$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa File: A69DB682FFC811EF92D78053C4F9AE02.roa (raw, json) Hash identifier: jH2lIh6zGtpa+anuT37XKznIQbtVlsIK7PviG9Tc+gI= Subject key identifier: 0D:2D:B0:4F:59:82:10:22:55:2C:60:D0:4D:CB:28:9F:B4:7D:DB:C7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B96F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa Signing time: Thu 08 May 2025 16:28:27 +0000 ROA not before: Thu 08 May 2025 16:28:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152502 IP address blocks: 163.223.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47471 (0xb96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbaa-2980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d7:5c:64:4e:60:fe:76:fc:b2:7b:6d:db:90: 94:74:a9:8f:15:fa:3b:72:b5:6e:e1:15:79:fe:c7: fa:af:ea:e2:66:b5:b9:83:9b:34:2e:c5:68:6e:d2: 0a:12:71:ed:e3:2c:85:02:96:55:55:f7:14:fc:4c: a1:d0:ff:c0:88:f6:28:31:1f:12:13:49:8b:38:0f: 6b:46:9d:d7:e6:03:8d:8e:9f:34:72:47:c6:0d:34: 55:01:ae:89:26:07:19:0f:81:68:2a:ff:09:80:8b: 28:85:f3:91:52:c8:44:08:07:48:64:3b:bf:17:1d: 38:a8:17:ab:82:06:66:a3:be:fd:76:c4:2a:dd:19: 7d:9e:57:c7:c2:00:2a:ba:3c:57:a0:95:35:97:57: 1f:0e:ed:60:6c:a5:01:18:31:07:f5:8b:d7:67:02: c1:35:34:7f:7b:8e:95:33:b6:2f:ea:c3:70:e6:b7: 0a:62:8a:49:7c:e2:5c:7c:03:c9:73:b0:5a:8d:70: 5a:cc:cd:2b:02:77:46:1e:30:78:bc:1a:b2:47:fe: 63:b8:b8:ba:b1:eb:dd:47:2b:ba:af:e3:f6:b8:8a: a7:a9:db:1b:b0:e7:96:d1:e1:7a:c1:61:82:27:6a: 03:5d:d0:69:3b:3c:a3:80:61:2c:09:d4:52:d6:6b: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2D:B0:4F:59:82:10:22:55:2C:60:D0:4D:CB:28:9F:B4:7D:DB:C7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.84.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:0b:78:f1:7d:9d:a7:6e:88:35:05:a5:10:0e:77:24:48:48: 95:5c:d1:e1:c6:24:2b:e7:7d:3c:93:72:43:96:96:1c:55:f1: ec:7e:a7:1f:f2:a0:50:65:d0:fc:3f:10:28:ad:50:07:75:1a: e9:12:2e:2c:65:c4:c4:b5:17:88:a3:9f:28:cb:00:b2:3f:62: 33:61:17:71:16:e4:4c:38:c3:c5:3c:ba:85:f3:b5:40:cf:91: ba:00:4a:9a:e8:86:6b:e2:c4:e5:aa:7e:ec:66:ad:be:f7:d5: 76:1a:f0:1e:56:47:01:ff:d5:6f:e1:18:e0:6b:cc:cb:29:f2: 4f:06:d3:70:5f:2b:0c:7b:ff:4b:e6:ab:8a:a9:46:4c:44:51: a0:ac:1d:22:7b:11:81:95:06:ab:33:73:02:c6:f6:b4:47:51: 4a:7e:6d:4e:70:ae:9d:3a:c1:4e:fa:cf:c3:47:56:54:a1:a7: 35:13:10:2c:70:c4:95:27:91:07:7d:8e:21:f1:50:7a:9b:c5: ff:7e:8b:10:f8:41:25:92:69:01:b5:3c:11:85:4d:27:f1:7e: 88:1a:68:97:33:ef:7f:a2:98:76:c5:a7:ef:6a:9b:21:6e:1f: a8:5d:3f:60:b9:7e:d9:92:bf:94:11:4a:db:b8:1f:c8:c7:4c: 8b:35:0c:30 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALlvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjgyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiYWEtMjk4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/XXGROYP52/LJ7bduQlHSpjxX6O3K1buEVef7H+q/q4ma1uYObNC7FaG7S ChJx7eMshQKWVVX3FPxModD/wIj2KDEfEhNJizgPa0ad1+YDjY6fNHJHxg00VQGu iSYHGQ+BaCr/CYCLKIXzkVLIRAgHSGQ7vxcdOKgXq4IGZqO+/XbEKt0ZfZ5Xx8IA Kro8V6CVNZdXHw7tYGylARgxB/WL12cCwTU0f3uOlTO2L+rDcOa3CmKKSXziXHwD yXOwWo1wWszNKwJ3Rh4weLwaskf+Y7i4urHr3Ucruq/j9riKp6nbG7DnltHhesFh gidqA13QaTs8o4BhLAnUUtZrdLcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQNLbBP WYIQIlUsYNBNyyiftH3bxzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E2OURCNjgy RkZDODExRUY5MkQ3ODA1M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBo99UMA0GCSqGSIb3DQEBCwUAA4IBAQBcC3jxfZ2nbog1 BaUQDnckSEiVXNHhxiQr5308k3JDlpYcVfHsfqcf8qBQZdD8PxAorVAHdRrpEi4s ZcTEtReIo58oywCyP2IzYRdxFuRMOMPFPLqF87VAz5G6AEqa6IZr4sTlqn7sZq2+ 99V2GvAeVkcB/9Vv4Rjga8zLKfJPBtNwXysMe/9L5quKqUZMRFGgrB0iexGBlQar M3MCxva0R1FKfm1OcK6dOsFO+s/DR1ZUoac1ExAscMSVJ5EHfY4h8VB6m8X/fosQ +EElkmkBtTwRhU0n8X6IGmiXM+9/oph2xafvapshbh+oXT9guX7Zkr+UEUrbuB/I x0yLNQww -----END CERTIFICATE-----Generated at Tue May 13 01:46:50 2025 by rpki-client