$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/A7C7EF962A8911F09526D35BC4F9AE02.roa File: A7C7EF962A8911F09526D35BC4F9AE02.roa (raw, json) Hash identifier: q6DsrTnHuS/+1sVBywXv85oiJzaT3sKc0CSqiWHXn5c= Subject key identifier: 4B:47:BD:17:4D:EE:A0:B8:43:DE:B5:B3:71:CE:81:2B:54:1F:90:B1 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: 04 Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/A7C7EF962A8911F09526D35BC4F9AE02.roa Signing time: Wed 07 May 2025 05:33:18 +0000 ROA not before: Wed 07 May 2025 05:33:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153856 IP address blocks: 163.227.246.0/23 maxlen: 23 2001:df5:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: May 7 05:33:18 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681af09d-785c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:d8:cd:f2:a6:0b:e3:de:b8:35:00:43:d0: 5b:3e:6a:c5:57:8b:83:e6:64:4b:9a:ca:ad:c3:b2: c5:27:92:04:a4:7f:08:2a:6c:72:a4:e6:1c:07:35: f9:5b:58:32:9d:00:c9:f4:d1:c0:02:de:90:42:19: 89:12:16:a1:e6:51:7d:b7:29:16:49:d2:4c:9a:87: 6d:3a:32:f2:7b:97:9c:d1:9c:94:7b:db:1e:89:2b: 18:e7:2f:1b:83:01:68:9d:10:94:f5:b4:d2:ec:e2: 39:7a:20:e0:94:c8:cf:e8:1c:26:89:6e:9f:65:6f: aa:34:07:8e:69:12:63:db:5f:59:fc:95:6d:dd:57: de:d2:c6:b4:53:f7:90:91:df:96:e6:e3:1a:71:aa: 57:cf:75:08:ee:f9:d9:43:1e:13:25:5b:4e:66:a3: f9:26:80:6d:55:f4:87:8e:93:31:dd:96:9b:fa:28: 53:b6:33:48:55:e0:75:eb:4b:1c:05:fd:95:7c:51: 0b:24:12:a5:f4:9f:6d:c1:54:ca:19:60:5f:4f:49: e4:c3:0e:39:3b:8a:02:45:95:b2:c8:96:35:da:14: da:3f:8a:42:1b:10:81:70:36:3f:22:64:70:57:ec: 8f:4b:fe:fe:ee:d1:8a:70:6b:fc:29:e5:85:59:e5: 0b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:47:BD:17:4D:EE:A0:B8:43:DE:B5:B3:71:CE:81:2B:54:1F:90:B1 X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/A7C7EF962A8911F09526D35BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.246.0/23 IPv6: 2001:df5:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 5d:b1:2b:27:2e:b4:63:25:7e:a9:12:4f:80:51:ab:2d:5b:28: f0:05:f3:ee:2b:b9:90:f7:44:8a:8a:f4:af:aa:1a:c9:b0:5e: b4:03:43:08:4b:5b:2e:f7:65:79:d4:15:10:f2:12:32:45:b1: 4f:23:1b:63:60:d0:9c:8c:cc:94:14:e7:b7:1e:63:bf:a1:bb: fd:bf:a2:0f:7f:91:5d:e9:8e:cf:ea:e1:54:ff:cb:17:e7:cc: 2d:58:86:85:b3:03:9d:eb:c3:38:35:f3:03:17:cc:a2:f9:18: c1:d2:bb:07:97:55:cf:77:5a:88:30:65:ba:56:64:a7:e0:3b: 10:b1:b5:be:ee:24:24:14:0f:72:55:06:9b:9f:6a:f4:0b:81: 74:67:87:71:c6:c6:ed:82:2d:48:48:97:49:a5:05:01:24:b7: 07:61:95:e0:65:d6:2a:a2:86:d1:32:0d:1f:9c:c9:d7:ff:b0: c6:04:f0:44:1b:fb:d7:db:50:c4:4c:00:a5:66:7f:b7:78:c6: 8b:a1:02:96:2c:14:e1:1d:00:d8:40:35:e1:66:56:f0:23:71: d0:ba:26:b3:5f:6e:13:29:dd:93:8c:e0:08:8c:f1:a4:43:ce: f1:5d:cd:18:ae:6d:83:ce:55:34:e8:ba:92:a5:20:94:35:70: 14:5d:65:31 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzdBQTExMC8GA1UEBRMoNzVGRTM3QTgzRURBODAwQTYxMDI2MDg1ODdFREY0MDg5 RDgyNDBFMDAeFw0yNTA1MDcwNTMzMThaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWFmMDlkLTc4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5E9jN8qYL4964NQBD0Fs+asVXi4PmZEuayq3DssUnkgSkfwgqbHKk5hwHNflb WDKdAMn00cAC3pBCGYkSFqHmUX23KRZJ0kyah206MvJ7l5zRnJR72x6JKxjnLxuD AWidEJT1tNLs4jl6IOCUyM/oHCaJbp9lb6o0B45pEmPbX1n8lW3dV97SxrRT95CR 35bm4xpxqlfPdQju+dlDHhMlW05mo/kmgG1V9IeOkzHdlpv6KFO2M0hV4HXrSxwF /ZV8UQskEqX0n23BVMoZYF9PSeTDDjk7igJFlbLIljXaFNo/ikIbEIFwNj8iZHBX 7I9L/v7u0Ypwa/wp5YVZ5QtpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUS0e9F03u oLhD3rWzcc6BK1QfkLEwHwYDVR0jBBgwFoAUdf43qD7agAphAmCFh+30CJ2CQOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDN0FBL0QyMkVEQTM0MkE4 ODExRjBBMzBEOTE1OUM0RjlBRTAyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGY0M3FEN2FnQXBoQW1DRmgtMzBDSjJDUU9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzdBQS9EMjJFREEzNDJBODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9BN0M3RUY5NjJB ODkxMUYwOTUyNkQzNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPj9jAPBAIAAjAJAwcAIAEN9X7AMA0GCSqGSIb3DQEBCwUA A4IBAQBdsSsnLrRjJX6pEk+AUastWyjwBfPuK7mQ90SKivSvqhrJsF60A0MIS1su 92V51BUQ8hIyRbFPIxtjYNCcjMyUFOe3HmO/obv9v6IPf5Fd6Y7P6uFU/8sX58wt WIaFswOd68M4NfMDF8yi+RjB0rsHl1XPd1qIMGW6VmSn4DsQsbW+7iQkFA9yVQab n2r0C4F0Z4dxxsbtgi1ISJdJpQUBJLcHYZXgZdYqoobRMg0fnMnX/7DGBPBEG/vX 21DETAClZn+3eMaLoQKWLBThHQDYQDXhZlbwI3HQuiazX24TKd2TjOAIjPGkQ87x Xc0Yrm2DzlU06LqSpSCUNXAUXWUx -----END CERTIFICATE-----Generated at Sun Jun 15 08:30:51 2025 by rpki-client