$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa File: B4F27262FA2911EFA783CE2DC4F9AE02.roa (raw, json) Hash identifier: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y= Subject key identifier: 19:18:1D:AA:DB:D6:C8:F3:8A:E4:B7:CE:0B:C9:1F:8E:CB:A4:5E:B5 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 13 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa Signing time: Thu 06 Mar 2025 01:24:11 +0000 ROA not before: Thu 06 Mar 2025 01:24:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 163.61.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Mar 6 01:24:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c8f93b-3ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:b4:73:17:97:9f:6f:42:c0:a9:99:5f:86: 04:ab:80:2c:23:d7:ae:ae:39:94:5a:64:5b:32:a5: 3b:bd:23:b9:8d:7f:5a:30:c0:9a:52:6e:4a:70:d8: b9:29:c4:e4:b3:49:d4:b2:af:c6:50:42:8d:68:03: 3d:62:73:4c:1c:72:fb:bc:a4:db:75:67:01:05:85: d1:7a:c6:7b:92:a9:e9:e1:fc:9c:06:46:1b:52:8b: 33:47:5c:b4:69:16:df:43:16:32:71:d0:3b:02:d9: 59:01:e0:de:e9:19:d0:e3:20:45:f3:5b:22:cc:fc: 04:34:56:a4:ff:b8:ec:1f:0a:37:60:ac:89:d4:63: f1:0b:fa:3e:f6:3e:52:82:eb:26:92:8e:30:b6:6a: af:f7:5f:08:1e:96:84:7b:6e:96:dd:23:b2:dc:2e: b5:6b:84:bc:a1:02:25:67:f2:91:21:96:f7:3f:34: 7f:df:a1:c9:44:c2:14:bb:79:56:31:11:19:0b:47: fc:df:76:af:b5:ae:45:85:45:4e:32:c2:43:cc:ca: 4e:6d:6f:9e:a3:e9:f2:41:5e:a5:d1:d9:85:6a:0f: 49:9a:ff:96:45:bc:98:3e:ed:5f:9e:0c:1d:f3:35: f4:04:c2:94:3b:f0:f5:88:fa:39:cf:3c:ed:19:ae: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:18:1D:AA:DB:D6:C8:F3:8A:E4:B7:CE:0B:C9:1F:8E:CB:A4:5E:B5 X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.88.0/24 Signature Algorithm: sha256WithRSAEncryption 86:03:2a:7f:55:9f:1e:96:4a:73:af:3a:2b:ec:6a:54:8b:63: 40:08:8e:f6:38:65:a8:84:c4:79:71:c8:fb:1a:b6:b9:32:2c: 82:46:13:cb:66:65:44:ef:4f:81:e8:bf:7c:57:4f:34:d4:97: 93:a9:d1:7c:d4:ca:f1:55:93:f2:49:f6:d1:0f:ad:a6:e8:8f: 3a:85:49:ba:c5:c8:4e:fe:4e:3a:75:77:6a:b4:30:a9:0f:1c: 82:ea:dd:e9:08:f3:df:56:89:80:42:ad:a2:b2:3d:00:94:16: ed:d8:85:31:ca:bd:1a:b8:e0:f6:a2:0b:73:2f:53:32:b2:b1: 8e:84:d6:2d:74:43:14:06:c9:31:f9:26:23:3a:f1:e8:71:3b: 2e:30:b7:4e:f3:d5:e8:27:bc:46:88:bc:16:2c:92:9f:b4:a0: c2:38:12:25:1b:ec:4b:c3:78:9b:66:98:61:85:c2:30:7d:cf: 11:91:e9:a9:1c:5b:ae:3f:9d:22:d7:7d:bd:2b:d9:b8:0d:68: 25:18:c0:b0:8a:1d:e1:32:c1:7a:a7:39:8d:5d:79:16:ac:cd: 6c:1c:58:2f:54:10:ff:1a:a0:1d:50:7e:68:2e:e0:5e:37:a2: cd:f2:b5:26:01:61:eb:3a:1d:85:62:40:91:28:98:b1:1c:c1: 87:34:0c:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG N0Q1MjVBMzAeFw0yNTAzMDYwMTI0MTFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzhmOTNiLTNjYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM2rRzF5efb0LAqZlfhgSrgCwj166uOZRaZFsypTu9I7mNf1owwJpSbkpw2Lkp xOSzSdSyr8ZQQo1oAz1ic0wccvu8pNt1ZwEFhdF6xnuSqenh/JwGRhtSizNHXLRp Ft9DFjJx0DsC2VkB4N7pGdDjIEXzWyLM/AQ0VqT/uOwfCjdgrInUY/EL+j72PlKC 6yaSjjC2aq/3XwgeloR7bpbdI7LcLrVrhLyhAiVn8pEhlvc/NH/foclEwhS7eVYx ERkLR/zfdq+1rkWFRU4ywkPMyk5tb56j6fJBXqXR2YVqD0ma/5ZFvJg+7V+eDB3z NfQEwpQ78PWI+jnPPO0ZrqXHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGRgdqtvW yPOK5LfOC8kfjsukXrUwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhGQS9EMzdGNjI1Q0U3M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9CNEYyNzI2MkZB MjkxMUVGQTc4M0NFMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9WDANBgkqhkiG9w0BAQsFAAOCAQEAhgMqf1WfHpZKc686 K+xqVItjQAiO9jhlqITEeXHI+xq2uTIsgkYTy2ZlRO9Pgei/fFdPNNSXk6nRfNTK 8VWT8kn20Q+tpuiPOoVJusXITv5OOnV3arQwqQ8cgurd6Qjz31aJgEKtorI9AJQW 7diFMcq9Grjg9qILcy9TMrKxjoTWLXRDFAbJMfkmIzrx6HE7LjC3TvPV6Ce8Roi8 FiySn7SgwjgSJRvsS8N4m2aYYYXCMH3PEZHpqRxbrj+dItd9vSvZuA1oJRjAsIod 4TLBeqc5jV15FqzNbBxYL1QQ/xqgHVB+aC7gXjeizfK1JgFh6zodhWJAkSiYsRzB hzQMtA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:19 2025 by rpki-client