$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa File: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (raw, json) Hash identifier: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g= Subject key identifier: 31:38:69:47:4C:FB:E1:83:54:B3:CD:93:F8:1A:9B:93:63:D7:1D:35 Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Certificate serial: 3A Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa Signing time: Thu 24 Apr 2025 10:11:13 +0000 ROA not before: Thu 24 Apr 2025 10:11:13 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 141383 IP address blocks: 163.61.8.0/23 maxlen: 24 2001:df4:ffc0::/48 maxlen: 52 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6 Validity Not Before: Apr 24 10:11:13 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=680a0e41-70ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:c4:0b:d3:66:99:e3:f5:03:9b:4a:45:5b: d1:c7:04:34:fd:ec:cb:e2:bb:03:e3:16:ed:91:bf: ea:c4:51:a1:2d:b3:f0:0d:76:22:33:a9:5b:4c:b6: c1:b1:15:00:df:63:b0:85:07:22:97:c3:83:ea:17: f1:de:4e:a3:e2:7f:07:75:0b:f5:76:88:1c:77:09: 1f:27:f9:f5:17:02:1f:6c:ed:bb:50:e4:fb:7c:9a: 47:88:2e:56:aa:34:b0:e8:24:30:34:91:ef:11:26: 35:78:ae:0f:2b:3f:59:16:9a:d5:24:7a:89:4a:e4: 15:9c:0f:b5:dd:59:ae:f3:85:db:cf:be:59:75:a3: ad:09:3f:16:ab:8a:e5:ba:80:d1:46:da:d6:4f:0c: 6c:9a:1f:38:68:85:7b:ae:ca:d0:84:c4:82:80:ca: c2:37:61:8e:5b:09:83:74:df:1c:b7:a7:fa:1c:c2: ef:e2:f2:ef:d1:34:27:67:e7:f8:25:5e:ab:79:b8: 1d:7f:d0:a7:fe:2d:85:56:df:ce:dd:02:cb:de:c8: d3:41:6e:5b:67:c2:d4:8f:33:04:43:5a:14:e4:cf: 62:15:a1:49:fb:ad:b3:5a:55:34:6f:bb:75:a0:89: db:f8:1f:1a:35:36:6d:9c:27:f6:14:d1:c0:fe:07: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:38:69:47:4C:FB:E1:83:54:B3:CD:93:F8:1A:9B:93:63:D7:1D:35 X509v3 Authority Key Identifier: keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/3AA17754FD8211EFB5BB677AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.8.0/23 IPv6: 2001:df4:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption 89:e4:d4:da:54:47:44:28:00:83:fc:9b:2a:60:23:26:dd:09: e1:dd:10:f0:51:db:11:72:08:65:54:89:aa:bb:ba:7b:5d:df: a2:04:da:3e:c2:94:ca:41:52:88:59:b9:43:46:f4:58:c0:c9: a2:6e:9b:ee:47:57:d5:47:63:94:d4:eb:96:a2:cc:e1:d6:0e: 9e:40:b3:9e:03:35:b8:7d:22:ff:b7:9d:8f:8a:da:0e:21:66: 3f:1c:b1:9a:86:d3:66:f2:7a:74:88:be:c8:0b:0b:b4:9e:d4: d4:e4:5b:d7:4e:ca:ce:6d:de:b2:9f:fd:ad:2d:a7:d8:e2:8b: 1b:e8:84:34:c6:23:66:6b:65:4f:fe:81:0a:0c:f7:a6:03:ea: f7:14:d6:fd:48:8f:0d:51:3e:8f:1a:f3:bb:95:4e:72:83:11: c7:d1:3f:11:7f:71:0f:4c:9d:d8:0b:26:8a:69:ec:3f:40:4c: fb:cf:af:33:ca:4b:03:0e:da:30:25:64:7f:2b:a6:de:3a:1a: 74:9f:20:30:da:98:55:8d:b6:13:d8:69:76:29:66:07:01:01: 49:31:ca:af:54:c0:ee:67:bf:20:94:e2:3e:68:b9:e2:f4:46: 18:f7:32:8b:30:00:49:e0:4f:00:2d:49:2e:ce:fb:df:e6:4d: 50:0b:a4:06 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REUzRDExMC8GA1UEBRMoNjkxODFDRjQ1MUY4QjNGRUM2NEZDODI5OEI1MjJENDg4 Q0E1QzlFNjAeFw0yNTA0MjQxMDExMTNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MGEwZTQxLTcwZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC818QL02aZ4/UDm0pFW9HHBDT97MviuwPjFu2Rv+rEUaEts/ANdiIzqVtMtsGx FQDfY7CFByKXw4PqF/HeTqPifwd1C/V2iBx3CR8n+fUXAh9s7btQ5Pt8mkeILlaq NLDoJDA0ke8RJjV4rg8rP1kWmtUkeolK5BWcD7XdWa7zhdvPvll1o60JPxariuW6 gNFG2tZPDGyaHzhohXuuytCExIKAysI3YY5bCYN03xy3p/ocwu/i8u/RNCdn5/gl Xqt5uB1/0Kf+LYVW387dAsveyNNBbltnwtSPMwRDWhTkz2IVoUn7rbNaVTRvu3Wg idv4Hxo1Nm2cJ/YU0cD+Bw1TAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUMThpR0z7 4YNUs82T+Bqbk2PXHTUwHwYDVR0jBBgwFoAUaRgc9FH4s/7GT8gpi1ItSIylyeYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERTNEL0ZEMUU0NTUwREU2 NTExRUY4MjQzRUUzMEM0RjlBRTAyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHll WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVJnYzlGSDRzXzdHVDhncGkxSXRTSXlseWVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi8zQUExNzc1NEZE ODIxMUVGQjVCQjY3N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaM9CDAPBAIAAjAJAwcAIAEN9P/AMA0GCSqGSIb3DQEBCwUA A4IBAQCJ5NTaVEdEKACD/JsqYCMm3Qnh3RDwUdsRcghlVImqu7p7Xd+iBNo+wpTK QVKIWblDRvRYwMmibpvuR1fVR2OU1OuWoszh1g6eQLOeAzW4fSL/t52PitoOIWY/ HLGahtNm8np0iL7ICwu0ntTU5FvXTsrObd6yn/2tLafY4osb6IQ0xiNma2VP/oEK DPemA+r3FNb9SI8NUT6PGvO7lU5ygxHH0T8Rf3EPTJ3YCyaKaew/QEz7z68zyksD DtowJWR/K6beOhp0nyAw2phVjbYT2Gl2KWYHAQFJMcqvVMDuZ78glOI+aLni9EYY 9zKLMABJ4E8ALUkuzvvf5k1QC6QG -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:32 2025 by rpki-client