$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa File: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (raw, json) Hash identifier: RGDwrnHLpwoltlbpIvS3zEQYJokw21O0scCTRV6lF5o= Subject key identifier: DB:F9:99:6B:B7:B6:21:D2:AF:F8:A7:AE:42:42:E7:2E:87:BA:83:35 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 6C Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:51:16 +0000 ROA not before: Fri 04 Jul 2025 14:51:16 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 10076 IP address blocks: 161.248.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Jul 4 14:51:16 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea63-24a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:4f:88:8a:cf:7e:9c:a3:10:93:08:36:ce: ac:e3:7f:02:80:f2:27:d1:82:90:0d:95:9e:78:46: 6c:a5:d5:de:86:c5:a8:4c:80:ab:38:85:45:8c:cc: 4e:2a:94:2e:ac:6e:31:37:aa:b0:28:e3:ac:b5:de: df:4e:8f:0c:1a:b1:be:d3:3d:85:10:43:07:bd:03: d0:0f:45:fc:23:33:b8:81:d3:f1:c8:48:a6:5f:ae: d3:80:55:1e:74:12:bd:21:57:89:fc:bf:11:4f:8b: ef:c4:41:91:3b:c6:7a:aa:a1:d0:de:83:2b:ff:26: 86:00:b9:4a:6d:2b:6a:c0:ac:c9:c8:36:68:ec:cf: fc:56:31:58:2a:72:fa:0d:4a:03:e7:de:c6:2a:bb: 2a:a7:20:e0:25:29:75:de:77:7e:28:05:bd:53:b7: 05:53:eb:45:1f:9b:37:d9:d4:c4:00:86:54:8a:64: 1c:79:6b:d1:7d:22:03:1d:7b:a3:05:8b:4c:9f:8c: 0b:3a:96:3c:cb:ed:47:72:4a:44:e6:99:56:6e:a1: 4c:4e:ea:ce:17:e5:1f:52:63:6d:e4:1d:ef:2f:35: 2f:02:32:2e:85:3c:70:54:15:1c:d1:ae:25:6d:59: a4:08:8d:ad:b0:fa:ac:53:8f:d7:ab:74:05:5c:1d: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:99:6B:B7:B6:21:D2:AF:F8:A7:AE:42:42:E7:2E:87:BA:83:35 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.142.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:19:61:fe:02:cc:6f:f7:da:5e:ee:10:f1:da:2f:2d:0d:47: 8d:63:9c:ae:c5:52:d6:c5:73:a0:74:89:70:4d:c6:8a:9f:81: 39:a5:37:20:a9:d9:16:ca:e5:1a:29:6b:b7:b0:9c:c1:16:05: a4:67:4a:1d:6d:0b:7a:8b:0c:57:00:37:a1:34:74:af:10:c1: 3e:53:d5:f5:e2:97:eb:d2:26:a9:9d:37:0f:ba:04:20:40:f3: ac:91:1b:33:29:84:39:33:78:09:76:1f:4c:fe:3c:cf:1c:5d: fb:7a:7e:c7:a8:81:9b:03:a5:57:a3:56:6d:b5:50:c8:c7:f3: 19:28:f8:36:62:23:9e:be:29:87:8d:9e:70:df:84:5a:e0:c1: f0:2f:35:1d:76:79:e4:33:61:04:42:dc:2e:a0:62:5f:b5:66: 86:50:ba:6f:d6:79:9d:75:fd:9f:a1:6b:c2:1f:b8:bd:1a:48: f8:4b:0a:b1:3f:90:d3:c9:46:3d:30:26:b5:44:61:b2:d6:cd: e6:1a:8d:57:a4:13:f8:15:77:72:a8:2f:9b:fc:09:7f:32:53: 7a:23:1a:f7:2e:69:94:f5:c6:69:98:a0:28:37:aa:5c:19:ee: a7:b5:c5:1b:73:93:59:67:38:9e:7e:69:f2:c8:67:52:c3:9b: 30:0d:55:c9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA3MDQxNDUxMTZaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjdlYTYzLTI0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4CE+Iis9+nKMQkwg2zqzjfwKA8ifRgpANlZ54Rmyl1d6GxahMgKs4hUWMzE4q lC6sbjE3qrAo46y13t9Ojwwasb7TPYUQQwe9A9APRfwjM7iB0/HISKZfrtOAVR50 Er0hV4n8vxFPi+/EQZE7xnqqodDegyv/JoYAuUptK2rArMnINmjsz/xWMVgqcvoN SgPn3sYquyqnIOAlKXXed34oBb1TtwVT60UfmzfZ1MQAhlSKZBx5a9F9IgMde6MF i0yfjAs6ljzL7UdySkTmmVZuoUxO6s4X5R9SY23kHe8vNS8CMi6FPHBUFRzRriVt WaQIja2w+qxTj9erdAVcHfqFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU2/mZa7e2 IdKv+KeuQkLnLoe6gzUwHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi9BRTVEMEU4NEVF QkQxMUVGQkEyRDc1ODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4jjANBgkqhkiG9w0BAQsFAAOCAQEAbRlh/gLMb/faXu4Q 8dovLQ1HjWOcrsVS1sVzoHSJcE3Gip+BOaU3IKnZFsrlGilrt7CcwRYFpGdKHW0L eosMVwA3oTR0rxDBPlPV9eKX69ImqZ03D7oEIEDzrJEbMymEOTN4CXYfTP48zxxd +3p+x6iBmwOlV6NWbbVQyMfzGSj4NmIjnr4ph42ecN+EWuDB8C81HXZ55DNhBELc LqBiX7VmhlC6b9Z5nXX9n6Frwh+4vRpI+EsKsT+Q08lGPTAmtURhstbN5hqNV6QT +BV3cqgvm/wJfzJTeiMa9y5plPXGaZigKDeqXBnup7XFG3OTWWc4nn5p8shnUsOb MA1VyQ== -----END CERTIFICATE-----Generated at Fri Jul 4 21:51:45 2025 by rpki-client