$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa File: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (raw, json) Hash identifier: TOct4YZ3x0uVg6PIqVFGhW7Pj8+y8nCLAaZLvcpqBvw= Subject key identifier: BC:5B:19:50:B7:4D:D6:84:3B:9D:7A:25:2F:F4:DF:FE:06:D3:A9:0D Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB Certificate serial: 08 Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa Signing time: Fri 18 Apr 2025 07:43:20 +0000 ROA not before: Fri 18 Apr 2025 07:43:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153788 IP address blocks: 163.227.82.0/23 maxlen: 23 2401:fe60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 07:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB Validity Not Before: Apr 18 07:43:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68020298-fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:19:27:90:78:07:fc:25:0b:92:02:96:90: be:ab:7b:5f:d7:b2:b6:50:ce:71:69:9b:7f:59:78: fb:fe:56:29:c0:c2:21:a8:b2:f9:cf:30:0d:f1:3e: 9f:a1:09:bd:ac:f2:09:1f:32:7b:5e:0d:d5:88:c2: d1:f7:8f:59:47:71:d1:78:81:d7:d1:d1:5b:eb:51: 0c:7d:11:7d:58:9c:01:14:06:b7:18:40:c8:fc:30: b2:c1:ce:06:b0:ef:cc:8d:08:3c:4d:ef:50:b3:05: 00:0c:c3:cf:d3:fe:70:86:cf:7c:90:40:19:31:32: e2:6e:b5:d7:b8:80:b0:2b:e3:45:41:79:ea:66:1c: 78:f1:5c:25:e5:b7:e3:03:ab:78:e3:dc:48:27:1d: 37:23:bd:35:ef:68:dd:5c:ee:b3:74:32:18:5a:b6: f4:b1:28:49:4a:df:4b:c3:9f:88:7b:dd:51:a2:f9: bf:a9:98:1e:3d:3e:9c:9f:7f:c3:1e:48:1c:f6:d0: 31:bd:e2:3f:ef:d8:fb:d9:b0:a9:f4:c1:90:cd:a6: 6b:3e:c9:76:49:86:31:b7:67:89:a1:1d:8c:8e:67: 01:b1:70:de:0f:ca:98:c4:51:87:78:15:3c:0c:b1: 08:bd:b7:ea:88:5e:a0:bc:f4:d5:ab:5c:70:bf:74: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5B:19:50:B7:4D:D6:84:3B:9D:7A:25:2F:F4:DF:FE:06:D3:A9:0D X509v3 Authority Key Identifier: keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.82.0/23 IPv6: 2401:fe60::/32 Signature Algorithm: sha256WithRSAEncryption a7:b7:a4:a5:08:7c:81:b8:2c:f2:bc:53:01:19:6d:e8:32:08: 2a:93:02:37:28:5a:7d:62:47:dc:05:d4:33:d2:1c:70:a2:af: 54:d3:2c:6b:ae:5f:51:22:46:fe:87:d8:9c:85:4c:c6:4a:2b: 08:7c:ed:1c:9e:0f:2d:4d:b1:ed:53:18:54:06:b0:fc:f1:18: 65:34:8c:c0:93:cf:99:01:3d:50:76:ab:39:c1:3f:75:24:37: bd:d9:8e:54:08:69:79:7b:8e:1c:c6:b5:46:96:05:f2:2e:30: 2c:50:41:34:27:b1:55:ec:6d:ec:1f:97:cb:6e:94:f4:4f:02: dc:f7:e3:6c:ff:06:f8:c1:75:a1:fd:d5:da:6c:64:b4:27:f0: f0:d7:c4:37:02:b3:f5:63:74:1c:1b:02:a4:e3:f6:55:48:ab: 98:8b:13:49:45:9d:3c:8e:d6:2c:63:b3:76:e6:6f:d2:4e:f6: a0:8d:79:d4:0e:4f:93:4f:fb:32:ca:8e:a8:ef:38:12:b8:30: 00:09:00:f0:e0:ba:07:f0:22:1e:92:6a:20:62:36:10:7c:8e: 54:24:10:38:97:2e:95:17:f3:21:df:23:53:68:0b:8c:30:9b: b1:eb:ea:32:59:64:ee:c8:78:38:55:a6:60:da:18:7c:f2:bb: 08:0c:e2:b6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzE1NjExMC8GA1UEBRMoQUM4N0ZENjkwQ0M2QjI0Qzc4RkMzRjcxRDMyRERFMERC QTI4OTBEQjAeFw0yNTA0MTgwNzQzMjBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MDIwMjk4LWZkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSkhknkHgH/CULkgKWkL6re1/XsrZQznFpm39ZePv+VinAwiGosvnPMA3xPp+h Cb2s8gkfMnteDdWIwtH3j1lHcdF4gdfR0VvrUQx9EX1YnAEUBrcYQMj8MLLBzgaw 78yNCDxN71CzBQAMw8/T/nCGz3yQQBkxMuJutde4gLAr40VBeepmHHjxXCXlt+MD q3jj3EgnHTcjvTXvaN1c7rN0MhhatvSxKElK30vDn4h73VGi+b+pmB49Ppyff8Me SBz20DG94j/v2PvZsKn0wZDNpms+yXZJhjG3Z4mhHYyOZwGxcN4PypjEUYd4FTwM sQi9t+qIXqC89NWrXHC/dHllAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUvFsZULdN 1oQ7nXolL/Tf/gbTqQ0wHwYDVR0jBBgwFoAUrIf9aQzGskx4/D9x0y3eDbookNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMTU2LzE0MkU2NERFMUMw MzExRjBBNURDMTU1NkM0RjlBRTAyL3JJZjlhUXpHc2t4NF9EOXgweTNlRGJvb2tO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcklmOWFRekdza3g0X0Q5eDB5M2VEYm9va05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE1Ni8xNDJFNjRERTFDMDMxMUYwQTVEQzE1NTZDNEY5QUUwMi84MkI3QUQyODFD MjgxMUYwQUY2RURDNDdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAaPjUjANBAIAAjAHAwUAJAH+YDANBgkqhkiG9w0BAQsFAAOC AQEAp7ekpQh8gbgs8rxTARlt6DIIKpMCNyhafWJH3AXUM9IccKKvVNMsa65fUSJG /ofYnIVMxkorCHztHJ4PLU2x7VMYVAaw/PEYZTSMwJPPmQE9UHarOcE/dSQ3vdmO VAhpeXuOHMa1RpYF8i4wLFBBNCexVext7B+Xy26U9E8C3PfjbP8G+MF1of3V2mxk tCfw8NfENwKz9WN0HBsCpOP2VUirmIsTSUWdPI7WLGOzduZv0k72oI151A5Pk0/7 MsqOqO84ErgwAAkA8OC6B/AiHpJqIGI2EHyOVCQQOJculRfzId8jU2gLjDCbsevq Mllk7sh4OFWmYNoYfPK7CAzitg== -----END CERTIFICATE-----Generated at Sat May 17 14:09:29 2025 by rpki-client