$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33CFECA04A7411F09F791C67C4F9AE02.roa File: 33CFECA04A7411F09F791C67C4F9AE02.roa (raw, json) Hash identifier: VIqK4N2A7FhCxTKhKF3vkpKfzqFu6qOXnXJUKNYjc54= Subject key identifier: CD:D4:46:F7:CF:CD:8F:D3:47:A9:9F:B4:C6:E5:BF:56:CA:AC:58:EE Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EA7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33CFECA04A7411F09F791C67C4F9AE02.roa Signing time: Mon 16 Jun 2025 05:39:00 +0000 ROA not before: Mon 16 Jun 2025 05:39:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149275 IP address blocks: 165.99.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7847 (0x1ea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 16 05:39:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684fadf3-9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:3b:a3:be:24:6c:71:6f:b9:7d:8a:9e:5f: b3:e4:8c:83:f3:07:48:9e:f1:f0:d6:af:d3:18:fa: 63:08:56:6a:ee:ac:44:58:b8:04:df:c5:7e:8a:39: 50:e1:f0:04:ed:65:03:90:e5:d2:3b:47:22:0e:25: f4:62:4b:59:33:0e:c3:62:04:86:fb:b5:32:c1:a8: ff:35:98:bc:60:ff:1d:2b:95:a2:b3:61:ca:8a:0a: 48:bf:0a:39:a8:b6:24:b8:0e:0b:b9:3a:62:50:07: 38:ff:37:4d:cf:e5:4f:9f:8d:07:db:be:f9:aa:3a: 44:5f:6d:51:0a:2f:1c:aa:e2:db:72:34:a1:ee:cb: 45:1e:4d:bd:ae:3c:56:a6:94:53:0f:ca:81:1f:fa: f8:6c:7d:74:da:96:ef:76:51:15:d7:0d:e0:0b:4b: 9d:98:93:6a:bc:3d:6f:c5:8b:30:90:9b:b5:5d:ff: 7b:08:19:da:b5:9e:f5:0b:d9:cc:c5:9f:ef:f8:73: 10:8a:32:8b:70:ea:91:38:b5:a1:2a:97:93:6e:57: 4e:ca:dc:ec:59:74:a3:2f:e3:30:26:51:17:4c:a0: d6:e9:35:79:89:1c:e9:14:fc:5f:13:eb:ad:44:98: 6b:00:ee:8c:14:91:f2:e5:49:8b:eb:6c:f8:73:0d: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D4:46:F7:CF:CD:8F:D3:47:A9:9F:B4:C6:E5:BF:56:CA:AC:58:EE X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33CFECA04A7411F09F791C67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.205.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:18:0e:21:64:ea:62:b4:f6:66:72:c2:4d:b0:59:2d:ac:32: a0:74:e3:55:d7:83:6c:8e:6f:50:6a:3d:23:e9:d0:f2:d0:2b: f5:d6:92:fb:8a:46:18:64:c1:1c:69:55:45:af:39:27:b9:2d: be:1d:db:0f:90:ba:45:6c:b9:19:bc:be:73:a4:81:0d:dc:02: 98:c7:91:95:97:81:88:ca:a8:40:77:6d:ef:8d:3a:1e:58:09: bb:3c:5e:27:23:4f:b2:31:9a:46:f7:23:e4:16:14:73:c8:2a: 78:f7:11:6c:62:6b:c1:0e:83:ef:ba:df:ef:8a:52:bd:c8:67: 5c:40:12:b6:62:96:a3:0c:50:b9:ad:05:c2:cb:2a:36:a3:34: 5a:3b:0a:e4:aa:42:e8:c9:a8:2b:d3:c9:10:13:fb:87:4d:f7: 83:ea:28:20:f2:82:ed:38:7b:ac:b0:03:28:f8:21:a9:60:ec: f2:33:a4:20:be:cb:67:5a:0b:a0:f9:6e:ad:76:a5:96:b1:8e: cc:65:c3:4a:c5:4c:2b:21:5d:cb:97:e6:51:8b:de:9e:0b:a9: 7a:8a:02:87:ef:7b:09:48:eb:7b:9d:93:0b:6c:28:70:f9:96: 36:c4:18:d4:4b:c2:7e:31:e9:c5:c1:d2:6d:5d:25:b5:3b:70: 5c:88:b4:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjE2MDUzOTAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRmYWRmMy05NDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoG87o74kbHFvuX2Knl+z5IyD8wdInvHw1q/TGPpjCFZq7qxEWLgE38V+ijlQ 4fAE7WUDkOXSO0ciDiX0YktZMw7DYgSG+7Uywaj/NZi8YP8dK5Wis2HKigpIvwo5 qLYkuA4LuTpiUAc4/zdNz+VPn40H2775qjpEX21RCi8cquLbcjSh7stFHk29rjxW ppRTD8qBH/r4bH102pbvdlEV1w3gC0udmJNqvD1vxYswkJu1Xf97CBnatZ71C9nM xZ/v+HMQijKLcOqROLWhKpeTbldOytzsWXSjL+MwJlEXTKDW6TV5iRzpFPxfE+ut RJhrAO6MFJHy5UmL62z4cw2WVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM3URvfP zY/TR6mftMblv1bKrFjuMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzNDRkVDQTA0 QTc0MTFGMDlGNzkxQzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAClY80wDQYJKoZIhvcNAQELBQADggEBAHwYDiFk6mK09mZy wk2wWS2sMqB041XXg2yOb1BqPSPp0PLQK/XWkvuKRhhkwRxpVUWvOSe5Lb4d2w+Q ukVsuRm8vnOkgQ3cApjHkZWXgYjKqEB3be+NOh5YCbs8XicjT7Ixmkb3I+QWFHPI Knj3EWxia8EOg++63++KUr3IZ1xAErZilqMMULmtBcLLKjajNFo7CuSqQujJqCvT yRAT+4dN94PqKCDygu04e6ywAyj4Ialg7PIzpCC+y2daC6D5bq12pZaxjsxlw0rF TCshXcuX5lGL3p4LqXqKAofvewlI63udkwtsKHD5ljbEGNRLwn4x6cXB0m1dJbU7 cFyItBY= -----END CERTIFICATE-----Generated at Fri Jul 4 06:20:52 2025 by rpki-client