$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa File: 35B7F66EAB1B11EF838F5C5BC4F9AE02.roa (raw, json) Hash identifier: 5qDLi2+yizkUtktEgJ6VSMvbZOLkzrWvWdEqTJr2Kso= Subject key identifier: D2:1F:9A:FA:F7:36:F8:2C:9D:C7:20:A7:80:60:34:5A:56:2C:50:69 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DE2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa Signing time: Thu 08 May 2025 15:54:30 +0000 ROA not before: Thu 08 May 2025 15:54:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152541 IP address blocks: 160.25.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7650 (0x1de2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3b5-47e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:03:b0:76:d7:86:b3:00:28:b7:78:1c:bf: af:99:d8:5d:c7:ca:2f:e0:8c:20:9a:06:cb:c0:72: 5c:0e:b3:cb:74:b7:a8:fb:55:d8:23:e7:19:1e:17: 89:36:84:7b:2d:a3:07:a4:6d:88:32:2a:6c:b0:16: 07:8f:5b:79:f5:a8:7a:3e:ce:3d:03:bc:7a:30:29: 36:f4:fa:de:2c:c5:9f:5f:71:8b:eb:3e:c7:ed:46: 68:33:ff:f4:01:88:70:83:67:df:66:41:1a:d0:b2: 06:0c:08:d1:71:99:8a:f7:9a:5f:25:fe:c7:04:c0: 90:a8:d6:8c:c8:02:04:b5:41:fc:83:66:6b:ab:57: 11:39:e3:9c:df:1e:c1:2f:1b:da:11:06:53:60:27: 3f:1b:ab:47:55:bb:b0:74:b7:c2:6b:5d:06:1c:7e: a4:5f:c6:47:00:2d:92:3b:19:24:6b:09:8c:aa:2e: 73:9d:57:ce:f5:8d:39:d9:b1:de:fc:f5:f8:f8:d6: 5a:ee:2c:56:65:75:61:e8:a2:81:18:8b:58:b8:5b: f7:91:51:90:6d:08:c8:87:4e:66:af:76:aa:a7:c3: 30:64:5c:3e:2d:31:4e:a2:c0:65:44:d8:63:3a:5c: dc:df:83:d1:76:21:f8:22:e2:fe:10:1e:41:d6:c3: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:9A:FA:F7:36:F8:2C:9D:C7:20:A7:80:60:34:5A:56:2C:50:69 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/35B7F66EAB1B11EF838F5C5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.28.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:b0:2f:b8:5e:b3:e8:3e:14:ae:70:44:c6:06:8f:df:b1:41: 57:c2:1b:f6:49:b2:e0:ba:d5:96:62:3a:a7:37:70:6c:06:c9: 2a:fd:e4:0d:4c:b1:b3:29:1c:5a:d4:1d:1a:ea:62:ed:0c:91: 31:ce:ba:fa:46:c7:a6:71:39:91:ad:b1:b6:c1:30:05:34:75: cf:68:6f:ef:43:61:ae:b3:be:c6:a8:09:01:d8:d1:73:17:7f: 1b:00:04:60:16:43:14:d3:60:48:28:2d:ab:d5:99:a5:19:c8: 5a:4f:5a:d0:5e:b8:04:91:62:e0:f4:35:86:3e:f8:1d:a7:81: 5c:e8:db:f7:b6:bc:3d:17:68:19:c6:7a:fc:f9:5c:91:42:9a: ae:4b:8e:76:44:01:fb:39:82:68:32:37:a6:21:4e:47:61:48: eb:d6:29:df:a2:bd:55:4a:de:25:72:79:a2:b8:e9:6b:8b:e2: 5c:b9:41:ed:e5:0c:19:5a:e5:28:7a:6c:20:f4:99:af:25:91: a7:7d:c2:b0:db:fa:9f:15:ac:29:d1:95:ab:05:b5:53:46:70: b6:f5:1c:83:46:1a:15:45:9a:2d:93:d8:3e:e6:28:aa:5d:60: c7:57:d2:62:b1:79:45:96:03:b2:f9:5f:84:f2:ef:c0:59:66: 86:3c:59:89 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNiNS00N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9UDsHbXhrMAKLd4HL+vmdhdx8ov4IwgmgbLwHJcDrPLdLeo+1XYI+cZHheJ NoR7LaMHpG2IMipssBYHj1t59ah6Ps49A7x6MCk29PreLMWfX3GL6z7H7UZoM//0 AYhwg2ffZkEa0LIGDAjRcZmK95pfJf7HBMCQqNaMyAIEtUH8g2Zrq1cROeOc3x7B LxvaEQZTYCc/G6tHVbuwdLfCa10GHH6kX8ZHAC2SOxkkawmMqi5znVfO9Y052bHe /PX4+NZa7ixWZXVh6KKBGItYuFv3kVGQbQjIh05mr3aqp8MwZFw+LTFOosBlRNhj Olzc34PRdiH4IuL+EB5B1sPJEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNIfmvr3 Nvgsnccgp4BgNFpWLFBpMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzVCN0Y2NkVB QjFCMTFFRjgzOEY1QzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGRwwDQYJKoZIhvcNAQELBQADggEBAA6wL7hes+g+FK5w RMYGj9+xQVfCG/ZJsuC61ZZiOqc3cGwGySr95A1MsbMpHFrUHRrqYu0MkTHOuvpG x6ZxOZGtsbbBMAU0dc9ob+9DYa6zvsaoCQHY0XMXfxsABGAWQxTTYEgoLavVmaUZ yFpPWtBeuASRYuD0NYY++B2ngVzo2/e2vD0XaBnGevz5XJFCmq5LjnZEAfs5gmgy N6YhTkdhSOvWKd+ivVVK3iVyeaK46WuL4ly5Qe3lDBla5Sh6bCD0ma8lkad9wrDb +p8VrCnRlasFtVNGcLb1HINGGhVFmi2T2D7mKKpdYMdX0mKxeUWWA7L5X4Ty78BZ ZoY8WYk= -----END CERTIFICATE-----Generated at Mon May 12 13:13:48 2025 by rpki-client