$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/0C897F3EE84111EFA819A335C4F9AE02.roa File: 0C897F3EE84111EFA819A335C4F9AE02.roa (raw, json) Hash identifier: 5gQHbtykFLXuasC1zPt+ul7Apydf3ObCnPPOkuixA6c= Subject key identifier: 6A:A2:E2:3B:DA:C6:50:3D:5F:D7:7E:A7:C9:AB:4D:02:0C:06:78:E7 Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: E2 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/0C897F3EE84111EFA819A335C4F9AE02.roa Signing time: Wed 09 Apr 2025 10:36:52 +0000 ROA not before: Wed 09 Apr 2025 10:36:52 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152469 IP address blocks: 163.223.239.0/24 maxlen: 24 2001:df3:73c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Apr 9 10:36:52 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f64dc4-1081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:43:78:46:92:96:12:b6:37:94:c7:a8:98: 75:4a:25:bd:37:69:80:85:4c:09:dc:0f:42:66:2c: e4:a9:13:de:81:2b:54:e7:c8:d1:19:8c:1e:5a:bc: a2:20:34:93:f3:96:c1:d1:eb:a0:b5:6b:5d:f9:a2: 8b:c5:70:43:e0:b0:50:dc:05:86:33:de:fd:b2:97: c5:17:f0:66:1e:eb:43:39:00:24:c5:42:35:a7:d3: 30:9c:50:16:2e:fc:63:ea:16:5c:0a:fa:bf:5f:14: 26:71:4b:6a:7e:4e:5b:e0:e9:11:22:20:e2:8f:03: cd:fc:dd:32:16:0c:9e:46:8a:65:09:1a:57:a4:14: 8e:e2:8f:98:1b:c1:8b:20:96:7b:23:52:7d:01:cc: b5:0d:dd:16:e8:ca:2e:c1:f1:ce:76:b0:8e:5f:59: c1:b4:c3:60:e8:68:6f:ed:ae:52:a7:0a:f6:bd:af: 95:de:e8:2f:94:f4:4f:3f:c0:15:e7:33:21:db:57: d1:54:bd:a3:cb:ad:e5:af:a5:02:e7:ca:35:7f:59: b7:cb:6b:51:ff:f7:79:b8:22:28:78:36:02:1e:a5: 15:56:89:b6:20:5c:83:e7:76:ac:db:53:e3:d9:ec: 4d:e9:60:2b:ca:87:5d:97:7d:04:3e:28:e6:91:55: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:E2:3B:DA:C6:50:3D:5F:D7:7E:A7:C9:AB:4D:02:0C:06:78:E7 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/0C897F3EE84111EFA819A335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.239.0/24 IPv6: 2001:df3:73c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:21:ec:c0:61:76:3e:67:e0:df:01:e3:37:6e:f2:e4:1b:b7: 0a:59:3a:cc:bd:81:70:68:be:8a:19:4d:7f:76:01:1c:4e:e6: 36:0f:67:67:cf:9e:d7:97:07:f2:eb:a7:88:da:47:dc:39:3d: a3:9f:cd:28:48:e7:d7:18:b2:b8:ce:fc:fa:f4:60:c9:69:60: 23:3a:2e:38:0b:69:5a:e7:00:68:05:0c:3d:dd:3a:3b:1b:a1: 16:48:8d:da:6f:3b:c9:4d:dc:82:9c:4a:19:13:6a:e1:b1:76: e6:c3:c2:9d:b3:9c:96:55:ea:93:a4:e4:4f:5b:4a:0b:3e:2e: 01:fe:63:bd:cc:e0:8c:15:9b:a6:d2:b1:84:88:27:c6:8c:29: 4a:ae:f0:7c:7e:e5:ae:44:cc:f5:52:a9:f3:f8:07:eb:12:c5: 50:4f:08:d7:c9:9a:a1:8a:40:0d:22:2e:82:62:ac:4f:dd:3f: 7c:f0:71:b5:1c:94:89:13:68:f9:9f:02:50:6c:c3:ab:3b:7c: d3:88:42:fa:5f:b0:b2:00:27:dc:9a:72:15:d9:30:90:da:b1: 62:2f:e9:b6:b0:87:09:f6:09:81:23:e8:5b:65:41:ef:f1:35: d8:e4:de:df:50:2c:e0:52:3c:09:47:32:1d:36:cd:23:df:15: 07:be:5a:ed -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNDA5MTAzNjUyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y2NGRjNC0xMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrNDeEaSlhK2N5THqJh1SiW9N2mAhUwJ3A9CZizkqRPegStU58jRGYweWryi IDST85bB0eugtWtd+aKLxXBD4LBQ3AWGM979spfFF/BmHutDOQAkxUI1p9MwnFAW Lvxj6hZcCvq/XxQmcUtqfk5b4OkRIiDijwPN/N0yFgyeRoplCRpXpBSO4o+YG8GL IJZ7I1J9Acy1Dd0W6MouwfHOdrCOX1nBtMNg6Ghv7a5Spwr2va+V3ugvlPRPP8AV 5zMh21fRVL2jy63lr6UC58o1f1m3y2tR//d5uCIoeDYCHqUVVom2IFyD53as21Pj 2exN6WAryoddl30EPijmkVVbywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGqi4jva xlA9X9d+p8mrTQIMBnjnMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU1MDAvNDlFNkZFNDZDNzJEMTFFRTlDN0MzNTFEQzRGOUFFMDIvMEM4OTdGM0VF ODQxMTFFRkE4MTlBMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBACj3+8wDwQCAAIwCQMHACABDfNzwDANBgkqhkiG9w0BAQsF AAOCAQEAMCHswGF2Pmfg3wHjN27y5Bu3Clk6zL2BcGi+ihlNf3YBHE7mNg9nZ8+e 15cH8uuniNpH3Dk9o5/NKEjn1xiyuM78+vRgyWlgIzouOAtpWucAaAUMPd06Oxuh FkiN2m87yU3cgpxKGRNq4bF25sPCnbOcllXqk6TkT1tKCz4uAf5jvczgjBWbptKx hIgnxowpSq7wfH7lrkTM9VKp8/gH6xLFUE8I18maoYpADSIugmKsT90/fPBxtRyU iRNo+Z8CUGzDqzt804hC+l+wsgAn3JpyFdkwkNqxYi/ptrCHCfYJgSPoW2VB7/E1 2OTe31As4FI8CUcyHTbNI98VB75a7Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:24 2025 by rpki-client