$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa File: 60FCDED2F48F11E89651151FC4F9AE02.roa (raw, json) Hash identifier: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM= Subject key identifier: 15:21:9E:F7:CF:32:E3:DA:04:C6:68:E4:3A:64:82:D8:CE:74:2D:8C Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 11B3 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa Signing time: Thu 10 Apr 2025 17:25:45 +0000 ROA not before: Thu 10 Apr 2025 17:25:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135273 IP address blocks: 167.179.48.0/20 maxlen: 20 167.179.48.0/24 maxlen: 24 167.179.49.0/24 maxlen: 24 167.179.50.0/24 maxlen: 24 167.179.51.0/24 maxlen: 24 167.179.52.0/24 maxlen: 24 167.179.53.0/24 maxlen: 24 167.179.54.0/24 maxlen: 24 167.179.55.0/24 maxlen: 24 167.179.56.0/21 maxlen: 21 167.179.56.0/24 maxlen: 24 167.179.57.0/24 maxlen: 24 167.179.58.0/24 maxlen: 24 167.179.59.0/24 maxlen: 24 167.179.60.0/24 maxlen: 24 167.179.61.0/24 maxlen: 24 167.179.62.0/24 maxlen: 24 167.179.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4531 (0x11b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Apr 10 17:25:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f7ff19-7bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:b6:84:20:51:0a:b6:da:4d:64:0c:96:22: 42:1a:7d:e8:14:65:c1:6b:22:0e:12:79:36:d7:30: b9:1c:b5:c1:4a:85:9f:31:a4:cb:e7:fb:70:18:bb: 35:b2:41:2a:34:40:b6:7e:d6:e4:ae:99:81:3a:49: e5:64:72:5a:bf:e3:b4:08:9e:cc:f0:93:de:db:bc: a6:a0:eb:d0:ca:02:dd:e4:99:97:d8:08:ee:9f:10: 69:f5:7d:36:e0:8f:e7:b1:17:08:ca:80:dd:43:0a: 49:a6:39:8e:3b:de:87:65:3f:eb:4b:f7:f0:7c:2d: 01:48:1d:fc:4d:18:aa:21:54:a2:a9:b3:b8:0c:3f: 89:d8:9e:07:24:43:e2:a0:6b:14:ce:b5:f5:ab:91: 90:57:7b:60:aa:1c:e2:bd:82:16:bc:cb:fc:63:a1: 56:b3:15:0b:fa:5f:c8:a2:be:f6:9c:32:31:60:40: 96:88:a1:b4:4e:d6:83:f2:d4:07:c3:2e:6b:e9:8c: f0:a6:53:d4:64:43:26:3b:d2:bd:2a:80:44:f5:bc: d4:94:37:4a:79:05:26:e9:f0:31:ef:93:08:d6:a8: d3:18:7e:d1:fb:2a:55:db:f3:e0:aa:0c:3c:5f:e2: ca:9d:d3:15:07:e4:c6:92:2c:23:3e:98:b1:9b:1e: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:21:9E:F7:CF:32:E3:DA:04:C6:68:E4:3A:64:82:D8:CE:74:2D:8C X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:5f:de:aa:40:d4:ab:4c:b2:35:9e:e0:14:91:eb:9c:3f:3c: 5d:df:ac:ca:44:08:30:68:3e:ca:ad:57:6b:0a:ca:ab:44:8d: 79:71:4e:17:7d:20:53:da:a0:f9:b7:03:b0:8e:20:ec:2f:77: 70:e5:1d:fe:bf:88:f6:45:00:0d:e7:eb:6b:4a:1f:e1:2f:29: ea:cd:8a:95:54:ab:c5:6a:30:6c:cc:5f:f7:73:a2:8b:46:e9: 14:97:e9:b2:17:59:61:fb:1f:2a:82:44:c0:77:57:ca:36:0c: d4:ae:ac:08:76:cd:d7:6d:63:cc:0f:eb:20:d6:6d:7e:65:95: 4d:9b:87:ba:f2:b3:2e:e4:a4:07:41:47:94:d9:b2:97:c7:9c: 44:1c:f0:a6:b3:e9:64:f2:79:9e:ab:b9:36:9b:43:04:8e:a4: 41:7a:08:3d:2f:5b:f6:55:b9:af:24:73:8d:6a:97:82:77:56: 1e:7a:41:c0:36:33:87:90:f0:84:87:c4:9d:bf:1e:0c:41:51: ef:62:56:c3:69:6b:bc:5b:d6:f4:63:f2:83:6c:3f:c0:a2:15: 59:06:7b:a7:e7:9a:b9:6f:2c:9c:93:3d:8f:8d:f8:be:26:99: 91:d2:48:b6:08:b8:a0:e2:97:34:93:d3:53:7a:1c:17:5b:e9: cb:f3:2a:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjUwNDEwMTcyNTQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3ZmYxOS03YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gy2hCBRCrbaTWQMliJCGn3oFGXBayIOEnk21zC5HLXBSoWfMaTL5/twGLs1 skEqNEC2ftbkrpmBOknlZHJav+O0CJ7M8JPe27ymoOvQygLd5JmX2AjunxBp9X02 4I/nsRcIyoDdQwpJpjmOO96HZT/rS/fwfC0BSB38TRiqIVSiqbO4DD+J2J4HJEPi oGsUzrX1q5GQV3tgqhzivYIWvMv8Y6FWsxUL+l/Ior72nDIxYECWiKG0TtaD8tQH wy5r6YzwplPUZEMmO9K9KoBE9bzUlDdKeQUm6fAx75MI1qjTGH7R+ypV2/Pgqgw8 X+LKndMVB+TGkiwjPpixmx7X1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBUhnvfP MuPaBMZo5DpkgtjOdC2MMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY2NDYvQ0VDRThDOUFGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvNjBGQ0RFRDJG NDhGMTFFODk2NTExNTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASnszAwDQYJKoZIhvcNAQELBQADggEBAD9f3qpA1KtMsjWe 4BSR65w/PF3frMpECDBoPsqtV2sKyqtEjXlxThd9IFPaoPm3A7COIOwvd3DlHf6/ iPZFAA3n62tKH+EvKerNipVUq8VqMGzMX/dzootG6RSX6bIXWWH7HyqCRMB3V8o2 DNSurAh2zddtY8wP6yDWbX5llU2bh7rysy7kpAdBR5TZspfHnEQc8Kaz6WTyeZ6r uTabQwSOpEF6CD0vW/ZVua8kc41ql4J3Vh56QcA2M4eQ8ISHxJ2/HgxBUe9iVsNp a7xb1vRj8oNsP8CiFVkGe6fnmrlvLJyTPY+N+L4mmZHSSLYIuKDilzST01N6HBdb 6cvzKsY= -----END CERTIFICATE-----Generated at Thu Nov 6 02:40:43 2025 by rpki-client