$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa File: 53AA1B3C1B7511F0A0944466C4F9AE02.roa (raw, json) Hash identifier: ijBbRjeVWExuijN3HD7n5NhL1ti6uEuQY3tDbY0r/n4= Subject key identifier: 33:B0:CB:D4:C0:6D:62:B0:BB:EA:E5:F5:D6:67:27:FF:BA:D8:A7:47 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A5E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa Signing time: Thu 17 Apr 2025 10:18:38 +0000 ROA not before: Thu 17 Apr 2025 10:18:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153713 IP address blocks: 163.223.152.0/23 maxlen: 23 2001:df5:43c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19038 (0x4a5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 17 10:18:38 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6800d57d-d2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:9d:03:54:47:24:50:c0:43:f5:bf:66:fb: c5:9b:56:90:dd:a3:b3:c9:6e:2c:16:f3:5a:ad:f0: 39:56:d5:e1:e1:09:91:3e:91:bf:ff:e8:83:76:e1: 16:1f:91:cb:cf:6a:7f:6f:23:c8:71:96:91:bf:11: 6d:d4:41:b6:c4:4a:b8:67:27:1a:27:e8:1b:37:08: 15:a3:dc:04:17:79:0b:bc:33:25:93:c6:5b:52:d8: e0:f5:6b:a9:cf:5c:68:b1:b4:df:ee:ce:5d:94:6b: 32:e9:c2:9f:ce:76:ed:ab:82:2e:02:da:87:e0:ea: 9f:91:1c:e2:f2:a2:f7:1b:f0:a4:6b:48:37:d4:95: cd:c6:e3:5d:25:2a:9d:3c:25:66:7f:3e:53:35:4f: 35:6b:6a:bf:90:ca:69:9a:9d:d9:60:58:ab:1a:6d: c4:72:8d:ea:6a:97:52:6b:79:5b:32:51:a6:19:0c: 8c:ad:08:99:59:9d:cd:0b:04:6a:74:30:1c:13:1b: ef:54:8f:54:34:0b:80:bd:f7:c9:fe:d5:b8:f0:b1: 29:a1:a2:df:d1:48:47:f7:21:e4:0f:2c:30:0a:61: 82:88:48:d3:23:f4:d3:f4:9c:59:0c:9a:cc:9c:43: 59:4c:f7:5e:12:7e:63:0b:ba:6e:be:9f:0f:43:7b: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:CB:D4:C0:6D:62:B0:BB:EA:E5:F5:D6:67:27:FF:BA:D8:A7:47 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.152.0/23 IPv6: 2001:df5:43c0::/48 Signature Algorithm: sha256WithRSAEncryption 4f:ce:10:00:7d:88:ad:f9:d8:0f:d3:c6:f5:2a:ff:c4:d5:8d: d7:60:12:87:3b:73:fc:d9:65:aa:af:75:c6:6b:a2:5e:25:5d: ce:ff:fa:1c:da:07:dc:85:84:9c:96:de:56:3e:9c:2f:72:a9: bf:b4:5b:e7:ac:c5:df:60:87:03:22:2a:09:50:e9:e8:21:28: 73:6a:d2:5e:91:df:77:06:e5:3e:da:4f:01:52:b9:5b:7b:0f: a8:c8:ac:ad:dc:4e:b8:60:03:f1:09:92:69:a3:ae:94:6d:8f: 74:89:39:7d:2a:df:05:d7:74:e2:3b:6d:a6:e7:a5:f5:88:44: 61:a6:23:c5:db:70:76:32:0b:b1:84:63:53:a3:6b:9d:8e:9a: 63:eb:dd:e1:1b:02:17:7b:c5:b1:dc:50:b1:aa:81:57:af:b8: 83:0c:12:2c:7b:e5:f7:9d:8c:c5:c0:46:bb:09:91:66:35:88: 41:14:e8:60:10:40:1c:22:08:bc:25:e5:63:55:80:3a:58:44: 8e:8b:c9:96:b9:47:c9:26:c8:59:48:85:6a:55:b3:81:62:a5: d6:81:42:5e:c6:7b:7c:03:67:4e:ff:9c:53:b9:fb:cd:3a:58: 47:f1:b7:8d:c3:63:8e:40:0a:d8:52:6c:c9:6c:11:68:11:63: 04:a4:c2:88 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICSl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNDE3MTAxODM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwZDU3ZC1kMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2edA1RHJFDAQ/W/ZvvFm1aQ3aOzyW4sFvNarfA5VtXh4QmRPpG//+iDduEW H5HLz2p/byPIcZaRvxFt1EG2xEq4ZycaJ+gbNwgVo9wEF3kLvDMlk8ZbUtjg9Wup z1xosbTf7s5dlGsy6cKfznbtq4IuAtqH4OqfkRzi8qL3G/Cka0g31JXNxuNdJSqd PCVmfz5TNU81a2q/kMppmp3ZYFirGm3Eco3qapdSa3lbMlGmGQyMrQiZWZ3NCwRq dDAcExvvVI9UNAuAvffJ/tW48LEpoaLf0UhH9yHkDywwCmGCiEjTI/TT9JxZDJrM nENZTPdeEn5jC7puvp8PQ3vN3QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDOwy9TA bWKwu+rl9dZnJ/+62KdHMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTNBQTFCM0Mx Qjc1MTFGMEEwOTQ0NDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAGj35gwDwQCAAIwCQMHACABDfVDwDANBgkqhkiG9w0BAQsF AAOCAQEAT84QAH2IrfnYD9PG9Sr/xNWN12AShztz/Nllqq91xmuiXiVdzv/6HNoH 3IWEnJbeVj6cL3Kpv7Rb56zF32CHAyIqCVDp6CEoc2rSXpHfdwblPtpPAVK5W3sP qMisrdxOuGAD8QmSaaOulG2PdIk5fSrfBdd04jttpuel9YhEYaYjxdtwdjILsYRj U6NrnY6aY+vd4RsCF3vFsdxQsaqBV6+4gwwSLHvl952MxcBGuwmRZjWIQRToYBBA HCIIvCXlY1WAOlhEjovJlrlHySbIWUiFalWzgWKl1oFCXsZ7fANnTv+cU7n7zTpY R/G3jcNjjkAK2FJsyWwRaBFjBKTCiA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:46 2025 by rpki-client