$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/5E68E50A175411F09318BD57C4F9AE02.roa File: 5E68E50A175411F09318BD57C4F9AE02.roa (raw, json) Hash identifier: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw= Subject key identifier: F3:90:43:9D:0A:2B:66:BA:64:05:06:D5:30:B6:D6:77:D3:EB:69:66 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 11 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/5E68E50A175411F09318BD57C4F9AE02.roa Signing time: Thu 08 May 2025 18:19:23 +0000 ROA not before: Thu 08 May 2025 18:19:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153746 IP address blocks: 163.223.214.0/23 maxlen: 23 163.223.214.0/24 maxlen: 24 163.223.215.0/24 maxlen: 24 2001:df5:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: May 8 18:19:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cf5aa-a077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:cd:6d:72:f5:2e:98:1a:98:37:2a:e2:ef: 2a:19:60:fc:bb:77:c3:3d:1e:87:c4:23:1d:37:25: 0f:1e:d7:5e:b1:33:a3:89:c1:df:be:07:81:6a:37: f5:e7:fd:01:45:bd:4c:c3:63:2e:83:64:04:de:31: 3d:5a:ec:93:4e:4f:a4:18:33:13:f7:a1:6b:45:5b: 89:f5:53:c8:37:01:4a:d8:26:07:26:9b:b1:41:49: c8:3c:12:40:f4:69:8f:a3:da:af:2b:bf:48:4f:c8: 7e:7e:6e:7c:19:2a:a6:cd:2d:34:ff:dc:61:d4:70: b0:04:9d:02:7f:43:4d:8a:29:c3:76:fa:88:ca:be: a6:c6:96:8f:6d:1e:e2:fc:a0:6d:8d:bd:4a:a0:c3: 5e:40:4b:6d:3c:76:7b:56:74:9e:a6:7e:7d:21:85: d9:ed:02:4d:80:71:c8:44:5b:30:4e:99:2a:56:53: fa:31:85:d8:ed:63:78:7e:80:07:62:c6:5a:51:e8: 32:c1:f6:82:6a:bb:dc:36:30:93:19:c9:25:01:e5: 49:12:11:a8:13:76:e6:7d:0b:e3:e1:87:74:4f:b1: 24:42:41:aa:ac:ec:b4:a1:14:af:84:1d:84:d2:af: 61:4f:ee:c6:40:a1:bf:e4:87:bb:54:28:7f:89:28: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:90:43:9D:0A:2B:66:BA:64:05:06:D5:30:B6:D6:77:D3:EB:69:66 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/5E68E50A175411F09318BD57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.214.0/23 IPv6: 2001:df5:4c40::/48 Signature Algorithm: sha256WithRSAEncryption b2:4f:e4:4e:74:cf:21:66:a9:f4:22:8d:83:81:f7:16:99:08: 4b:3c:a2:d6:18:35:24:67:a5:7b:07:1c:6a:f3:1a:e8:bf:af: 71:00:75:3c:72:1a:c6:23:cd:c3:b6:2f:26:b1:80:03:8e:6e: 66:97:5f:16:fc:80:1b:e3:3d:f3:75:e6:05:90:93:c0:3e:2a: d6:3b:b1:74:58:ea:1d:b5:fe:77:1f:a4:cd:05:f2:2d:7b:7f: b0:ea:dd:83:e5:ac:77:c7:20:af:af:8f:50:b9:98:fd:69:71: 44:40:8d:f0:cc:03:30:5f:e4:c5:8b:32:33:f4:38:61:4b:0a: f9:b9:25:25:c7:4c:2b:6b:16:5a:99:8a:fe:67:64:a9:68:55: 51:b1:0b:dc:77:44:a7:f4:7f:01:ba:a6:4e:95:50:04:a2:bf: 98:44:c8:db:88:fe:a6:1f:f4:ae:67:92:76:0e:45:01:6c:b1: bf:d2:b9:61:88:97:8c:fd:7d:36:5d:20:65:f6:95:1d:ae:2b: 91:0e:15:47:fb:43:bc:7f:e9:e2:8e:8d:09:4d:08:34:79:ca: 63:72:4f:bf:9a:0f:45:0f:4a:8a:2c:e7:13:d2:48:d3:30:43: f4:67:9a:85:14:71:9c:40:d1:25:47:b6:cd:5f:c6:8e:bf:22: 49:b9:ca:09 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA1MDgxODE5MjNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWNmNWFhLWEwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDxM1tcvUumBqYNyri7yoZYPy7d8M9HofEIx03JQ8e116xM6OJwd++B4FqN/Xn /QFFvUzDYy6DZATeMT1a7JNOT6QYMxP3oWtFW4n1U8g3AUrYJgcmm7FBScg8EkD0 aY+j2q8rv0hPyH5+bnwZKqbNLTT/3GHUcLAEnQJ/Q02KKcN2+ojKvqbGlo9tHuL8 oG2NvUqgw15AS208dntWdJ6mfn0hhdntAk2AcchEWzBOmSpWU/oxhdjtY3h+gAdi xlpR6DLB9oJqu9w2MJMZySUB5UkSEagTduZ9C+Phh3RPsSRCQaqs7LShFK+EHYTS r2FP7sZAob/kh7tUKH+JKNvJAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU85BDnQor ZrpkBQbVMLbWd9PraWYwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjRFNi9GOUZCOTBCODE3NTMxMUYwQUFGNjFENTdDNEY5QUUwMi81RTY4RTUwQTE3 NTQxMUYwOTMxOEJENTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPf1jAPBAIAAjAJAwcAIAEN9UxAMA0GCSqGSIb3DQEBCwUA A4IBAQCyT+ROdM8hZqn0Io2DgfcWmQhLPKLWGDUkZ6V7Bxxq8xrov69xAHU8chrG I83Dti8msYADjm5ml18W/IAb4z3zdeYFkJPAPirWO7F0WOodtf53H6TNBfIte3+w 6t2D5ax3xyCvr49QuZj9aXFEQI3wzAMwX+TFizIz9DhhSwr5uSUlx0wraxZamYr+ Z2SpaFVRsQvcd0Sn9H8BuqZOlVAEor+YRMjbiP6mH/SuZ5J2DkUBbLG/0rlhiJeM /X02XSBl9pUdriuRDhVH+0O8f+nijo0JTQg0ecpjck+/mg9FD0qKLOcT0kjTMEP0 Z5qFFHGcQNElR7bNX8aOvyJJucoJ -----END CERTIFICATE-----Generated at Mon May 12 22:05:50 2025 by rpki-client