$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3F1B06FA2E0811EFBCB2E321C4F9AE02.roa File: 3F1B06FA2E0811EFBCB2E321C4F9AE02.roa (raw, json) Hash identifier: BHntjOv+VCe+Udq8Fbj/1/bNXOKaBbrsXrqnnBhfV2A= Subject key identifier: BE:02:6F:EC:23:37:33:BC:FB:FC:F0:D7:22:EC:83:4B:E0:0A:D6:B7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DD8 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3F1B06FA2E0811EFBCB2E321C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:21 +0000 ROA not before: Thu 08 May 2025 15:54:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152526 IP address blocks: 160.19.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7640 (0x1dd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3ac-20b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:0d:4d:cd:4a:76:fe:9c:b4:60:1e:ec:db: 47:7f:16:f1:aa:fd:b1:62:66:5e:e4:92:61:de:42: 5b:fe:1f:4b:38:2e:f8:96:6c:91:cc:65:91:79:d6: 78:ad:e3:c6:74:6c:b5:13:44:da:a8:0a:cc:cd:02: 56:b3:77:12:d3:77:23:88:e4:b4:a7:77:9b:06:ae: 79:9f:c6:35:36:3e:99:21:3d:39:7f:5a:d4:1a:9c: 8d:f2:1a:18:88:95:b5:92:af:a2:48:82:8a:2d:c5: 71:e6:4a:ad:08:47:43:55:e6:c5:08:fa:e0:fb:74: e2:da:55:e2:6e:57:2e:33:cd:c2:d7:63:91:1c:eb: 5d:0b:03:5a:62:84:0f:52:a1:91:4b:6f:33:2d:8c: 19:c6:99:c7:c4:00:47:2c:66:e2:4d:0a:7e:7f:5e: aa:ed:c1:21:58:b2:a2:b0:7b:8f:ca:08:e8:76:d0: 9f:45:14:51:db:fb:1a:ff:37:8b:23:6a:ed:d0:23: a2:36:c3:cd:ac:8a:d3:6b:ca:61:c1:36:fa:8d:a4: 9c:d7:0d:1d:4a:cd:c1:c4:31:0f:2f:94:3c:f7:e6: 24:c5:37:39:5a:e2:99:73:e0:f4:d9:0c:c2:5e:d7: 49:e2:a4:e1:b5:40:a8:1f:a1:d0:85:dd:95:4e:62: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:6F:EC:23:37:33:BC:FB:FC:F0:D7:22:EC:83:4B:E0:0A:D6:B7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3F1B06FA2E0811EFBCB2E321C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.19.74.0/23 Signature Algorithm: sha256WithRSAEncryption 88:33:68:7d:30:ac:02:5f:32:6f:b2:6c:03:47:bc:f4:03:56: 73:3a:1e:fd:81:34:13:2d:a8:aa:6c:f8:10:df:97:7f:32:9f: 18:2d:38:d9:35:49:c0:df:84:b2:f4:86:01:92:43:12:21:96: e3:0e:b0:85:c3:d1:8e:88:45:ea:59:14:4a:71:0f:64:91:f9: 0b:b1:7f:1f:cc:f6:b3:2c:c6:0a:c1:95:2d:29:a4:70:e0:46: 30:ea:87:55:96:7d:f9:8b:c0:1a:61:92:e0:f8:cc:3e:8b:26: 3c:9a:42:59:e6:e0:71:e2:d3:b1:ca:80:18:5e:ac:53:e0:8d: 1c:55:e5:5c:fe:66:72:e3:a8:0d:2a:32:70:73:e8:01:fb:fc: fc:39:31:84:81:af:d5:b0:bc:58:0b:6e:0a:45:79:7e:9f:29: cb:65:48:5a:5b:c4:0c:2e:54:f1:5c:4d:29:53:97:4e:a2:d6: f9:ef:1f:3d:f5:b0:f9:6b:76:46:1e:e4:c9:64:5e:bf:cc:a2: 0d:93:e3:a5:fc:96:7e:7c:fd:23:29:54:b3:92:ea:fc:c5:ef: fd:1b:33:88:44:1d:4d:ff:45:22:22:6f:70:65:b5:4b:2e:08: 9c:d7:5b:8e:fb:b0:da:86:b0:c3:aa:d2:1f:ea:a0:28:28:94: 3c:28:51:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhYy0yMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq8NTc1Kdv6ctGAe7NtHfxbxqv2xYmZe5JJh3kJb/h9LOC74lmyRzGWRedZ4 rePGdGy1E0TaqArMzQJWs3cS03cjiOS0p3ebBq55n8Y1Nj6ZIT05f1rUGpyN8hoY iJW1kq+iSIKKLcVx5kqtCEdDVebFCPrg+3Ti2lXiblcuM83C12ORHOtdCwNaYoQP UqGRS28zLYwZxpnHxABHLGbiTQp+f16q7cEhWLKisHuPygjodtCfRRRR2/sa/zeL I2rt0COiNsPNrIrTa8phwTb6jaSc1w0dSs3BxDEPL5Q89+YkxTc5WuKZc+D02QzC XtdJ4qThtUCoH6HQhd2VTmLt8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFL4Cb+wj NzO8+/zw1yLsg0vgCta3MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0YxQjA2RkEy RTA4MTFFRkJDQjJFMzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgE0owDQYJKoZIhvcNAQELBQADggEBAIgzaH0wrAJfMm+y bANHvPQDVnM6Hv2BNBMtqKps+BDfl38ynxgtONk1ScDfhLL0hgGSQxIhluMOsIXD 0Y6IRepZFEpxD2SR+Quxfx/M9rMsxgrBlS0ppHDgRjDqh1WWffmLwBphkuD4zD6L JjyaQlnm4HHi07HKgBherFPgjRxV5Vz+ZnLjqA0qMnBz6AH7/Pw5MYSBr9WwvFgL bgpFeX6fKctlSFpbxAwuVPFcTSlTl06i1vnvHz31sPlrdkYe5MlkXr/Mog2T46X8 ln58/SMpVLOS6vzF7/0bM4hEHU3/RSIib3BltUsuCJzXW477sNqGsMOq0h/qoCgo lDwoUT4= -----END CERTIFICATE-----Generated at Sun May 11 17:02:53 2025 by rpki-client