$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa File: 63F5D1BE104B11F0B006D834C4F9AE02.roa (raw, json) Hash identifier: PF1O7BgXFPa+lW1custObXbz60gR5gcVPVCO161B9MA= Subject key identifier: A8:13:29:F5:75:D3:68:61:7B:C3:77:29:C7:EE:05:EF:2B:4A:CB:9C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AD7B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa Signing time: Thu 03 Apr 2025 05:20:43 +0000 ROA not before: Thu 03 Apr 2025 05:20:43 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133976 IP address blocks: 163.223.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44411 (0xad7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Apr 3 05:20:43 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67ee1aab-da7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:66:da:a1:76:51:a5:03:e0:e6:8e:ba:42: 8b:96:43:fb:ed:91:aa:ec:41:78:a3:64:5f:50:bd: 38:cf:95:36:d0:e3:83:c1:53:da:5f:f8:20:e8:27: 8a:61:80:47:a1:bf:ac:e8:8a:f6:60:05:1f:10:91: 01:94:42:fa:b3:67:8d:3e:ec:2f:04:79:07:4d:de: ef:5e:44:37:ed:18:c8:d3:72:34:ca:95:a0:91:a9: 4f:1b:93:42:e3:ea:f7:e1:38:6a:c4:49:2c:5c:b9: 40:8d:8f:11:e1:fc:bc:1c:a7:4e:84:58:7f:4a:2e: 92:2a:bb:80:fd:4c:aa:e1:39:ad:75:c1:7d:2c:30: 91:d2:31:34:c7:28:65:47:f1:cf:ed:6c:84:d1:97: ec:18:f0:e5:49:0c:db:d2:2a:c1:5a:59:df:ab:84: d9:57:eb:79:d1:21:76:41:7f:81:ab:5b:db:01:81: 4d:58:61:86:06:75:93:95:15:bb:0e:94:8b:2a:75: 6d:fa:1f:18:ab:ff:73:0b:c2:c4:49:99:86:b2:38: 9b:10:f8:63:79:83:a7:29:f7:91:78:00:cb:42:55: be:79:03:0f:6d:3c:cf:d0:6b:32:cc:4b:27:01:f7: 65:0e:65:2a:52:48:ed:ef:49:94:16:9d:f3:9b:eb: e5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:29:F5:75:D3:68:61:7B:C3:77:29:C7:EE:05:EF:2B:4A:CB:9C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.102.0/23 Signature Algorithm: sha256WithRSAEncryption bb:70:f7:2d:a4:86:c6:74:d2:08:af:9a:f9:45:83:b3:2a:c8: 4e:d8:cc:d4:72:21:35:0d:3e:41:48:fd:81:3d:18:51:39:fe: 3f:b4:42:69:90:fe:2f:6f:0b:bb:54:a8:5c:90:9a:ba:a8:29: d5:3a:16:6c:89:ef:7a:36:cd:20:96:5e:46:aa:0b:ea:1c:2a: 61:cc:97:c8:ce:cd:04:9d:b0:e7:6b:71:fd:ec:8a:8a:9b:ae: 0c:37:7e:79:01:0b:13:27:52:a6:45:da:66:7e:58:9c:c3:70: 76:34:4c:0f:ca:a3:d4:85:70:d6:13:15:55:53:d3:86:ad:7e: 80:ae:4b:fa:94:fb:a1:5b:e6:2e:59:11:1e:78:3b:a4:03:82: 81:46:2c:96:fd:d2:76:32:cc:e8:8c:65:ae:cd:07:68:41:31: 4c:70:fa:4c:b5:05:33:06:e2:8a:85:f3:b0:28:cb:5c:4f:84: 5f:0c:b2:c2:f1:c8:16:94:51:e5:14:17:66:b1:48:a7:6c:2e: 0d:13:18:2f:fe:84:c6:3a:ef:5c:dd:4d:fe:db:29:38:0a:12: ba:70:96:dd:be:e5:1d:a2:8d:98:0c:7e:96:9d:64:07:53:5a: ef:29:13:44:61:ea:d7:8b:76:6c:c0:41:29:77:ba:c6:4b:e2: 4b:59:b6:78 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAK17MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwMzA1MjA0M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlZTFhYWItZGE3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAoZtqhdlGlA+DmjrpCi5ZD++2RquxBeKNkX1C9OM+VNtDjg8FT2l/4IOgn imGAR6G/rOiK9mAFHxCRAZRC+rNnjT7sLwR5B03e715EN+0YyNNyNMqVoJGpTxuT QuPq9+E4asRJLFy5QI2PEeH8vBynToRYf0oukiq7gP1MquE5rXXBfSwwkdIxNMco ZUfxz+1shNGX7Bjw5UkM29IqwVpZ36uE2VfredEhdkF/gatb2wGBTVhhhgZ1k5UV uw6Uiyp1bfofGKv/cwvCxEmZhrI4mxD4Y3mDpyn3kXgAy0JVvnkDD208z9BrMsxL JwH3ZQ5lKlJI7e9JlBad85vr5SUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSoEyn1 ddNoYXvDdynH7gXvK0rLnDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzRjVEMUJF MTA0QjExRjBCMDA2RDgzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBo99mMA0GCSqGSIb3DQEBCwUAA4IBAQC7cPctpIbGdNII r5r5RYOzKshO2MzUciE1DT5BSP2BPRhROf4/tEJpkP4vbwu7VKhckJq6qCnVOhZs ie96Ns0gll5GqgvqHCphzJfIzs0EnbDna3H97IqKm64MN355AQsTJ1KmRdpmflic w3B2NEwPyqPUhXDWExVVU9OGrX6Arkv6lPuhW+YuWREeeDukA4KBRiyW/dJ2Mszo jGWuzQdoQTFMcPpMtQUzBuKKhfOwKMtcT4RfDLLC8cgWlFHlFBdmsUinbC4NExgv /oTGOu9c3U3+2yk4ChK6cJbdvuUdoo2YDH6WnWQHU1rvKRNEYerXi3ZswEEpd7rG S+JLWbZ4 -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:48 2025 by rpki-client