$ rpki-client -vvf rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/ACD444282EC911EB99EC263DC4F9AE02.roa File: ACD444282EC911EB99EC263DC4F9AE02.roa (raw, json) Hash identifier: DLKvz3rwnGGBIag3RK7ssCkmYQ1hx8lImaGotS18Gqc= Subject key identifier: 36:42:81:03:15:FF:AC:D7:76:BE:E8:7B:7D:03:EE:87:37:7F:E1:7A Certificate issuer: /CN=A919A5B5/serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799 Certificate serial: 077F Authority key identifier: 21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/ACD444282EC911EB99EC263DC4F9AE02.roa Signing time: Mon 24 Feb 2025 22:29:51 +0000 ROA not before: Mon 24 Feb 2025 22:29:51 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45410 IP address blocks: 163.61.92.0/23 maxlen: 24 202.168.64.0/20 maxlen: 24 2401:b780::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A5B5, serialNumber=216E1430E5C30E0D23A75D070DB7898B90849799 Validity Not Before: Feb 24 22:29:51 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bcf2df-402a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:c6:6e:0e:a6:c1:15:e4:87:2c:5c:51:06: 08:6a:ee:05:3c:ec:3b:aa:2e:02:4c:e8:39:39:25: 79:75:42:a4:f1:57:88:35:8f:40:ce:b8:4e:cb:d5: 97:c0:68:f6:ad:82:6d:7e:14:09:9b:6a:cc:17:7e: 16:2c:e3:d1:05:fc:2f:cd:f1:0f:93:35:48:50:c7: 67:02:bb:43:ed:72:62:72:c0:57:90:e0:2d:fd:3b: 79:63:bd:00:59:ad:c0:a8:06:db:31:b1:a6:08:f9: 37:c9:ad:ee:49:21:91:9a:ce:44:f0:05:b4:89:11: 4f:4c:ee:0c:f7:1f:7d:97:b1:e7:86:da:43:58:f4: 0e:c8:01:2c:54:c1:1a:fd:ce:c7:b5:42:4e:26:9b: ab:44:2d:10:3f:fd:6e:7d:9a:f0:ff:62:46:8a:0f: 6c:c0:5e:1f:2e:99:60:b7:a5:67:da:0f:e6:6c:60: 95:bc:b2:7a:3f:44:a7:ee:a5:ec:9d:95:60:2c:12: f4:fb:73:e8:51:28:88:94:0c:e5:22:5e:81:2d:5c: 5e:f4:ba:13:66:d6:20:07:54:c0:cf:3e:0c:ed:8a: 01:1a:8f:1e:ea:38:89:b4:20:22:b3:e0:d2:10:45: 5e:f0:34:b8:3f:9f:7f:1b:bf:df:34:c9:7d:e9:56: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:81:03:15:FF:AC:D7:76:BE:E8:7B:7D:03:EE:87:37:7F:E1:7A X509v3 Authority Key Identifier: keyid:21:6E:14:30:E5:C3:0E:0D:23:A7:5D:07:0D:B7:89:8B:90:84:97:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/IW4UMOXDDg0jp10HDbeJi5CEl5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IW4UMOXDDg0jp10HDbeJi5CEl5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A5B5/583CC4D403BE11EBA649220BC4F9AE02/ACD444282EC911EB99EC263DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.92.0/23 202.168.64.0/20 IPv6: 2401:b780::/32 Signature Algorithm: sha256WithRSAEncryption 8c:fc:38:4a:6c:d1:fe:b8:26:6e:db:ad:56:61:55:78:6c:c1: dd:83:05:39:c3:0a:74:cc:0f:45:55:96:6a:b8:e6:fa:2c:27: 2f:a8:dc:83:49:6b:98:fe:e3:6b:20:6a:31:8c:6d:55:af:f2: 94:1d:63:19:f4:a8:de:d3:22:f4:83:bb:51:28:fd:e7:6d:65: 95:6b:af:3f:b1:bf:aa:03:f3:fe:36:2e:ec:3c:4b:a0:38:3b: 24:7e:06:2f:5e:e9:07:42:db:e5:23:ab:89:95:1b:1a:cf:6a: 1a:4e:77:fd:ab:13:91:d4:d7:84:e7:37:d4:77:6a:bf:7b:8c: f1:3a:2f:fe:45:14:9d:e8:f3:59:a2:c3:22:ab:26:ac:68:5e: e2:fc:15:b2:48:48:2f:a2:6f:95:60:20:ec:d9:62:2b:ec:d7: 0b:73:cb:6d:43:70:e0:a3:9e:2d:78:a3:01:a1:02:0a:78:58: 13:fa:ed:ec:07:95:d2:d4:b0:28:db:72:a1:86:2c:21:8c:85: ea:4d:cb:39:1e:5f:a4:3f:63:0e:44:7d:16:b8:2e:a2:c7:46: 04:98:9e:6a:59:a3:63:49:8b:ba:54:00:fe:21:36:82:4e:f8: db:98:63:ee:e1:0d:bc:98:91:10:bd:f7:be:77:dd:95:41:cf: eb:22:46:d4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE1QjUxMTAvBgNVBAUTKDIxNkUxNDMwRTVDMzBFMEQyM0E3NUQwNzBEQjc4OThC OTA4NDk3OTkwHhcNMjUwMjI0MjIyOTUxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JjZjJkZi00MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gfGbg6mwRXkhyxcUQYIau4FPOw7qi4CTOg5OSV5dUKk8VeINY9AzrhOy9WX wGj2rYJtfhQJm2rMF34WLOPRBfwvzfEPkzVIUMdnArtD7XJicsBXkOAt/Tt5Y70A Wa3AqAbbMbGmCPk3ya3uSSGRms5E8AW0iRFPTO4M9x99l7HnhtpDWPQOyAEsVMEa /c7HtUJOJpurRC0QP/1ufZrw/2JGig9swF4fLplgt6Vn2g/mbGCVvLJ6P0Sn7qXs nZVgLBL0+3PoUSiIlAzlIl6BLVxe9LoTZtYgB1TAzz4M7YoBGo8e6jiJtCAis+DS EEVe8DS4P59/G7/fNMl96VaaxwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDZCgQMV /6zXdr7oe30D7oc3f+F6MB8GA1UdIwQYMBaAFCFuFDDlww4NI6ddBw23iYuQhJeZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTVCNS81ODNDQzRENDAz QkUxMUVCQTY0OTIyMEJDNEY5QUUwMi9JVzRVTU9YRERnMGpwMTBIRGJlSmk1Q0Vs NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXNFVNT1hERGcwanAxMEhEYmVKaTVDRWw1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE1QjUvNTgzQ0M0RDQwM0JFMTFFQkE2NDkyMjBCQzRGOUFFMDIvQUNENDQ0Mjgy RUM5MTFFQjk5RUMyNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAGjPVwDBATKqEAwDQQCAAIwBwMFACQBt4AwDQYJKoZIhvcN AQELBQADggEBAIz8OEps0f64Jm7brVZhVXhswd2DBTnDCnTMD0VVlmq45vosJy+o 3INJa5j+42sgajGMbVWv8pQdYxn0qN7TIvSDu1Eo/edtZZVrrz+xv6oD8/42Luw8 S6A4OyR+Bi9e6QdC2+Ujq4mVGxrPahpOd/2rE5HU14TnN9R3ar97jPE6L/5FFJ3o 81miwyKrJqxoXuL8FbJISC+ib5VgIOzZYivs1wtzy21DcOCjni14owGhAgp4WBP6 7ewHldLUsCjbcqGGLCGMhepNyzkeX6Q/Yw5EfRa4LqLHRgSYnmpZo2NJi7pUAP4h NoJO+NuYY+7hDbyYkRC997533ZVBz+siRtQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:09 2025 by rpki-client