$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa File: B015DEC49D0211F0992DA43DC4F9AE02.roa (raw, json) Hash identifier: 1ZtqCzNNxWxSJ7uFzzu6FWZe/QSQ6qrzF6WDQCLLHuM= Subject key identifier: BD:44:51:81:2B:59:B4:65:31:78:2C:83:A9:55:B9:3C:91:C0:8A:C6 Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 40 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa Signing time: Mon 29 Sep 2025 07:05:32 +0000 ROA not before: Mon 29 Sep 2025 07:05:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153686 IP address blocks: 163.223.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Sep 29 07:05:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68da2fbc-6904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:f6:a4:70:41:e3:a3:c4:a5:b3:93:b7:fe: 8e:c0:51:68:85:ad:c1:b3:52:cc:fc:a9:ec:ac:10: 9f:b1:b5:02:a1:b7:26:23:2b:82:82:f3:53:25:b4: 55:95:5a:66:68:2a:f3:40:0b:13:72:95:96:7f:bb: ef:ba:d0:9d:dc:b5:86:0c:fb:53:9a:f6:44:16:81: 22:7f:60:58:b3:91:fe:c1:40:50:a2:0b:26:b9:ea: f6:d2:23:15:a2:97:2b:a4:b5:d9:59:20:18:92:7c: ce:6f:65:45:31:76:b3:ee:d1:d1:35:78:cc:88:a7: 68:06:18:13:83:28:7b:98:7a:d7:26:f9:87:1c:a5: a3:69:9c:b4:04:d0:a2:18:41:5a:1f:99:ff:dd:3c: 99:b5:94:23:5e:e0:9c:f6:21:aa:ca:41:47:a7:da: 27:88:91:de:0b:f8:c2:b2:38:58:3c:98:80:29:f8: 7a:ca:1c:fa:8d:7e:8c:44:ed:2c:58:18:b9:49:37: f7:96:22:64:c0:e6:37:7b:87:f8:56:c3:d3:47:e0: 05:db:72:e6:48:b7:a6:58:c4:10:16:cf:fc:69:f4: c3:84:59:3e:d4:3f:3f:85:f1:a7:1f:51:c2:94:e7: 9e:72:8e:8d:7a:b6:98:d9:3c:d7:7c:e9:1c:ce:40: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:44:51:81:2B:59:B4:65:31:78:2C:83:A9:55:B9:3C:91:C0:8A:C6 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.72.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:b1:38:32:5c:02:be:bc:f8:dd:87:08:ef:4c:33:e1:81:a1: b0:2b:03:0b:57:bd:61:31:9e:e9:33:5d:d1:36:70:c5:36:c6: 5e:bb:26:49:9e:03:7f:61:95:dd:f8:a1:b6:4f:95:ea:84:bf: b8:06:04:f1:dc:e9:48:5e:6e:4e:9f:9a:44:f0:f9:6c:b6:ce: f2:37:65:27:13:0c:ad:8c:b8:c1:90:b4:1d:76:ca:27:b9:d8: 39:3a:17:cb:a0:8c:53:12:98:39:52:22:da:b0:73:f3:da:5d: f5:fd:8d:28:5a:1c:61:34:8d:0d:f8:40:24:7c:9a:ea:94:eb: bf:9a:18:54:3f:e9:4e:6d:13:0a:0b:5e:f7:0a:11:33:d9:7a: c0:9a:c5:cc:4f:36:e3:46:b8:45:4b:a9:0c:b9:83:ef:b0:b6: e3:2d:45:6c:49:b5:bc:c1:44:cf:60:78:2b:ad:5d:8d:5c:10: e3:bc:3e:a0:46:fa:f5:fe:55:5b:a8:b7:a4:93:11:3f:e6:8a: a2:ce:4f:ac:e7:83:b0:e7:c5:79:f2:44:6b:1f:d0:67:5d:3d: 7c:cc:7f:f7:31:58:78:fb:a5:4d:23:d3:41:25:b3:31:ed:ca: 7c:12:42:70:90:90:de:d9:2c:0b:7b:f9:0f:c6:6c:53:cc:11: f0:ce:7c:eb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTA5MjkwNzA1MzJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGEyZmJjLTY5MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ3vakcEHjo8Sls5O3/o7AUWiFrcGzUsz8qeysEJ+xtQKhtyYjK4KC81MltFWV WmZoKvNACxNylZZ/u++60J3ctYYM+1Oa9kQWgSJ/YFizkf7BQFCiCya56vbSIxWi lyuktdlZIBiSfM5vZUUxdrPu0dE1eMyIp2gGGBODKHuYetcm+YccpaNpnLQE0KIY QVofmf/dPJm1lCNe4Jz2IarKQUen2ieIkd4L+MKyOFg8mIAp+HrKHPqNfoxE7SxY GLlJN/eWImTA5jd7h/hWw9NH4AXbcuZIt6ZYxBAWz/xp9MOEWT7UPz+F8acfUcKU 555yjo16tpjZPNd86RzOQD43AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvURRgStZ tGUxeCyDqVW5PJHAisYwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzVCQy83MUU1RDhCRTU5RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9CMDE1REVDNDlE MDIxMUYwOTkyREE0M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPfSDANBgkqhkiG9w0BAQsFAAOCAQEAHrE4MlwCvrz43YcI 70wz4YGhsCsDC1e9YTGe6TNd0TZwxTbGXrsmSZ4Df2GV3fihtk+V6oS/uAYE8dzp SF5uTp+aRPD5bLbO8jdlJxMMrYy4wZC0HXbKJ7nYOToXy6CMUxKYOVIi2rBz89pd 9f2NKFocYTSNDfhAJHya6pTrv5oYVD/pTm0TCgte9woRM9l6wJrFzE8240a4RUup DLmD77C24y1FbEm1vMFEz2B4K61djVwQ47w+oEb69f5VW6i3pJMRP+aKos5PrOeD sOfFefJEax/QZ109fMx/9zFYePulTSPTQSWzMe3KfBJCcJCQ3tksC3v5D8ZsU8wR 8M586w== -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:21 2025 by rpki-client