$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/C565FFE0025011F0ACBE181CC4F9AE02.roa File: C565FFE0025011F0ACBE181CC4F9AE02.roa (raw, json) Hash identifier: /AkxNQvclEOTbcMEyripKFhKBkJQiQZpl8ngTKJu9eY= Subject key identifier: 2D:F8:F8:49:2D:D9:A8:97:EE:B1:A5:24:A5:D4:62:0B:1D:A6:5A:45 Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Certificate serial: 07 Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/C565FFE0025011F0ACBE181CC4F9AE02.roa Signing time: Sun 16 Mar 2025 10:23:58 +0000 ROA not before: Sun 16 Mar 2025 10:23:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150739 IP address blocks: 163.223.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD Validity Not Before: Mar 16 10:23:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67d6a6be-6dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:4a:70:25:f5:01:ed:54:69:29:ed:f8:28: de:72:f7:a9:46:ee:ad:9c:f2:55:4e:1d:bb:3f:f9: f5:f5:4f:c8:1e:1e:74:61:37:44:87:b6:5c:3b:36: 01:59:b2:da:63:1e:f1:24:02:2b:77:02:f6:33:e6: 4f:f2:b7:84:41:04:29:70:27:9e:6f:3e:1f:70:b0: a2:dd:1a:94:3e:01:3d:91:0f:01:39:36:65:d1:f0: 20:24:39:2d:6e:08:68:ec:c9:4a:00:49:5f:fb:23: 37:7c:95:1a:5a:f9:9e:c9:61:2c:12:6d:ed:03:b7: 9d:13:3d:12:98:e1:ea:aa:6b:fc:20:84:b6:51:b7: 46:a1:b9:7c:99:77:ee:66:0d:e7:cc:a4:5e:e1:de: b4:b6:a5:2a:50:6e:34:c5:2d:53:b0:dc:d8:96:ec: 65:0d:f2:25:a8:d2:6d:a9:f9:81:29:4a:99:4b:c2: 05:c9:98:f9:e6:cd:50:33:71:23:95:b7:70:64:69: e5:9e:d7:21:f9:88:2b:ef:29:cb:65:94:c6:67:27: 4c:7b:ff:07:55:93:8f:09:af:b9:49:6f:e1:ca:b9: 81:ef:cf:fa:6b:7b:2d:a9:9a:7a:37:0b:90:fd:48: 43:65:2c:5a:93:87:d3:b2:a2:3e:df:1c:7f:66:06: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:F8:49:2D:D9:A8:97:EE:B1:A5:24:A5:D4:62:0B:1D:A6:5A:45 X509v3 Authority Key Identifier: keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/C565FFE0025011F0ACBE181CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.106.0/24 Signature Algorithm: sha256WithRSAEncryption 90:79:98:6a:b5:c5:3b:27:de:a3:8b:aa:bc:80:09:55:19:8f: 4c:af:21:cc:65:32:d6:e6:a2:50:3b:50:1a:db:c2:2d:7d:7f: 19:45:3f:04:30:01:3b:7d:99:ea:b3:b7:64:35:c6:89:0b:99: 69:bf:f8:1b:34:e6:04:62:54:52:9e:7c:b2:23:20:98:5e:66: 30:89:8b:75:26:16:58:ea:c7:80:20:93:40:2f:91:67:35:7e: 90:ba:1a:a6:b8:fe:8e:96:75:7e:0d:04:38:6c:44:9c:20:e3: 40:7b:d8:c4:fb:c2:2e:81:63:96:7f:aa:0a:1c:b6:f7:0f:b0: 49:db:52:a1:e8:5f:b8:01:56:56:97:11:36:1c:b4:7c:9f:5e: 34:26:35:fd:b1:bb:be:98:9c:ec:ad:1f:03:52:a3:bc:8a:99: 16:61:4a:aa:1a:9d:00:ef:7d:36:5d:e4:68:a6:0b:11:98:c0: 75:e7:64:1c:93:11:0c:2e:03:29:34:26:60:4b:3c:90:ff:2d: 88:fd:31:9c:72:f6:a8:a2:41:bb:44:0b:22:2b:ee:fb:d8:a7: f2:0d:32:09:62:8a:0e:2d:6a:7a:f8:34:25:ea:1e:4a:22:5d: 5b:5d:d7:3e:bf:e7:05:9a:93:cf:7d:ef:76:f3:2c:83:a4:22: c3:92:60:05 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTdGMzExMC8GA1UEBRMoMzkyNDFEQzJBOTQ5MjJFQUZGOTgyRDlCNDA4MEY4QkU0 MEY3QjZCRDAeFw0yNTAzMTYxMDIzNThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDZhNmJlLTZkYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+BUpwJfUB7VRpKe34KN5y96lG7q2c8lVOHbs/+fX1T8geHnRhN0SHtlw7NgFZ stpjHvEkAit3AvYz5k/yt4RBBClwJ55vPh9wsKLdGpQ+AT2RDwE5NmXR8CAkOS1u CGjsyUoASV/7Izd8lRpa+Z7JYSwSbe0Dt50TPRKY4eqqa/wghLZRt0ahuXyZd+5m DefMpF7h3rS2pSpQbjTFLVOw3NiW7GUN8iWo0m2p+YEpSplLwgXJmPnmzVAzcSOV t3BkaeWe1yH5iCvvKctllMZnJ0x7/wdVk48Jr7lJb+HKuYHvz/prey2pmno3C5D9 SENlLFqTh9Oyoj7fHH9mBhg9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULfj4SS3Z qJfusaUkpdRiCx2mWkUwHwYDVR0jBBgwFoAUOSQdwqlJIur/mC2bQID4vkD3tr0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxN0YzLzlBOUZCOEYyRkZF QzExRUZCRjU1QkI2RkM0RjlBRTAyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3Ry MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT1NRZHdxbEpJdXJfbUMyYlFJRDR2a0QzdHIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTdGMy85QTlGQjhGMkZGRUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9DNTY1RkZFMDAy NTAxMUYwQUNCRTE4MUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPfajANBgkqhkiG9w0BAQsFAAOCAQEAkHmYarXFOyfeo4uq vIAJVRmPTK8hzGUy1uaiUDtQGtvCLX1/GUU/BDABO32Z6rO3ZDXGiQuZab/4GzTm BGJUUp58siMgmF5mMImLdSYWWOrHgCCTQC+RZzV+kLoaprj+jpZ1fg0EOGxEnCDj QHvYxPvCLoFjln+qChy29w+wSdtSoehfuAFWVpcRNhy0fJ9eNCY1/bG7vpic7K0f A1KjvIqZFmFKqhqdAO99Nl3kaKYLEZjAdedkHJMRDC4DKTQmYEs8kP8tiP0xnHL2 qKJBu0QLIivu+9in8g0yCWKKDi1qevg0JeoeSiJdW13XPr/nBZqTz33vdvMsg6Qi w5JgBQ== -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:40 2025 by rpki-client