$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/3DE8388A53F411F0B5061085C4F9AE02.roa File: 3DE8388A53F411F0B5061085C4F9AE02.roa (raw, json) Hash identifier: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4= Subject key identifier: EC:B8:A2:15:0E:72:7E:02:94:F9:81:FB:0B:58:50:8D:7D:ED:F6:C0 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 44 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/3DE8388A53F411F0B5061085C4F9AE02.roa Signing time: Sat 28 Jun 2025 07:48:47 +0000 ROA not before: Sat 28 Jun 2025 07:48:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134732 IP address blocks: 163.61.240.0/23 maxlen: 23 163.61.240.0/24 maxlen: 24 163.61.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Jun 28 07:48:47 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=685f9e5f-2dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:0d:50:9b:97:22:9b:da:cf:d6:2c:82:41: 1d:b1:25:3e:58:46:22:9d:40:8c:52:0c:79:c0:a7: f5:68:fc:8b:8e:7b:73:f8:fb:fb:d8:85:fb:f3:4b: e3:db:a9:fc:0d:5a:61:46:00:68:bb:4b:78:e8:57: 3f:d3:2d:38:0c:a8:11:04:36:72:8e:c2:9b:bd:1d: 62:0c:82:35:60:27:cf:a7:db:3b:60:94:03:d5:be: 8c:82:c6:11:0a:62:41:91:b1:bc:4c:dd:91:44:ed: f3:93:ec:6e:8d:ac:2b:93:ef:f3:4e:0d:2e:62:49: 71:51:9d:60:fc:98:17:43:a4:cb:69:3b:ac:84:a6: aa:c6:d6:b3:b4:50:9d:d1:2f:e8:ed:33:7b:cd:11: 6c:f7:8a:e6:44:fe:4f:6e:60:e3:ef:b9:06:38:50: e0:12:32:c4:b0:b9:4e:6a:e6:17:35:af:d9:0a:bf: 99:39:70:73:df:32:4e:7b:97:23:42:45:a8:7c:33: 6f:92:44:71:cf:a5:c8:9a:e9:30:10:ec:e7:96:6c: 50:d8:03:c2:8b:1f:b2:13:a4:fc:05:fc:80:bc:4d: 2d:e5:6e:b3:28:97:4d:f3:4a:e1:53:d6:f2:d6:bc: d3:32:fd:04:d9:e2:f1:a2:af:6c:ab:bd:cb:bc:40: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:A2:15:0E:72:7E:02:94:F9:81:FB:0B:58:50:8D:7D:ED:F6:C0 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/3DE8388A53F411F0B5061085C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.240.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:d6:72:f8:ab:b0:19:e5:c6:6b:29:63:d9:92:02:e9:09:c6: 79:e3:f0:99:b8:9c:15:b2:1e:91:bb:29:54:1c:0d:c4:a6:0b: b3:28:3d:fd:6b:af:77:55:6e:20:d0:40:9f:d1:8b:0a:f7:03: 9d:69:ce:57:39:5d:ff:98:e7:63:5a:a4:b6:04:6a:00:b9:c7: db:4f:59:f3:cf:cc:aa:63:20:99:19:c3:59:63:f6:35:f5:2c: 56:28:87:21:37:42:2e:82:79:60:c5:5f:58:ca:4a:de:6f:00: d6:7f:53:eb:3e:6e:b8:02:98:c5:b4:61:ce:e8:2f:3c:1b:b2: 3f:db:be:01:91:a9:b1:23:5d:a1:71:15:47:70:30:07:97:fc: 05:ea:c4:6e:b4:70:81:8c:b4:37:35:be:de:c0:82:fa:54:fa: b8:7d:a5:d6:96:18:93:25:42:b2:9f:d7:7e:67:fa:d2:8c:65: fe:e4:61:fb:19:34:0d:54:cb:59:15:7e:a5:70:0f:61:39:22: c6:9f:a2:09:fa:ad:4b:41:a3:f0:d2:e7:2f:49:35:30:a6:18: d0:cd:2a:aa:5d:37:3b:b3:23:25:b7:cd:41:1f:94:27:f9:5b: 0f:79:96:42:fc:8b:42:40:11:e8:bb:81:ca:b3:db:8a:b7:7b: d1:11:49:5a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA2MjgwNzQ4NDdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWY5ZTVmLTJkZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSug1Qm5cim9rP1iyCQR2xJT5YRiKdQIxSDHnAp/Vo/IuOe3P4+/vYhfvzS+Pb qfwNWmFGAGi7S3joVz/TLTgMqBEENnKOwpu9HWIMgjVgJ8+n2ztglAPVvoyCxhEK YkGRsbxM3ZFE7fOT7G6NrCuT7/NODS5iSXFRnWD8mBdDpMtpO6yEpqrG1rO0UJ3R L+jtM3vNEWz3iuZE/k9uYOPvuQY4UOASMsSwuU5q5hc1r9kKv5k5cHPfMk57lyNC Rah8M2+SRHHPpcia6TAQ7OeWbFDYA8KLH7ITpPwF/IC8TS3lbrMol03zSuFT1vLW vNMy/QTZ4vGir2yrvcu8QJZ1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7LiiFQ5y fgKU+YH7C1hQjX3t9sAwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjBFOC8yRDMwNkIzNEY0NDUxMUVGQThDNTI2NDZDNEY5QUUwMi8zREU4Mzg4QTUz RjQxMUYwQjUwNjEwODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaM98DANBgkqhkiG9w0BAQsFAAOCAQEAbtZy+KuwGeXGaylj 2ZIC6QnGeePwmbicFbIekbspVBwNxKYLsyg9/Wuvd1VuINBAn9GLCvcDnWnOVzld /5jnY1qktgRqALnH209Z88/MqmMgmRnDWWP2NfUsViiHITdCLoJ5YMVfWMpK3m8A 1n9T6z5uuAKYxbRhzugvPBuyP9u+AZGpsSNdoXEVR3AwB5f8BerEbrRwgYy0NzW+ 3sCC+lT6uH2l1pYYkyVCsp/Xfmf60oxl/uRh+xk0DVTLWRV+pXAPYTkixp+iCfqt S0Gj8NLnL0k1MKYY0M0qql03O7MjJbfNQR+UJ/lbD3mWQvyLQkAR6LuByrPbird7 0RFJWg== -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:34 2025 by rpki-client