$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/C1A4AC1620E211F092240470C4F9AE02.roa File: C1A4AC1620E211F092240470C4F9AE02.roa (raw, json) Hash identifier: Y6T/CEcFChOzPhN5TpsTb/Xa+S8f2JLpMRsXGxYgWOs= Subject key identifier: 32:81:AB:53:D1:FF:17:C7:2D:88:74:93:53:86:85:6C:ED:87:D9:D8 Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 77 Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/C1A4AC1620E211F092240470C4F9AE02.roa Signing time: Thu 24 Apr 2025 08:04:59 +0000 ROA not before: Thu 24 Apr 2025 08:04:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 141385 IP address blocks: 163.61.16.0/24 maxlen: 24 2001:df5:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Apr 24 08:04:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6809f0aa-1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:74:4c:70:1b:98:65:ae:26:b5:33:b6:e3: fe:81:7d:5c:33:06:37:43:f5:f9:30:17:30:79:0f: 42:96:45:83:7c:a1:4d:b5:98:5f:6d:49:0d:33:e3: 7c:a4:c8:a8:e1:2f:99:7b:d2:ff:3c:54:9b:bb:a8: cd:6d:5a:f6:75:a7:0d:d9:b8:2c:fe:64:29:62:9f: f1:63:a5:15:d7:3a:db:23:ec:86:d4:c1:61:af:19: 18:37:7d:24:79:af:4f:48:f5:9b:41:92:8e:97:88: e7:0b:bc:98:00:f9:63:5d:17:44:59:0b:62:3e:92: 39:81:98:35:4f:f4:81:a8:2f:85:b8:e9:0e:0b:eb: 69:4d:92:a3:18:15:b6:6f:3a:57:f0:2d:59:ca:ac: 9b:79:30:1f:46:8e:fd:ea:47:53:8e:7b:eb:a5:a4: 16:9d:f7:6c:d2:59:67:4a:0d:38:1f:b8:bd:eb:c6: bb:dc:c9:a5:74:03:10:26:f0:a9:f1:77:d8:97:e5: 76:78:9f:94:57:fc:0e:50:55:a0:9b:5b:33:ff:c5: 46:ed:51:bc:31:01:45:30:87:c4:ca:fc:f8:5d:5b: 67:75:93:73:ab:20:7c:94:73:15:15:00:47:d7:ed: 48:7b:76:de:75:13:61:45:d4:2c:66:9e:32:9c:1a: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:AB:53:D1:FF:17:C7:2D:88:74:93:53:86:85:6C:ED:87:D9:D8 X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/C1A4AC1620E211F092240470C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.16.0/24 IPv6: 2001:df5:c0::/48 Signature Algorithm: sha256WithRSAEncryption 04:be:24:30:88:ec:ef:1a:a5:78:43:ed:48:f8:79:15:7e:14: b0:54:fb:a4:64:a0:37:3a:fe:5a:e7:c0:85:84:53:65:2c:7f: e8:38:c9:c5:aa:a1:7b:5a:1c:05:13:08:86:63:f3:72:dd:a4: 8e:8d:34:3e:d8:28:00:3d:36:b2:07:84:62:aa:66:6e:5d:4c: 37:bb:72:d6:8c:d5:b0:ba:99:fe:3c:50:4d:58:20:6e:ea:c1: 42:dd:68:fb:45:8e:30:e9:db:63:56:57:5f:18:b2:f2:19:6d: 8d:2b:c6:22:44:b6:27:29:9e:79:f6:7c:3b:84:d5:d1:56:11: 0c:29:a8:29:c2:ba:d6:de:96:36:1d:ee:5b:46:e6:88:01:96: 3d:17:79:98:ea:af:93:49:7d:0b:af:b7:45:c8:aa:b7:c7:d5: 5c:e5:5b:e8:81:76:b1:2d:b5:81:12:20:99:ae:63:36:32:76: 62:8c:d8:0c:6d:4c:e0:21:e6:b8:a1:c5:c5:a5:d6:bd:93:63: c5:d5:3c:7e:7d:3a:7d:58:7f:5b:83:b3:42:1a:28:2b:06:bd: bf:3e:d5:7f:fb:65:39:e1:75:24:43:c3:01:0d:63:b5:00:17: 58:2f:13:fa:63:a3:25:a4:68:25:9c:3f:67:0b:ed:ec:e2:aa: a7:68:cd:d9 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTY0ODExMC8GA1UEBRMoMkMxQzA3RDE1MTI3MTk2OUUxM0UxQ0ZEMTYxQjFGNjA3 NzBFMjkwRDAeFw0yNTA0MjQwODA0NTlaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MDlmMGFhLTFkYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHj3RMcBuYZa4mtTO24/6BfVwzBjdD9fkwFzB5D0KWRYN8oU21mF9tSQ0z43yk yKjhL5l70v88VJu7qM1tWvZ1pw3ZuCz+ZClin/FjpRXXOtsj7IbUwWGvGRg3fSR5 r09I9ZtBko6XiOcLvJgA+WNdF0RZC2I+kjmBmDVP9IGoL4W46Q4L62lNkqMYFbZv OlfwLVnKrJt5MB9Gjv3qR1OOe+ulpBad92zSWWdKDTgfuL3rxrvcyaV0AxAm8Knx d9iX5XZ4n5RX/A5QVaCbWzP/xUbtUbwxAUUwh8TK/PhdW2d1k3OrIHyUcxUVAEfX 7Uh7dt51E2FF1CxmnjKcGrYVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUMoGrU9H/ F8ctiHSTU4aFbO2H2dgwHwYDVR0jBBgwFoAULBwH0VEnGWnhPhz9FhsfYHcOKQ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NjQ4LzIxOEYyNjhBREM5 RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tR MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEJ3SDBWRW5HV25oUGh6OUZoc2ZZSGNPS1EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTY0OC8yMThGMjY4QURDOUUxMUVGOEI2MkRENUZDNEY5QUUwMi9DMUE0QUMxNjIw RTIxMUYwOTIyNDA0NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAKM9EDAPBAIAAjAJAwcAIAEN9QDAMA0GCSqGSIb3DQEBCwUA A4IBAQAEviQwiOzvGqV4Q+1I+HkVfhSwVPukZKA3Ov5a58CFhFNlLH/oOMnFqqF7 WhwFEwiGY/Ny3aSOjTQ+2CgAPTayB4RiqmZuXUw3u3LWjNWwupn+PFBNWCBu6sFC 3Wj7RY4w6dtjVldfGLLyGW2NK8YiRLYnKZ559nw7hNXRVhEMKagpwrrW3pY2He5b RuaIAZY9F3mY6q+TSX0Lr7dFyKq3x9Vc5VvogXaxLbWBEiCZrmM2MnZijNgMbUzg Iea4ocXFpda9k2PF1Tx+fTp9WH9bg7NCGigrBr2/PtV/+2U54XUkQ8MBDWO1ABdY LxP6Y6MlpGglnD9nC+3s4qqnaM3Z -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:56 2025 by rpki-client