$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa File: 4C559E64054B11F08646F910C4F9AE02.roa (raw, json) Hash identifier: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0= Subject key identifier: 6A:B9:53:34:20:4D:B1:B1:40:03:51:C1:89:31:CD:FA:D0:15:88:B6 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 05 Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa Signing time: Thu 20 Mar 2025 05:22:21 +0000 ROA not before: Thu 20 Mar 2025 05:22:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149507 IP address blocks: 163.223.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Mar 20 05:22:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dba60d-3c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:14:ad:e7:59:e5:c4:64:bd:d1:50:bc:84: 4d:8a:96:43:63:66:2d:72:69:6a:19:a0:57:7a:b3: b8:b6:31:c1:01:ad:13:2c:7f:e3:f4:3b:ab:1c:91: 02:64:99:b5:45:db:40:ef:0e:23:0f:c7:de:35:d8: 21:8f:2f:29:27:15:e4:63:75:bf:6f:98:2f:c4:42: b6:e6:6f:9e:dd:74:de:56:b1:92:a2:02:ce:e2:81: 57:1e:e2:e4:aa:a2:3c:cf:a6:08:df:ff:6f:56:46: 5c:82:40:28:81:10:97:13:0a:dd:6c:bb:ab:9e:f0: 2e:1e:fc:72:ca:a9:dc:7c:3b:10:d1:66:20:28:59: 38:d1:eb:65:66:a7:4f:92:e6:14:e1:b5:94:c2:e7: b8:96:8a:89:c5:18:ca:d5:d5:0e:a2:4f:83:d7:44: 9a:96:b1:1b:8a:a7:69:53:d3:c4:44:86:dc:33:7b: 5f:ae:cd:36:d9:64:e5:55:b5:c9:75:16:9e:2a:a3: b6:e7:b7:d9:48:66:53:81:a6:6b:72:ed:05:23:e1: 64:a6:62:6c:af:59:ec:18:9f:4b:c4:06:5e:58:69: a4:c9:7b:0e:0f:53:d1:da:66:c1:6d:69:cb:b8:e6: cb:2c:ea:b8:90:98:59:e6:56:d9:5a:83:16:dc:c3: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:53:34:20:4D:B1:B1:40:03:51:C1:89:31:CD:FA:D0:15:88:B6 X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/4C559E64054B11F08646F910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.120.0/23 Signature Algorithm: sha256WithRSAEncryption be:43:c6:52:c8:48:f6:42:6d:6e:91:1d:f0:15:a5:56:56:57: 09:00:2b:62:24:98:b4:e7:ae:24:28:4e:14:be:70:18:e9:cb: 8d:83:75:10:16:86:74:01:e4:a5:5b:37:5e:8d:15:75:36:5a: f2:e7:5a:f9:92:c7:66:e3:63:1a:4b:c2:7a:ac:4f:96:31:83: 65:4b:63:ee:71:03:02:af:34:ce:d9:35:89:2e:a1:f3:49:51: 55:c6:1c:97:bd:52:0c:ff:cd:7e:22:b7:d9:22:44:87:06:c5: 0e:18:22:1f:ab:71:49:2f:6d:47:38:be:16:7e:66:a7:2c:1c: 85:ae:36:03:09:b0:7c:4d:18:fb:eb:9b:d6:bf:a1:33:0a:a8: aa:5a:8e:78:48:5f:d8:69:f6:12:05:a3:bb:b6:09:c3:ca:4d: c8:1a:66:56:0d:b8:56:f7:8f:61:88:bd:59:ad:13:48:34:3d: 60:25:b6:e7:f4:e3:5d:5a:ac:a1:a9:15:c1:d6:22:6e:8a:15: df:c6:2e:7a:c4:cf:a7:b7:ed:3e:c3:f8:e4:d3:93:a9:e6:f7: 2a:16:57:1b:5f:68:2d:44:e9:e7:46:b5:60:eb:25:cc:5b:2d: 56:1d:7e:91:8c:73:f8:35:df:14:32:81:5f:44:2f:34:98:cb: f1:2e:06:ce -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTAzMjAwNTIyMjFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZGJhNjBkLTNjMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDArxSt51nlxGS90VC8hE2KlkNjZi1yaWoZoFd6s7i2McEBrRMsf+P0O6sckQJk mbVF20DvDiMPx9412CGPLyknFeRjdb9vmC/EQrbmb57ddN5WsZKiAs7igVce4uSq ojzPpgjf/29WRlyCQCiBEJcTCt1su6ue8C4e/HLKqdx8OxDRZiAoWTjR62Vmp0+S 5hThtZTC57iWionFGMrV1Q6iT4PXRJqWsRuKp2lT08REhtwze1+uzTbZZOVVtcl1 Fp4qo7bnt9lIZlOBpmty7QUj4WSmYmyvWewYn0vEBl5YaaTJew4PU9HaZsFtacu4 5sss6riQmFnmVtlagxbcwxPrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUarlTNCBN sbFAA1HBiTHN+tAViLYwHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyNy9DMTA2RDMzQzA0REMxMUYwQjZCMjVBNDNDNEY5QUUwMi80QzU1OUU2NDA1 NEIxMUYwODY0NkY5MTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfeDANBgkqhkiG9w0BAQsFAAOCAQEAvkPGUshI9kJtbpEd 8BWlVlZXCQArYiSYtOeuJChOFL5wGOnLjYN1EBaGdAHkpVs3Xo0VdTZa8uda+ZLH ZuNjGkvCeqxPljGDZUtj7nEDAq80ztk1iS6h80lRVcYcl71SDP/NfiK32SJEhwbF DhgiH6txSS9tRzi+Fn5mpywcha42AwmwfE0Y++ub1r+hMwqoqlqOeEhf2Gn2EgWj u7YJw8pNyBpmVg24VvePYYi9Wa0TSDQ9YCW25/TjXVqsoakVwdYibooV38YuesTP p7ftPsP45NOTqeb3KhZXG19oLUTp50a1YOslzFstVh1+kYxz+DXfFDKBX0QvNJjL 8S4Gzg== -----END CERTIFICATE-----Generated at Sat Apr 26 05:56:37 2025 by rpki-client