$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa File: 63B7CB76D0E511EA9916E053C4F9AE02.roa (raw, json) Hash identifier: 4fGi9gJaC/oEbDcGBoBEInsd7LIWjlkoV1ytai5f/QA= Subject key identifier: 31:5E:71:D8:AE:D5:DD:E0:09:6F:58:38:A3:BA:0B:5D:FA:2B:C6:56 Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0829 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa Signing time: Tue 06 May 2025 21:01:34 +0000 ROA not before: Tue 06 May 2025 21:01:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140659 IP address blocks: 103.151.116.0/23 maxlen: 24 2406:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: May 6 21:01:34 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=681a78ad-cad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:da:0d:e0:0d:25:a5:3c:1d:a8:7f:5b:f9: 4d:eb:d3:c6:8f:cf:12:21:ad:ab:ed:23:82:87:0e: a6:85:a8:86:11:e1:97:a6:a5:33:a9:c7:c9:ea:f8: 93:11:34:d7:01:b6:b3:7d:e9:6a:9f:68:c4:39:aa: cc:09:be:f7:38:79:d1:9a:2f:20:19:9f:1e:f7:f3: 14:8d:bf:a8:1b:46:f6:6a:af:35:41:fd:5b:e9:f1: fe:4c:6a:bc:42:f1:e9:c4:c3:79:7f:4b:4e:26:d4: b3:f1:ef:0c:38:8e:e2:3c:1b:7d:db:d5:ea:cc:d9: 28:04:ba:84:64:46:26:d6:54:d7:9f:3a:f9:b1:af: 53:5b:ae:f3:29:64:84:e7:8e:3c:db:ce:8c:e8:c2: 75:19:31:27:44:72:70:fb:1f:a2:fa:57:a9:25:07: a5:39:16:b0:b6:67:b9:77:67:ab:7e:77:94:4d:7f: 95:5f:22:93:20:37:e8:aa:96:3a:9d:89:28:e9:b3: c2:e4:79:6c:50:91:e9:e9:ca:2b:98:29:e2:ec:b2: 2d:6c:60:5c:f8:1d:13:eb:ee:6e:1d:17:a5:49:d7: 71:1c:98:fb:d0:42:46:55:5c:2f:b5:43:db:fc:10: 79:36:3e:34:91:f3:5b:0b:98:2f:ed:52:5c:ab:b6: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5E:71:D8:AE:D5:DD:E0:09:6F:58:38:A3:BA:0B:5D:FA:2B:C6:56 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/63B7CB76D0E511EA9916E053C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.116.0/23 IPv6: 2406:19c0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:15:16:04:3f:e1:b5:aa:24:d0:e8:7e:07:0c:ff:90:6c:bd: 66:fa:be:d3:7c:5a:eb:2c:bc:ff:2c:85:f5:a4:ba:79:a5:2f: 3d:7c:10:90:74:3a:90:54:e9:89:3c:36:b6:e4:33:da:3f:bc: 56:d8:4e:30:55:84:9a:26:7a:69:d1:fa:98:9a:3b:c2:d5:60: 90:84:12:f4:a4:7d:55:59:0c:ea:cc:34:38:bd:01:4a:56:a3: 7c:dd:ff:97:d4:90:ad:74:fa:f1:28:d3:d7:bb:0f:e3:0f:0a: c0:1f:30:11:06:72:45:78:0b:7f:6a:df:5b:22:7a:b8:a1:32: f8:a5:ff:c1:f1:5a:4c:8d:a6:3f:11:1a:90:5a:b1:ae:c6:b3: c8:b7:23:e7:c3:fc:35:8f:9d:ec:0e:5d:82:c9:af:57:dc:f3: 63:36:f6:95:31:a9:18:11:cf:d2:09:36:68:76:4e:a5:7f:e9: 3e:40:ed:0e:d8:3e:60:38:5f:61:94:e3:98:d0:67:2d:0d:a1: 30:0f:45:d9:56:f1:02:4a:a9:be:b8:95:1e:9f:70:11:14:00: ea:cb:4b:8c:cb:66:59:04:09:f3:02:ae:a8:e4:67:60:97:6f: 07:95:85:d2:1f:32:75:65:59:6d:44:e9:56:de:3e:03:20:a0: d4:27:fb:1d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNTA2MjEwMTM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNzhhZC1jYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv3aDeANJaU8Hah/W/lN69PGj88SIa2r7SOChw6mhaiGEeGXpqUzqcfJ6viT ETTXAbazfelqn2jEOarMCb73OHnRmi8gGZ8e9/MUjb+oG0b2aq81Qf1b6fH+TGq8 QvHpxMN5f0tOJtSz8e8MOI7iPBt929XqzNkoBLqEZEYm1lTXnzr5sa9TW67zKWSE 5448286M6MJ1GTEnRHJw+x+i+lepJQelORawtme5d2erfneUTX+VXyKTIDfoqpY6 nYko6bPC5HlsUJHp6cormCni7LItbGBc+B0T6+5uHRelSddxHJj70EJGVVwvtUPb /BB5Nj40kfNbC5gv7VJcq7ZZzwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDFecdiu 1d3gCW9YOKO6C136K8ZWMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFNEIvMjRBNjhFOUNEMEUzMTFFQTlBNzNCOTRGQzRGOUFFMDIvNjNCN0NCNzZE MEU1MTFFQTk5MTZFMDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnl3QwDQQCAAIwBwMFACQGGcAwDQYJKoZIhvcNAQELBQAD ggEBAIsVFgQ/4bWqJNDofgcM/5BsvWb6vtN8WussvP8shfWkunmlLz18EJB0OpBU 6Yk8NrbkM9o/vFbYTjBVhJomemnR+piaO8LVYJCEEvSkfVVZDOrMNDi9AUpWo3zd /5fUkK10+vEo09e7D+MPCsAfMBEGckV4C39q31sierihMvil/8HxWkyNpj8RGpBa sa7Gs8i3I+fD/DWPnewOXYLJr1fc82M29pUxqRgRz9IJNmh2TqV/6T5A7Q7YPmA4 X2GU45jQZy0NoTAPRdlW8QJKqb64lR6fcBEUAOrLS4zLZlkECfMCrqjkZ2CXbweV hdIfMnVlWW1E6VbePgMgoNQn+x0= -----END CERTIFICATE-----Generated at Mon May 12 12:43:40 2025 by rpki-client