$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa File: 5222D5DE9AA011EFA29FDF65C4F9AE02.roa (raw, json) Hash identifier: r1k5s4ukcMEygjyotGSmNtvNqKYE4dA6f63wiihAySY= Subject key identifier: E9:BB:39:B7:05:B4:87:8A:EB:3F:13:F0:C2:42:E9:21:6F:80:7B:33 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E06 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:01 +0000 ROA not before: Thu 08 May 2025 15:55:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153233 IP address blocks: 160.191.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7686 (0x1e06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3d4-6872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:aa:90:2a:02:6d:fb:83:75:58:63:61:0e: 04:7a:30:89:85:78:6d:2b:31:95:8d:f6:87:d4:c9: 48:dd:d8:f1:5e:30:55:a1:bf:20:34:30:e5:49:d0: d6:fc:4b:64:3f:f5:10:6e:64:d0:0a:7c:0c:3b:94: 25:a7:33:63:90:fb:c6:f8:0d:84:a7:09:4b:a3:e7: be:92:6c:55:0b:bd:0f:73:4d:03:f1:28:b7:d5:92: 81:af:15:0e:30:66:08:b5:9e:f1:51:f3:6a:78:d3: 3c:00:ae:3a:8d:83:5a:16:81:5c:1b:98:a9:6d:63: 8a:c8:f3:2b:87:34:05:4b:d3:49:07:b4:8f:fe:b1: 40:1a:56:6e:62:da:e6:70:57:4e:1f:c3:18:52:da: fe:f3:9e:f1:10:cb:d4:aa:c7:4e:04:84:09:7f:2b: ec:22:05:1e:9a:24:4c:fd:d1:b4:57:7d:aa:18:b7: f6:04:51:62:58:80:b3:36:c3:24:61:11:3f:45:b1: bb:12:e0:e9:5f:2e:2f:d2:c6:75:3c:f5:25:1f:55: 9e:3d:be:f3:88:a6:46:05:a6:c9:b1:18:29:30:a2: 77:b0:1c:9e:2c:95:16:fb:d4:f8:ab:9d:fc:6f:24: 93:02:74:c7:a6:ff:9a:6e:dd:76:9b:0b:13:b7:f1: 64:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BB:39:B7:05:B4:87:8A:EB:3F:13:F0:C2:42:E9:21:6F:80:7B:33 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.136.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:5a:a6:ff:6d:ab:c0:c5:4b:b0:87:fa:d4:cf:3e:8c:bb:16: 0b:51:c0:23:5c:41:67:c0:dc:20:02:2f:f4:9a:8d:7c:77:dc: be:93:5c:36:03:91:13:f0:0d:cb:a2:f4:e5:d0:a0:15:66:24: a0:6c:14:ba:f8:27:f3:9e:8f:be:18:53:fe:4b:b8:57:87:e1: 8c:e5:ce:fd:e9:26:c6:6a:c3:78:fd:19:18:2d:5e:31:f6:9b: 62:e3:cc:5d:02:4b:be:3b:28:f1:9c:e8:7a:c4:a4:d9:53:f4: 85:26:8c:86:ea:2a:17:6b:27:28:3a:f5:28:82:e5:01:4f:33: 1a:22:a3:0f:95:5f:c5:a1:56:ce:5f:e5:84:3c:21:8b:eb:0c: 83:2c:8f:f4:fe:b9:c3:2d:81:84:3f:bb:db:72:ca:52:fb:bd: d3:77:4b:af:fd:75:2b:b4:d4:b8:88:1d:b5:97:1c:50:bb:6c: 91:df:73:fb:a6:f4:e7:0b:a2:84:6c:2c:ca:5e:78:ba:e3:a3: 63:bf:62:8e:6c:cf:3d:e2:c8:53:fa:e5:d8:d8:f1:10:3e:45: fc:cc:da:5c:5f:bb:6f:6c:67:f5:5e:9e:31:d6:67:4c:17:d1: 0d:f7:50:49:8d:7f:be:4b:f2:95:9e:78:e3:ec:72:8b:0b:37: 22:e6:d9:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNkNC02ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEuqkCoCbfuDdVhjYQ4EejCJhXhtKzGVjfaH1MlI3djxXjBVob8gNDDlSdDW /EtkP/UQbmTQCnwMO5QlpzNjkPvG+A2EpwlLo+e+kmxVC70Pc00D8Si31ZKBrxUO MGYItZ7xUfNqeNM8AK46jYNaFoFcG5ipbWOKyPMrhzQFS9NJB7SP/rFAGlZuYtrm cFdOH8MYUtr+857xEMvUqsdOBIQJfyvsIgUemiRM/dG0V32qGLf2BFFiWICzNsMk YRE/RbG7EuDpXy4v0sZ1PPUlH1WePb7ziKZGBabJsRgpMKJ3sByeLJUW+9T4q538 bySTAnTHpv+abt12mwsTt/FkhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOm7ObcF tIeK6z8T8MJC6SFvgHszMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTIyMkQ1REU5 QUEwMTFFRkEyOUZERjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv4gwDQYJKoZIhvcNAQELBQADggEBAG9apv9tq8DFS7CH +tTPPoy7FgtRwCNcQWfA3CACL/SajXx33L6TXDYDkRPwDcui9OXQoBVmJKBsFLr4 J/Oej74YU/5LuFeH4Yzlzv3pJsZqw3j9GRgtXjH2m2LjzF0CS747KPGc6HrEpNlT 9IUmjIbqKhdrJyg69SiC5QFPMxoiow+VX8WhVs5f5YQ8IYvrDIMsj/T+ucMtgYQ/ u9tyylL7vdN3S6/9dSu01LiIHbWXHFC7bJHfc/um9OcLooRsLMpeeLrjo2O/Yo5s zz3iyFP65djY8RA+RfzM2lxfu29sZ/VenjHWZ0wX0Q33UEmNf75L8pWeeOPscosL NyLm2QY= -----END CERTIFICATE-----Generated at Sun May 11 19:00:32 2025 by rpki-client