$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa File: 14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa (raw, json) Hash identifier: ngqlTMPjxbOO29nktfESYydw7OpNNoNpT21uUNiC51s= Subject key identifier: 40:84:CD:E9:E8:4A:07:7C:F2:74:4E:37:4E:1B:32:35:12:BB:FE:DE Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D7F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:02 +0000 ROA not before: Thu 08 May 2025 15:53:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141253 IP address blocks: 160.30.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7551 (0x1d7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd35e-e90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:1e:bb:a7:1d:52:ee:96:d2:5e:f6:20:13: 80:7b:5f:30:fd:d5:b4:ce:bf:ef:90:d3:aa:d7:06: 5c:6d:9f:fa:f9:dc:9c:15:3a:8f:80:fd:53:99:38: 3b:be:c1:3a:67:05:47:e9:bc:71:32:47:52:5d:d4: d2:2c:e3:a0:fd:97:d9:59:67:7d:98:06:d3:3c:98: 3a:1f:e2:a8:3a:af:63:39:cc:a6:71:4f:42:cd:23: be:88:ee:e2:b3:fb:84:86:97:d4:b7:55:11:ff:59: fc:fd:31:e1:93:d4:43:40:8d:5e:49:0f:5f:04:ad: 35:95:88:2a:0d:d0:58:c6:97:cf:59:86:7e:49:71: e4:b6:81:b8:ea:38:fe:65:bd:47:39:26:86:5e:53: b4:fa:fd:62:90:a8:eb:3f:1f:19:67:5d:09:6d:32: 93:e3:fd:22:09:41:f3:1b:d4:a3:55:c7:11:51:c6: 03:01:a4:b6:4c:8a:af:f9:ab:62:82:56:7e:1e:48: 02:87:e9:e1:53:20:de:fe:30:16:68:05:c3:31:72: 9d:98:70:d2:d9:b6:60:da:90:de:cb:40:54:1c:4f: 51:6b:f1:b9:ab:04:91:3a:d6:e8:76:69:66:5a:f1: fe:37:ca:77:f7:30:e5:e9:ee:b1:c1:f1:bb:c7:3f: 0a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:84:CD:E9:E8:4A:07:7C:F2:74:4E:37:4E:1B:32:35:12:BB:FE:DE X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/14ED9C7C5EB311EF8F9AF17EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.146.0/23 Signature Algorithm: sha256WithRSAEncryption 59:18:d6:89:04:21:5f:7a:1d:fe:0e:01:ea:8e:6c:7e:63:ea: 7c:16:f1:5e:98:5a:0c:92:c7:63:bc:9d:c3:26:fa:b4:45:b9: bc:4c:ff:80:96:f7:3f:99:9e:38:86:01:e6:e8:c6:74:3a:8e: dc:81:55:10:98:bc:e5:9e:a8:c9:15:b5:7f:e0:e3:bd:e2:8f: 63:f5:84:aa:4d:f1:85:80:46:bc:21:ca:7f:92:5f:8a:a5:8f: e0:dd:fb:ce:1f:7e:ee:e4:6b:61:f2:5c:d9:17:c0:f1:91:67: e2:88:51:7b:dd:f8:ef:96:2d:d9:9f:eb:24:b8:e9:e1:c4:47: da:9f:4e:f7:5f:f2:60:b4:52:ab:90:cb:e0:40:56:2f:45:67: 53:3f:aa:a6:6f:f5:ba:fe:22:bd:11:f9:a6:fa:44:da:44:bf: 07:80:5c:34:e9:98:6c:af:4a:49:27:fb:52:8f:14:53:e8:c6: ab:e8:e0:f4:81:6c:53:c9:cc:26:a0:03:b4:e6:f6:86:4f:82: 7e:ec:ab:59:58:f1:3e:ad:ec:1b:0f:4a:06:22:97:2f:fa:b5: 92:1a:24:b5:02:6e:5b:49:ed:d9:3b:60:2c:19:56:67:2f:84: a0:f5:a8:dc:22:88:bd:a7:1d:b8:ab:d0:39:91:6c:bb:2a:e3: 9c:43:c1:76 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM1ZS1lOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaceu6cdUu6W0l72IBOAe18w/dW0zr/vkNOq1wZcbZ/6+dycFTqPgP1TmTg7 vsE6ZwVH6bxxMkdSXdTSLOOg/ZfZWWd9mAbTPJg6H+KoOq9jOcymcU9CzSO+iO7i s/uEhpfUt1UR/1n8/THhk9RDQI1eSQ9fBK01lYgqDdBYxpfPWYZ+SXHktoG46jj+ Zb1HOSaGXlO0+v1ikKjrPx8ZZ10JbTKT4/0iCUHzG9SjVccRUcYDAaS2TIqv+ati glZ+HkgCh+nhUyDe/jAWaAXDMXKdmHDS2bZg2pDey0BUHE9Ra/G5qwSROtbodmlm WvH+N8p39zDl6e6xwfG7xz8KmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFECEzeno Sgd88nRON04bMjUSu/7eMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTRFRDlDN0M1 RUIzMTFFRjhGOUFGMTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHpIwDQYJKoZIhvcNAQELBQADggEBAFkY1okEIV96Hf4O AeqObH5j6nwW8V6YWgySx2O8ncMm+rRFubxM/4CW9z+ZnjiGAeboxnQ6jtyBVRCY vOWeqMkVtX/g473ij2P1hKpN8YWARrwhyn+SX4qlj+Dd+84ffu7ka2HyXNkXwPGR Z+KIUXvd+O+WLdmf6yS46eHER9qfTvdf8mC0UquQy+BAVi9FZ1M/qqZv9br+Ir0R +ab6RNpEvweAXDTpmGyvSkkn+1KPFFPoxqvo4PSBbFPJzCagA7Tm9oZPgn7sq1lY 8T6t7BsPSgYily/6tZIaJLUCbltJ7dk7YCwZVmcvhKD1qNwiiL2nHbir0DmRbLsq 45xDwXY= -----END CERTIFICATE-----Generated at Sun May 11 00:15:49 2025 by rpki-client