$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa File: 256914F0981A11EFB7D55339C4F9AE02.roa (raw, json) Hash identifier: baevmcoQeL9nahO4cVRiAcht3+IX9we1hsFoXC1uOEQ= Subject key identifier: 71:70:81:B0:CD:A6:09:38:60:52:D2:6C:26:65:84:B5:3B:39:45:E8 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D3F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:04 +0000 ROA not before: Thu 08 May 2025 15:52:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132559 IP address blocks: 160.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7487 (0x1d3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd324-40f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:1b:00:f0:72:37:45:09:a1:1c:5d:ac:5a: 1c:a3:9d:b6:1b:77:d8:f2:9b:d9:d0:60:e2:e9:9f: 72:ab:7e:8b:98:30:16:19:92:4b:5c:cf:c4:17:8f: 66:89:51:2f:05:56:02:80:be:ae:9c:ed:13:da:b5: c7:10:d4:49:02:88:ef:d7:90:f7:4d:ed:b6:52:92: b9:ff:f0:54:b8:58:45:f0:8b:a2:5f:d4:de:9e:4f: b6:47:ae:6a:63:26:c9:91:04:3b:a2:fc:32:ef:f8: d6:e8:0f:a2:7d:96:39:60:3a:7a:90:f3:4b:5a:88: 17:e9:6e:52:6c:6a:d7:f3:49:ee:34:c4:4b:dc:96: 37:8c:fe:89:b2:4d:44:a3:e5:63:67:07:3e:fd:38: f5:9a:78:d0:da:48:bf:8d:57:c5:a2:84:83:8c:63: 02:f1:c7:10:01:2d:8c:88:32:66:54:e0:3f:da:2c: 06:5c:b5:42:80:f9:79:b1:1b:d7:20:67:44:bd:3b: f2:54:60:1e:a9:5c:15:89:e4:a5:d3:fc:79:d7:90: fe:b7:81:c8:cd:91:9f:12:c6:ed:df:f3:2f:15:c6: 77:7c:05:d5:f1:a7:25:c3:9f:47:f1:9d:16:47:a9: 41:24:c0:09:c1:16:9f:7d:93:1e:54:64:08:cb:31: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:70:81:B0:CD:A6:09:38:60:52:D2:6C:26:65:84:B5:3B:39:45:E8 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.87.0/24 Signature Algorithm: sha256WithRSAEncryption c9:fc:39:61:ff:6c:e9:45:90:de:cd:99:8d:d7:87:40:85:57: 8f:d3:f3:07:2a:6c:8e:eb:7e:1c:4c:92:60:66:09:1b:b1:e6: bc:2a:44:76:6b:40:3c:37:2c:5c:90:50:49:08:bc:73:4b:23: 90:b4:e3:be:33:59:90:6e:f4:7d:da:6d:f6:e6:9f:85:9e:87: bf:8e:3a:b7:3b:88:62:1b:3d:e5:f4:aa:73:7e:46:52:bd:00: 4e:27:05:c9:21:77:71:21:bf:51:ae:93:c8:50:16:bf:7d:3e: eb:67:37:8f:87:73:44:5d:31:1a:6b:2b:c3:59:b9:38:7e:4a: 7e:ab:a0:58:22:07:a3:6d:13:4e:33:ef:41:47:a9:23:48:a1: 41:98:f1:65:ef:fa:a0:20:7c:97:06:58:f1:44:aa:8c:70:d9: b3:2a:83:17:5e:f5:e1:5c:d7:71:d3:e6:8c:63:ea:db:59:77: bd:0c:4f:a6:fd:f9:d1:9b:4f:74:31:73:7f:ff:1a:20:21:0b: 73:b2:69:9d:2a:3d:07:6a:7a:be:3c:2a:9d:bf:5f:16:17:8e: 5d:bd:c8:78:3b:0a:bd:ec:f1:da:0c:1d:c3:fb:06:11:37:78: ec:30:33:5c:f4:65:be:9b:41:ef:39:0d:fe:c7:a8:89:26:36: 92:6a:71:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMyNC00MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NgbAPByN0UJoRxdrFoco522G3fY8pvZ0GDi6Z9yq36LmDAWGZJLXM/EF49m iVEvBVYCgL6unO0T2rXHENRJAojv15D3Te22UpK5//BUuFhF8IuiX9Tenk+2R65q YybJkQQ7ovwy7/jW6A+ifZY5YDp6kPNLWogX6W5SbGrX80nuNMRL3JY3jP6Jsk1E o+VjZwc+/Tj1mnjQ2ki/jVfFooSDjGMC8ccQAS2MiDJmVOA/2iwGXLVCgPl5sRvX IGdEvTvyVGAeqVwVieSl0/x515D+t4HIzZGfEsbt3/MvFcZ3fAXV8aclw59H8Z0W R6lBJMAJwRaffZMeVGQIyzHCxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFwgbDN pgk4YFLSbCZlhLU7OUXoMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjU2OTE0RjA5 ODFBMTFFRkI3RDU1MzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFlcwDQYJKoZIhvcNAQELBQADggEBAMn8OWH/bOlFkN7N mY3Xh0CFV4/T8wcqbI7rfhxMkmBmCRux5rwqRHZrQDw3LFyQUEkIvHNLI5C0474z WZBu9H3abfbmn4Weh7+OOrc7iGIbPeX0qnN+RlK9AE4nBckhd3Ehv1Guk8hQFr99 PutnN4+Hc0RdMRprK8NZuTh+Sn6roFgiB6NtE04z70FHqSNIoUGY8WXv+qAgfJcG WPFEqoxw2bMqgxde9eFc13HT5oxj6ttZd70MT6b9+dGbT3Qxc3//GiAhC3OyaZ0q PQdqer48Kp2/XxYXjl29yHg7Cr3s8doMHcP7BhE3eOwwM1z0Zb6bQe85Df7HqIkm NpJqceM= -----END CERTIFICATE-----Generated at Sun May 11 22:36:36 2025 by rpki-client