$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/485A85D8E22111EFB2FDE221C4F9AE02.roa File: 485A85D8E22111EFB2FDE221C4F9AE02.roa (raw, json) Hash identifier: tf6MyGNG4U/73j14cAi2QMh+Aa37VdqbpHhN2pt9BiU= Subject key identifier: 4C:30:5D:D7:95:77:C5:4B:58:B5:7C:FA:F4:3A:E0:AF:D0:C3:0B:9F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E11 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/485A85D8E22111EFB2FDE221C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:13 +0000 ROA not before: Thu 08 May 2025 15:55:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153254 IP address blocks: 160.191.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7697 (0x1e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3e0-9b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:4a:21:78:01:3c:0c:ff:5c:ea:26:e6:93: 13:5c:86:cc:d3:42:c0:dd:23:0a:72:4b:16:e2:ad: 8d:92:a7:c5:0b:eb:5b:4c:8b:61:69:b8:47:ba:13: a6:bc:84:fa:34:18:2c:a5:fd:92:80:d6:a0:05:20: 45:b1:b6:00:82:35:74:4e:d5:7e:ea:26:42:97:4d: 78:73:42:d4:e5:e0:44:f6:af:fd:c4:78:03:92:2c: b5:2c:f5:aa:80:99:0e:f8:51:1f:bc:2d:eb:a1:17: f4:67:3d:2b:77:22:50:8f:0d:6f:44:b4:3b:7b:3e: 23:99:e9:02:57:7b:bf:d2:c0:29:00:63:8f:79:37: be:14:87:33:22:d5:15:0f:ce:3b:f2:72:e1:54:f5: 81:37:f3:1f:3b:40:ec:bd:bb:67:f1:a3:26:b6:1c: 69:51:38:99:a2:57:bb:7f:86:94:aa:a6:66:cd:3e: b8:86:ec:c9:14:62:29:d3:d8:c5:87:0e:b7:fd:f6: e8:1e:62:ba:49:c5:c2:23:34:9b:25:04:91:a4:af: 5b:78:9f:35:72:84:f7:0c:93:21:c4:ca:8e:e4:4c: 29:a5:b1:0b:a5:10:8f:8d:42:7d:ff:e7:f3:5e:b2: 83:2c:0a:b5:08:e2:c2:43:47:2e:11:08:7b:8d:17: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:5D:D7:95:77:C5:4B:58:B5:7C:FA:F4:3A:E0:AF:D0:C3:0B:9F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/485A85D8E22111EFB2FDE221C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.72.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:13:93:46:49:15:ed:8f:9c:d6:56:be:c7:31:b6:c9:8b:81: 8d:71:59:93:a7:6d:a8:83:7b:a2:b5:72:d5:32:1e:52:66:5b: 08:37:da:b6:db:1b:fb:58:4a:ba:3a:d2:14:9c:c4:97:0c:06: 33:d1:91:7b:2f:e0:b7:1e:80:82:ff:6a:c4:1d:f9:33:8a:db: f9:c0:94:2a:a3:3c:33:e4:63:b2:0e:be:58:bf:73:84:a3:6c: f9:80:0f:21:fa:98:66:ef:15:a9:cd:1f:53:b4:38:35:a9:e8: cd:2b:0d:96:a3:23:cf:53:22:03:23:1e:0d:cf:78:17:33:b9: 34:6f:4a:71:36:38:e8:75:cf:eb:08:37:20:34:42:55:10:7b: ad:60:27:e7:b2:72:ed:ff:bb:14:18:3e:8e:02:2a:b2:57:55: e2:df:8a:d2:8d:e3:69:a5:71:84:1d:38:3c:97:1f:25:3c:4f: ac:df:a4:ba:2f:65:67:a3:d1:f1:3b:3b:28:f7:c2:a8:3b:1f: 56:96:4f:58:b1:45:77:29:77:fa:88:ee:b3:a0:e8:4b:ec:b8: 44:16:4a:db:c9:95:bd:2d:fc:29:71:90:29:91:8f:d5:e6:5f: 28:08:61:0f:d0:d3:9d:e8:39:fa:c2:a6:30:df:1b:62:79:93: d3:6d:e5:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNlMC05YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJlKIXgBPAz/XOom5pMTXIbM00LA3SMKcksW4q2NkqfFC+tbTIthabhHuhOm vIT6NBgspf2SgNagBSBFsbYAgjV0TtV+6iZCl014c0LU5eBE9q/9xHgDkiy1LPWq gJkO+FEfvC3roRf0Zz0rdyJQjw1vRLQ7ez4jmekCV3u/0sApAGOPeTe+FIczItUV D8478nLhVPWBN/MfO0Dsvbtn8aMmthxpUTiZole7f4aUqqZmzT64huzJFGIp09jF hw63/fboHmK6ScXCIzSbJQSRpK9beJ81coT3DJMhxMqO5EwppbELpRCPjUJ9/+fz XrKDLAq1COLCQ0cuEQh7jRd6pwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEwwXdeV d8VLWLV8+vQ64K/QwwufMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDg1QTg1RDhF MjIxMTFFRkIyRkRFMjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv0gwDQYJKoZIhvcNAQELBQADggEBAHsTk0ZJFe2PnNZW vscxtsmLgY1xWZOnbaiDe6K1ctUyHlJmWwg32rbbG/tYSro60hScxJcMBjPRkXsv 4LcegIL/asQd+TOK2/nAlCqjPDPkY7IOvli/c4SjbPmADyH6mGbvFanNH1O0ODWp 6M0rDZajI89TIgMjHg3PeBczuTRvSnE2OOh1z+sINyA0QlUQe61gJ+eycu3/uxQY Po4CKrJXVeLfitKN42mlcYQdODyXHyU8T6zfpLovZWej0fE7Oyj3wqg7H1aWT1ix RXcpd/qI7rOg6EvsuEQWStvJlb0t/ClxkCmRj9XmXygIYQ/Q053oOfrCpjDfG2J5 k9Nt5R4= -----END CERTIFICATE-----Generated at Fri May 16 06:24:16 2025 by rpki-client