$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/524FF242CBEA11EE88969C0CC4F9AE02.roa File: 524FF242CBEA11EE88969C0CC4F9AE02.roa (raw, json) Hash identifier: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw= Subject key identifier: AB:E0:4A:E1:80:69:47:8E:94:5F:2C:92:A3:53:66:CC:3E:BD:93:FF Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 2472 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/524FF242CBEA11EE88969C0CC4F9AE02.roa Signing time: Sun 22 Jun 2025 16:14:18 +0000 ROA not before: Sun 22 Jun 2025 16:14:18 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151981 IP address blocks: 163.53.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9330 (0x2472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Jun 22 16:14:18 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68582bda-a595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:9f:e6:42:72:9e:44:1b:85:fe:a3:57:b2: 17:24:57:db:45:7d:d3:1f:9b:b5:e0:56:3a:6e:4a: 91:c0:64:67:f6:3b:7b:27:a2:54:9b:f4:89:60:e3: 41:36:6c:e4:cb:e1:49:a1:00:0f:a3:e0:57:e6:e3: 59:68:f2:26:8f:66:51:d2:2c:bd:a5:ef:0f:3e:8a: 78:fe:49:f4:ac:40:59:88:10:c6:b2:63:5d:fc:b8: be:6e:db:0c:a9:8b:66:d4:a6:a0:42:cd:5c:bd:15: 15:65:f6:05:b5:e3:f8:13:13:e2:5b:88:91:36:c1: 69:7e:e5:0e:a6:46:c5:90:a6:36:31:67:68:9f:5b: e0:27:e8:d3:d9:87:f8:b3:d4:95:03:43:45:ee:f9: 55:55:1e:dc:c1:02:af:18:36:02:81:9e:cb:15:b0: 5a:f4:e2:ce:7b:d4:83:68:a5:25:ad:bf:65:b6:f2: f9:0b:73:8e:5a:c2:45:03:17:99:7c:f8:65:cb:ad: 86:1f:5f:e3:7d:61:74:db:dc:3e:b5:8e:b7:94:64: 98:54:28:cd:b5:4b:ca:73:07:bc:d8:68:63:1d:c5: bb:d4:79:b8:5c:3e:f6:c0:26:ed:7e:fe:79:43:fe: a2:4c:1a:ed:91:c2:b4:71:da:a9:22:46:13:e0:2e: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:4A:E1:80:69:47:8E:94:5F:2C:92:A3:53:66:CC:3E:BD:93:FF X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/524FF242CBEA11EE88969C0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ea:a0:82:e4:7e:64:bb:dc:f3:37:9f:1c:8e:5b:8d:c1:30: 54:f4:a5:6e:aa:83:27:79:35:ae:c7:21:1e:78:e1:0a:d8:ab: 3c:5e:8e:f5:2c:c3:e4:bc:b5:ff:c0:cb:70:3c:d9:9b:01:90: 4f:cf:99:a2:9d:e3:41:c7:e2:59:67:03:40:19:7d:26:66:31: 3d:52:df:24:30:b9:f9:53:fd:fc:95:99:01:cd:ad:21:a8:c5: 11:a8:64:42:f7:8c:1a:32:ce:9d:9e:98:8a:01:0c:15:68:f3: b5:c5:91:6c:57:ed:b1:5b:70:a2:75:2c:b9:54:26:39:7a:88: b0:d2:57:83:c6:a4:cf:87:73:bb:f6:0f:a8:f7:f3:d9:c9:ec: 78:1c:ad:02:d1:5e:8c:de:f1:cc:81:06:11:ef:15:d3:0f:0e: 53:81:92:a8:61:13:a0:a3:49:1e:66:af:91:a6:b4:e8:97:ed: fa:39:27:c4:3c:32:a8:26:f5:24:f2:0d:83:5f:66:91:2a:e4: e5:f0:2d:5f:c3:8d:57:7e:05:5b:ee:68:b0:3b:7d:69:a9:bd: bf:51:a3:04:57:96:58:96:53:67:9c:0d:4a:2b:8c:e5:17:34: 40:4d:3e:69:cf:7a:a0:a3:0c:cf:40:0f:4f:22:38:9a:0a:ea: 90:9d:69:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwNjIyMTYxNDE4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4MmJkYS1hNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYKf5kJynkQbhf6jV7IXJFfbRX3TH5u14FY6bkqRwGRn9jt7J6JUm/SJYONB Nmzky+FJoQAPo+BX5uNZaPImj2ZR0iy9pe8PPop4/kn0rEBZiBDGsmNd/Li+btsM qYtm1KagQs1cvRUVZfYFteP4ExPiW4iRNsFpfuUOpkbFkKY2MWdon1vgJ+jT2Yf4 s9SVA0NF7vlVVR7cwQKvGDYCgZ7LFbBa9OLOe9SDaKUlrb9ltvL5C3OOWsJFAxeZ fPhly62GH1/jfWF029w+tY63lGSYVCjNtUvKcwe82GhjHcW71Hm4XD72wCbtfv55 Q/6iTBrtkcK0cdqpIkYT4C6xeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKvgSuGA aUeOlF8skqNTZsw+vZP/MB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5NEIvNURFOTIxRkM1NDlCMTFFNTgzQUFDMTZFQzRGOUFFMDIvNTI0RkYyNDJD QkVBMTFFRTg4OTY5QzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjNZQwDQYJKoZIhvcNAQELBQADggEBAGzqoILkfmS73PM3 nxyOW43BMFT0pW6qgyd5Na7HIR544QrYqzxejvUsw+S8tf/Ay3A82ZsBkE/PmaKd 40HH4llnA0AZfSZmMT1S3yQwuflT/fyVmQHNrSGoxRGoZEL3jBoyzp2emIoBDBVo 87XFkWxX7bFbcKJ1LLlUJjl6iLDSV4PGpM+Hc7v2D6j389nJ7HgcrQLRXoze8cyB BhHvFdMPDlOBkqhhE6CjSR5mr5GmtOiX7fo5J8Q8Mqgm9STyDYNfZpEq5OXwLV/D jVd+BVvuaLA7fWmpvb9RowRXlliWU2ecDUorjOUXNEBNPmnPeqCjDM9AD08iOJoK 6pCdabc= -----END CERTIFICATE-----Generated at Thu Jul 3 16:52:51 2025 by rpki-client