$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa File: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (raw, json) Hash identifier: gNUxEstcyYM8bAYzOWKSq0siVBhwvrTxTLZTCsVvFik= Subject key identifier: 42:6B:03:7C:F8:04:A1:CC:64:95:3F:9B:90:91:33:B9:BB:40:F2:44 Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Certificate serial: 0A Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa Signing time: Tue 11 Mar 2025 10:17:17 +0000 ROA not before: Tue 11 Mar 2025 10:17:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136969 IP address blocks: 163.223.4.0/24 maxlen: 24 163.223.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110 Validity Not Before: Mar 11 10:17:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d00dac-f965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:2c:14:f3:8b:77:24:d9:ac:5c:82:59:b4: 27:c4:4a:60:65:01:18:79:d0:f8:2e:e8:b9:ab:ae: 72:98:67:d3:dd:cc:10:51:48:78:d5:0b:53:0a:2f: 73:fa:2e:10:06:9f:9f:15:c8:1c:d6:fd:76:b5:f6: 73:a8:c6:c3:69:04:f3:1e:0f:4d:40:1b:65:6e:22: 94:c3:56:28:aa:1a:27:e4:bf:e8:0c:0c:e9:3f:19: 59:d7:34:af:d8:29:ba:0e:5b:6e:53:0f:74:b6:1f: d1:39:2b:72:53:54:a3:e0:3b:5f:85:23:05:91:d3: d4:d2:30:a4:3f:07:69:83:19:af:83:19:ad:c3:d7: 92:ba:b1:6e:d8:e9:18:a4:3b:f6:43:0d:89:04:5a: c4:cf:70:73:9f:7c:4f:48:b2:df:58:ff:e5:cb:8e: f9:50:e5:30:98:98:ec:d1:f3:38:22:93:6c:b4:d4: ef:b7:cc:6a:99:fa:09:85:01:44:e3:60:d2:80:a5: 69:77:63:d2:92:94:c5:67:0b:00:15:1b:8e:b1:05: 06:6b:55:56:05:4f:ec:34:86:3d:06:2e:98:9b:fc: 85:87:02:78:d3:00:b3:2e:82:c4:70:9c:bb:54:46: e8:58:75:53:c7:06:0e:f5:16:f1:09:09:1a:56:92: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:03:7C:F8:04:A1:CC:64:95:3F:9B:90:91:33:B9:BB:40:F2:44 X509v3 Authority Key Identifier: keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/8A5CF8F0FB7411EF83C11685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.4.0/23 Signature Algorithm: sha256WithRSAEncryption 24:a6:fa:8b:4b:39:27:dc:2c:d4:1a:3b:74:fa:c6:be:b5:e6: 52:e8:9c:a7:46:02:22:5c:28:80:e4:c7:1e:bf:42:5e:9b:2d: 30:56:3e:42:02:08:a2:b6:d9:e9:88:f7:a6:39:4f:da:fa:f7: 37:69:98:6e:80:84:ce:20:cb:47:10:ef:98:66:81:20:75:ba: 33:94:4a:79:b7:30:77:63:57:06:e8:ca:7a:f4:0e:49:0e:a9: 3e:8c:c5:4f:e0:71:66:8b:47:f8:ff:0c:8c:16:00:ee:5c:62: 41:cc:7e:8f:89:d8:ab:2f:98:2b:f1:18:12:72:57:fb:a9:7a: 47:5f:14:5c:74:e8:59:33:f2:de:fc:20:11:0c:d1:b7:56:92: d1:a2:1a:83:ac:e7:1d:ff:38:a2:f5:65:da:ed:96:05:ee:fa: e8:ce:d4:9a:72:4d:a6:87:72:ad:8e:f6:f7:a1:57:c8:d0:30: 1f:26:05:98:c0:bb:7e:40:90:97:88:a9:b0:75:2f:93:00:be: 11:c2:8c:a5:ae:64:45:56:b9:36:d5:66:c7:65:da:87:48:ed: 83:7c:d1:66:2e:40:06:44:10:4a:80:df:2d:81:5f:e6:04:15: fe:7a:9c:99:3b:f1:cf:a5:87:59:61:ca:91:9c:10:45:5a:ce: b3:a4:46:04 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkUxRDExMC8GA1UEBRMoMEFBNkU0ODMyODQyNUUxMjRDNTYxQzJBQzE4N0M4QTE5 NjI0NzExMDAeFw0yNTAzMTExMDE3MTdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDAwZGFjLWY5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDihiwU84t3JNmsXIJZtCfESmBlARh50Pgu6LmrrnKYZ9PdzBBRSHjVC1MKL3P6 LhAGn58VyBzW/Xa19nOoxsNpBPMeD01AG2VuIpTDViiqGifkv+gMDOk/GVnXNK/Y KboOW25TD3S2H9E5K3JTVKPgO1+FIwWR09TSMKQ/B2mDGa+DGa3D15K6sW7Y6Rik O/ZDDYkEWsTPcHOffE9Ist9Y/+XLjvlQ5TCYmOzR8zgik2y01O+3zGqZ+gmFAUTj YNKApWl3Y9KSlMVnCwAVG46xBQZrVVYFT+w0hj0GLpib/IWHAnjTALMugsRwnLtU RuhYdVPHBg71FvEJCRpWkrzVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQmsDfPgE ocxklT+bkJEzubtA8kQwHwYDVR0jBBgwFoAUCqbkgyhCXhJMVhwqwYfIoZYkcRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTFEL0ZFODgzNUJDRjlG MDExRUZCNzdBOEM2RUM0RjlBRTAyL0NxYmtneWhDWGhKTVZod3F3WWZJb1pZa2NS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Fia2d5aENYaEpNVmh3cXdZZklvWllrY1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkUxRC9GRTg4MzVCQ0Y5RjAxMUVGQjc3QThDNkVDNEY5QUUwMi84QTVDRjhGMEZC NzQxMUVGODNDMTE2ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfBDANBgkqhkiG9w0BAQsFAAOCAQEAJKb6i0s5J9ws1Bo7 dPrGvrXmUuicp0YCIlwogOTHHr9CXpstMFY+QgIIorbZ6Yj3pjlP2vr3N2mYboCE ziDLRxDvmGaBIHW6M5RKebcwd2NXBujKevQOSQ6pPozFT+BxZotH+P8MjBYA7lxi Qcx+j4nYqy+YK/EYEnJX+6l6R18UXHToWTPy3vwgEQzRt1aS0aIag6znHf84ovVl 2u2WBe766M7UmnJNpodyrY7296FXyNAwHyYFmMC7fkCQl4ipsHUvkwC+EcKMpa5k RVa5NtVmx2Xah0jtg3zRZi5ABkQQSoDfLYFf5gQV/nqcmTvxz6WHWWHKkZwQRVrO s6RGBA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:51 2025 by rpki-client