$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa File: 38F85C12315611F0A6B1097AC4F9AE02.roa (raw, json) Hash identifier: 3uteNlhKYK6907KykR8gAU+oHBxNf/k9LdbZlDl3X5w= Subject key identifier: 04:8C:AE:F6:F1:EC:78:39:38:E9:EF:EB:D4:E3:4F:A6:A8:5C:9D:16 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07CE Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa Signing time: Thu 15 May 2025 06:31:24 +0000 ROA not before: Thu 15 May 2025 06:31:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151373 IP address blocks: 163.53.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: May 15 06:31:24 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68258a3c-c6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:b6:9b:66:ee:aa:ee:aa:b5:0b:4b:64:2a: f4:67:ca:88:8d:cf:b6:e2:3c:79:4c:58:e7:b3:cc: 6e:a8:41:db:fd:04:c0:65:4d:a2:56:76:d8:a5:1a: cf:61:cb:c0:73:4a:82:57:91:8d:5c:d8:8b:be:29: 68:1b:93:cc:b1:5d:47:a3:c5:44:c2:09:11:38:43: b9:3e:2e:54:9a:d1:ef:3e:ca:6f:28:be:06:47:a0: e5:dc:b7:57:79:a0:c8:5e:09:5f:67:39:b3:e6:0f: a4:36:85:d2:c0:8f:4e:82:c7:93:43:22:46:2b:44: 6c:a4:62:86:df:39:42:dc:a6:43:e9:f3:ce:3c:6d: de:2e:ab:53:48:44:48:a7:ea:1f:34:21:82:16:65: d9:34:c6:32:b1:57:b0:cd:d7:a3:b8:e4:df:23:9c: c1:e1:ce:1e:36:01:ac:c3:47:6a:f0:df:06:ee:78: e4:29:b2:ef:34:53:6a:0b:b5:a3:a6:73:a4:77:e7: 4a:21:6f:aa:65:2d:dd:9b:77:f9:e9:89:e4:ed:c3: 4a:b6:6f:8e:b6:fe:6f:8d:05:14:49:9d:30:ee:98: a1:87:23:51:94:67:00:96:dc:33:99:76:e4:3e:24: 94:c0:f9:e6:82:ed:d5:24:35:3c:1c:2d:6c:bd:dc: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8C:AE:F6:F1:EC:78:39:38:E9:EF:EB:D4:E3:4F:A6:A8:5C:9D:16 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.19.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ee:fa:ea:b6:c2:49:44:9b:c0:c0:3b:49:ab:e0:23:b1:2b: 8b:ca:b1:dc:a7:39:2c:22:a0:1f:1f:d7:b8:0e:2d:33:bb:29: 53:a3:ea:c1:2d:38:1b:e7:be:af:b6:5c:d1:f9:94:64:d6:d1: ff:3c:76:c0:68:ef:6c:d8:6b:d3:a8:3f:f3:e1:b9:a1:cf:14: 92:65:65:92:16:27:eb:12:50:8e:71:55:e2:cc:11:5d:2e:d1: ac:b3:fa:b5:e8:16:44:b8:18:69:9b:a6:9b:c8:63:0b:b6:18: 65:b1:b3:6b:64:e6:11:bf:ca:27:05:84:45:25:10:ab:75:1a: b2:81:4f:ea:95:f9:f6:93:37:47:d8:d4:64:74:2f:8a:91:f6: c7:fc:f5:e4:d8:ce:02:53:b9:a5:10:f2:f7:2b:d3:be:45:ce: 07:c7:bd:13:fe:de:fc:85:90:e2:82:a3:87:2b:89:70:88:a5: 91:42:fc:6f:f8:c4:bc:67:fa:3c:9e:d2:a3:70:42:74:1a:ef: c5:bd:8a:ee:69:44:de:80:31:0b:f5:02:af:06:b2:22:38:45: 52:74:09:56:cb:ad:cf:22:4e:7c:c1:09:7e:5e:50:29:04:9d: dd:f9:91:01:64:ee:bd:35:50:c1:7c:da:e3:81:52:7c:59:e8: b0:43:b9:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNTE1MDYzMTI0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1OGEzYy1jNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/y2m2buqu6qtQtLZCr0Z8qIjc+24jx5TFjns8xuqEHb/QTAZU2iVnbYpRrP YcvAc0qCV5GNXNiLviloG5PMsV1Ho8VEwgkROEO5Pi5UmtHvPspvKL4GR6Dl3LdX eaDIXglfZzmz5g+kNoXSwI9OgseTQyJGK0RspGKG3zlC3KZD6fPOPG3eLqtTSERI p+ofNCGCFmXZNMYysVewzdejuOTfI5zB4c4eNgGsw0dq8N8G7njkKbLvNFNqC7Wj pnOkd+dKIW+qZS3dm3f56Ynk7cNKtm+Otv5vjQUUSZ0w7pihhyNRlGcAltwzmXbk PiSUwPnmgu3VJDU8HC1svdwyBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFASMrvbx 7Hg5OOnv69TjT6aoXJ0WMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMzhGODVDMTIz MTU2MTFGMEE2QjEwOTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjNRMwDQYJKoZIhvcNAQELBQADggEBAHXu+uq2wklEm8DA O0mr4COxK4vKsdynOSwioB8f17gOLTO7KVOj6sEtOBvnvq+2XNH5lGTW0f88dsBo 72zYa9OoP/PhuaHPFJJlZZIWJ+sSUI5xVeLMEV0u0ayz+rXoFkS4GGmbppvIYwu2 GGWxs2tk5hG/yicFhEUlEKt1GrKBT+qV+faTN0fY1GR0L4qR9sf89eTYzgJTuaUQ 8vcr075FzgfHvRP+3vyFkOKCo4criXCIpZFC/G/4xLxn+jye0qNwQnQa78W9iu5p RN6AMQv1Aq8GsiI4RVJ0CVbLrc8iTnzBCX5eUCkEnd35kQFk7r01UMF82uOBUnxZ 6LBDueQ= -----END CERTIFICATE-----Generated at Sat May 17 14:00:37 2025 by rpki-client