$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa File: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (raw, json) Hash identifier: nS3x5Wrf6OGlupRs4tpRKGZuj5/u2uLXlydcgcq1K8s= Subject key identifier: C5:B4:3A:BB:C3:3B:01:DD:F2:50:F9:2A:37:69:58:7C:CF:58:91:60 Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 5E Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa Signing time: Wed 30 Jul 2025 03:58:45 +0000 ROA not before: Wed 30 Jul 2025 03:58:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 163.61.116.0/24 maxlen: 24 2001:df5:14c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: Jul 30 03:58:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68899875-f1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:a1:ac:e6:b5:a2:0d:d8:da:cf:c7:0a:e9: 47:92:0a:4d:75:c3:d9:7f:7c:16:06:b8:41:95:d6: 5b:22:70:89:57:ae:c7:fd:b4:4d:08:75:aa:1a:4b: 19:c2:90:5a:58:19:30:2f:48:84:79:9e:a2:d3:d5: b9:e7:f8:53:3f:39:3a:ce:5c:1b:f7:34:f8:46:a5: db:f3:f9:67:71:24:0c:d3:49:71:1e:b8:7d:45:9b: 7a:78:06:ac:2e:0c:7b:a8:a3:0d:85:fa:05:6b:08: fe:b7:46:e7:0d:92:53:6c:a1:94:6a:62:d3:f6:18: 6b:94:54:ea:3a:ba:3a:fa:ba:16:40:1d:6d:3b:37: 42:e7:bd:d4:bb:9b:4e:06:a1:4c:54:6b:59:95:9a: 68:20:fd:c2:13:21:be:11:b8:b2:35:cb:13:30:fb: cb:22:60:05:f6:4b:2e:6f:77:e5:18:45:8f:8e:e8: 12:57:b7:63:5d:d9:b0:68:27:94:44:e4:a8:ae:9a: 94:8c:86:35:89:48:52:17:76:c8:0a:97:ea:e9:41: 09:74:5a:a1:78:97:18:af:eb:64:5a:3e:97:76:c4: 4a:be:ab:20:77:70:f3:c5:78:56:5d:7e:04:90:b7: 0d:49:c5:7a:4b:c6:db:78:7c:e1:5f:ab:56:d2:a2: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B4:3A:BB:C3:3B:01:DD:F2:50:F9:2A:37:69:58:7C:CF:58:91:60 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/0A34182CE9FC11EF9D3DE972C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.116.0/24 IPv6: 2001:df5:14c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:45:76:04:6b:57:3c:f3:3b:56:47:cf:1c:c2:ad:75:1e:08: ae:dd:61:d7:54:f0:59:8d:bf:f3:e9:e7:7a:de:7d:5d:52:8d: bd:24:1a:d2:e3:9b:bc:5c:09:89:b5:3f:5b:d1:db:3a:b2:e3: 80:b3:87:50:66:82:35:9d:1c:28:2c:ae:12:dc:7b:2a:e2:39: 27:50:23:18:59:41:03:14:3a:39:cc:53:fb:c2:8f:d6:8f:b3: 6f:2f:12:db:a8:8a:a5:51:3c:39:b2:ba:ab:88:0b:5d:ac:7b: b6:16:69:8a:a8:59:5a:14:50:d3:fb:53:63:f2:f6:4f:f9:c8: 54:5f:4d:99:48:20:c5:75:09:85:c5:a1:01:64:8b:07:ac:33: c8:68:1b:fd:bf:b4:5d:0b:4a:da:98:14:87:b0:bc:a1:aa:ab: a9:4a:01:ad:85:67:b6:dc:b8:5a:0c:90:21:48:08:8a:97:03: 9b:aa:70:db:68:b0:c1:b1:24:fb:1a:7f:ce:6d:5e:eb:f2:2e: 98:04:5a:16:6a:23:6e:8f:d9:68:de:1e:00:39:5d:44:91:b8: 63:11:37:39:32:36:b1:ca:92:e5:ce:4c:4d:c7:6f:2d:d8:3d: f0:04:57:e8:ea:5d:81:a1:e5:8e:19:c8:e5:54:dd:1d:92:c1: 4b:13:1c:ca -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTA3MzAwMzU4NDVaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODk5ODc1LWYxZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcl6Gs5rWiDdjaz8cK6UeSCk11w9l/fBYGuEGV1lsicIlXrsf9tE0IdaoaSxnC kFpYGTAvSIR5nqLT1bnn+FM/OTrOXBv3NPhGpdvz+WdxJAzTSXEeuH1Fm3p4Bqwu DHuoow2F+gVrCP63RucNklNsoZRqYtP2GGuUVOo6ujr6uhZAHW07N0LnvdS7m04G oUxUa1mVmmgg/cITIb4RuLI1yxMw+8siYAX2Sy5vd+UYRY+O6BJXt2Nd2bBoJ5RE 5KiumpSMhjWJSFIXdsgKl+rpQQl0WqF4lxiv62RaPpd2xEq+qyB3cPPFeFZdfgSQ tw1JxXpLxtt4fOFfq1bSotPzAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUxbQ6u8M7 Ad3yUPkqN2lYfM9YkWAwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi8wQTM0MTgyQ0U5 RkMxMUVGOUQzREU5NzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAKM9dDAPBAIAAjAJAwcAIAEN9RTAMA0GCSqGSIb3DQEBCwUA A4IBAQBHRXYEa1c88ztWR88cwq11Hgiu3WHXVPBZjb/z6ed63n1dUo29JBrS45u8 XAmJtT9b0ds6suOAs4dQZoI1nRwoLK4S3Hsq4jknUCMYWUEDFDo5zFP7wo/Wj7Nv LxLbqIqlUTw5srqriAtdrHu2FmmKqFlaFFDT+1Nj8vZP+chUX02ZSCDFdQmFxaEB ZIsHrDPIaBv9v7RdC0ramBSHsLyhqqupSgGthWe23LhaDJAhSAiKlwObqnDbaLDB sST7Gn/ObV7r8i6YBFoWaiNuj9lo3h4AOV1EkbhjETc5MjaxypLlzkxNx28t2D3w BFfo6l2BoeWOGcjlVN0dksFLExzK -----END CERTIFICATE-----Generated at Mon Aug 11 04:31:20 2025 by rpki-client