$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa File: D44647F42AA511F0B80C4C59C4F9AE02.roa (raw, json) Hash identifier: oEbfhc32xCsA7ht+olvhbX7mQyxDotxJHN+kwhGPI7w= Subject key identifier: C6:F7:4B:DC:6C:4C:DA:0F:50:29:A1:C2:23:BE:FC:39:1B:FD:AB:97 Certificate issuer: /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Certificate serial: 33 Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa Signing time: Tue 06 May 2025 18:13:37 +0000 ROA not before: Tue 06 May 2025 18:13:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152179 IP address blocks: 163.61.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B Validity Not Before: May 6 18:13:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681a5151-7c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:35:11:24:c3:30:6e:8e:70:ac:ee:dd:1c: 4b:3d:ee:03:83:69:2b:28:1e:fc:a0:ae:1c:ac:33: a3:07:fc:57:9f:fc:65:a5:05:02:21:87:fa:db:af: 07:c5:bc:95:04:6e:e4:5d:28:ff:31:3b:40:06:61: 48:99:8d:0a:4f:cb:03:43:e9:3f:3c:f7:3c:c8:62: 9a:e9:a6:e3:fb:44:a9:66:94:9e:ee:38:3b:ea:82: f9:df:11:b2:4a:0e:7a:de:a8:0f:6d:59:4f:f4:b5: 42:9b:dd:72:12:c0:cb:84:c8:23:a2:45:bf:56:13: e3:27:72:b3:aa:b5:4d:d1:6c:51:ad:81:1c:04:f4: 0e:ee:7e:84:7b:97:7f:31:f8:02:18:8f:df:26:ae: 65:73:eb:81:74:60:68:0b:ba:2f:df:8c:5d:8b:76: 06:9e:62:ad:ae:7f:ea:9f:46:e9:69:c1:4f:d9:82: 70:76:f8:c0:50:1d:32:c5:ae:42:99:be:73:6f:57: df:00:8b:b8:bd:75:e0:41:97:b3:41:fb:86:7d:e3: bf:50:bf:ea:45:ad:04:56:ad:f7:28:18:7e:8b:a0: be:be:6c:ad:41:7c:47:a2:57:5c:d2:87:d7:37:c9: 0e:08:e0:99:62:6e:b3:32:2a:74:c6:4d:36:2d:c1: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F7:4B:DC:6C:4C:DA:0F:50:29:A1:C2:23:BE:FC:39:1B:FD:AB:97 X509v3 Authority Key Identifier: keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/D44647F42AA511F0B80C4C59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.199.0/24 Signature Algorithm: sha256WithRSAEncryption b9:5a:5a:96:47:3e:e7:8e:88:07:99:e6:f0:bb:f5:0f:ba:e0: 74:3d:e3:d7:28:7b:ea:f3:bb:f4:32:79:4d:a8:43:93:51:9f: cc:d1:7c:26:fb:bc:71:f3:35:52:8b:de:a7:83:28:0a:34:fc: b1:33:9e:44:dc:74:f3:c0:1c:2d:5a:1f:3c:4d:1a:42:d5:44: 6c:a5:9c:c2:53:3e:aa:a4:74:b6:a5:2f:8e:08:10:2d:05:55: 00:45:21:a7:20:03:8f:73:9b:eb:d5:43:a2:d5:73:a8:98:7d: 76:00:c0:56:a8:16:ad:c3:d8:c6:0b:82:83:fd:1a:3e:d8:f7: 23:9b:b9:6e:aa:7e:09:31:6c:2a:65:8c:f2:e3:6b:38:64:65: 3e:63:6c:ff:8a:06:45:10:17:3d:d4:d6:22:77:a7:0b:93:02: 45:6e:e4:75:7a:04:8a:5e:43:98:f1:0c:2a:68:dd:4a:8e:26: 14:5b:2f:db:af:fc:4e:48:d3:7a:1b:ab:87:17:5d:c9:9d:c5: 77:1c:7e:b5:64:9f:16:3f:16:21:77:3a:66:e3:4c:bd:39:50: 0b:02:e4:25:3c:27:b5:ae:ea:9b:57:8d:9f:17:7b:bc:92:9a: 2a:71:92:7b:6b:18:04:2d:79:8e:38:dd:dd:5f:f7:ab:20:dc: af:ed:ee:8d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0EyRDExMC8GA1UEBRMoMkQ1QjlCOTU0Q0QxNzNCNzNGRjA4N0RFQTYxODc5RTQ4 MDUxRDIzQjAeFw0yNTA1MDYxODEzMzdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWE1MTUxLTdjMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXYDURJMMwbo5wrO7dHEs97gODaSsoHvygrhysM6MH/Fef/GWlBQIhh/rbrwfF vJUEbuRdKP8xO0AGYUiZjQpPywND6T889zzIYprppuP7RKlmlJ7uODvqgvnfEbJK DnreqA9tWU/0tUKb3XISwMuEyCOiRb9WE+MncrOqtU3RbFGtgRwE9A7ufoR7l38x +AIYj98mrmVz64F0YGgLui/fjF2LdgaeYq2uf+qfRulpwU/ZgnB2+MBQHTLFrkKZ vnNvV98Ai7i9deBBl7NB+4Z9479Qv+pFrQRWrfcoGH6LoL6+bK1BfEeiV1zSh9c3 yQ4I4JlibrMyKnTGTTYtwVpLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxvdL3GxM 2g9QKaHCI778ORv9q5cwHwYDVR0jBBgwFoAULVublUzRc7c/8Ifephh55IBR0jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDQTJELzI1NjE4N0YyRUY4 NzExRUZBN0IxQzIzMEM0RjlBRTAyL0xWdWJsVXpSYzdjXzhJZmVwaGg1NUlCUjBq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFZ1YmxVelJjN2NfOElmZXBoaDU1SUJSMGpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0EyRC8yNTYxODdGMkVGODcxMUVGQTdCMUMyMzBDNEY5QUUwMi9ENDQ2NDdGNDJB QTUxMUYwQjgwQzRDNTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKM9xzANBgkqhkiG9w0BAQsFAAOCAQEAuVpalkc+546IB5nm 8Lv1D7rgdD3j1yh76vO79DJ5TahDk1GfzNF8Jvu8cfM1Uovep4MoCjT8sTOeRNx0 88AcLVofPE0aQtVEbKWcwlM+qqR0tqUvjggQLQVVAEUhpyADj3Ob69VDotVzqJh9 dgDAVqgWrcPYxguCg/0aPtj3I5u5bqp+CTFsKmWM8uNrOGRlPmNs/4oGRRAXPdTW InenC5MCRW7kdXoEil5DmPEMKmjdSo4mFFsv26/8TkjTehurhxddyZ3Fdxx+tWSf Fj8WIXc6ZuNMvTlQCwLkJTwnta7qm1eNnxd7vJKaKnGSe2sYBC15jjjd3V/3qyDc r+3ujQ== -----END CERTIFICATE-----Generated at Sat May 17 07:11:40 2025 by rpki-client