAyMTBF NDZEMTFFRjgyQjVDODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCgEAgABMCIwDAMEAhsxlAMEBRsxgDAMAwQCGzHEAwQFGzHAAwQCGzH8MA8E AgACMAkDBwAkAwTAAPswDQYJKoZIhvcNAQELBQADggEBAKu75esBQHHqFKeiigWe 48Gce90hyrQ4sy0n6wx0jGWJBLcXzoC1g2QF9oTC5mKmKDIzCjo3Pgjdk/J6Flj4 DPuOehnWBIrSJk7Pykb0RNm/8zKT9NJ/odKC646L2KMfvTZPurq3Vqo86SwIvoze aCvAq5sqmvZqj+lRxCVBqlbKRsVxTeWKDugBYYQ8hXNpWi70IVHvW9cooGfJulsI Z4RUzdpIZyjumg6WHYG3m7roOTQrtZgNsCC3KGEWJuuGUbmrHpQRUrE4nsTVUqcs OO4JRRrzArXWHH6eTDxiS09LRxZNIeQYd+epXZs6JTYvlOlj9M3CoE1fx65ff4br NKQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:09 2025 by rpki-client