$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa File: 529C31F82BDD11F085C9B049C4F9AE02.roa (raw, json) Hash identifier: gVzxeHgCQb9qVKfJeYgbri1nyN3C+E8hgnsUruhwUeM= Subject key identifier: 06:CC:43:D7:B9:C0:E7:B1:4D:18:69:0E:83:D8:79:17:30:68:FB:33 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D45 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:10 +0000 ROA not before: Thu 08 May 2025 15:52:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133697 IP address blocks: 165.99.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7493 (0x1d45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd32a-60ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:94:59:a4:79:eb:4a:74:80:51:2e:3b:7c: 11:a2:de:dc:e7:6a:45:70:df:bf:e3:54:bc:a8:22: 43:b2:65:b3:03:f6:44:a4:a1:47:92:33:30:7c:e3: 94:35:c7:6d:e2:5c:9a:8d:24:3a:7c:00:6a:98:fa: 97:7c:17:03:79:c3:29:fa:6e:ab:a7:ef:ca:73:6f: 94:18:62:b7:da:3b:11:85:45:8f:da:10:5b:ea:98: 50:00:3e:ec:bd:fb:c9:43:f3:6a:30:e9:0e:44:2d: 59:ea:ff:29:b3:33:0c:b9:bc:8a:ae:25:9a:23:a0: a9:47:49:f4:29:e9:1c:af:2e:3e:bc:9f:ba:2f:5e: 61:68:19:81:92:34:19:c5:df:d9:2b:f8:f0:11:fb: 3a:08:4f:f5:43:98:d1:7f:37:6e:26:6f:8c:d0:43: 1b:9f:9e:9a:77:43:00:f4:c9:3d:10:a8:6c:99:36: a9:69:04:3d:68:57:8d:f8:71:cc:07:c0:b7:ea:29: 22:15:b1:d3:1e:f2:8d:8f:fb:bf:d6:ce:74:a7:0a: 96:75:78:e4:bc:a6:0c:9f:79:34:8f:cb:1c:a1:17: c5:b2:bc:47:73:ad:59:59:48:7b:cd:d1:63:64:c6: 1a:09:bc:3b:9d:96:61:f2:e5:da:9b:af:f9:56:2b: 73:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:43:D7:B9:C0:E7:B1:4D:18:69:0E:83:D8:79:17:30:68:FB:33 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.0.0/23 Signature Algorithm: sha256WithRSAEncryption bc:78:95:4a:0a:f5:82:b1:be:ff:46:ee:a6:29:93:07:65:78: 88:1a:09:ad:4c:e8:83:75:9b:16:73:81:dc:0b:2c:10:cf:0e: c8:63:aa:8c:e0:d0:3a:4d:b7:0d:ba:ef:ba:57:96:36:31:db: 87:b2:91:a2:2f:8f:18:b8:68:1a:4a:d2:b8:a3:06:05:60:99: b4:f1:99:13:ad:f9:e2:1e:c7:e6:c5:c1:05:68:5c:88:48:54: 9e:d2:fa:fd:d1:e0:f2:05:ed:a2:17:8a:af:19:e9:df:26:f7: b5:dc:3e:98:f3:c5:12:fc:2e:2a:62:66:71:b0:de:a3:c4:12: 9d:06:45:8d:e8:09:2f:f2:45:b1:07:ae:61:e4:67:06:63:46: 92:51:4d:7e:bd:f6:c7:c9:26:7d:aa:20:89:5a:b9:6a:07:73: 61:a2:62:25:4a:15:ff:09:0e:2b:85:dd:af:62:02:ca:d8:a9: 6c:2b:b9:e9:43:6a:9d:0e:91:c2:25:34:2b:6a:cf:01:07:b2: 8f:cd:9b:5b:14:c6:db:6a:09:ea:22:0a:b7:dd:6a:18:83:8c: 6d:27:89:a3:ec:44:2b:58:c2:a8:1c:ce:0c:cc:a7:14:37:c7: a2:a1:ff:b3:c0:9d:32:d6:d1:b9:d3:9d:4c:cc:3d:ee:5a:05: 76:aa:c6:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMyYS02MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u2UWaR560p0gFEuO3wRot7c52pFcN+/41S8qCJDsmWzA/ZEpKFHkjMwfOOU Ncdt4lyajSQ6fABqmPqXfBcDecMp+m6rp+/Kc2+UGGK32jsRhUWP2hBb6phQAD7s vfvJQ/NqMOkORC1Z6v8pszMMubyKriWaI6CpR0n0Kekcry4+vJ+6L15haBmBkjQZ xd/ZK/jwEfs6CE/1Q5jRfzduJm+M0EMbn56ad0MA9Mk9EKhsmTapaQQ9aFeN+HHM B8C36ikiFbHTHvKNj/u/1s50pwqWdXjkvKYMn3k0j8scoRfFsrxHc61ZWUh7zdFj ZMYaCbw7nZZh8uXam6/5VitzgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAbMQ9e5 wOexTRhpDoPYeRcwaPszMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTI5QzMxRjgy QkREMTFGMDg1QzlCMDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGlYwAwDQYJKoZIhvcNAQELBQADggEBALx4lUoK9YKxvv9G 7qYpkwdleIgaCa1M6IN1mxZzgdwLLBDPDshjqozg0DpNtw2677pXljYx24eykaIv jxi4aBpK0rijBgVgmbTxmROt+eIex+bFwQVoXIhIVJ7S+v3R4PIF7aIXiq8Z6d8m 97XcPpjzxRL8LipiZnGw3qPEEp0GRY3oCS/yRbEHrmHkZwZjRpJRTX699sfJJn2q IIlauWoHc2GiYiVKFf8JDiuF3a9iAsrYqWwruelDap0OkcIlNCtqzwEHso/Nm1sU xttqCeoiCrfdahiDjG0niaPsRCtYwqgczgzMpxQ3x6Kh/7PAnTLW0bnTnUzMPe5a BXaqxp4= -----END CERTIFICATE-----Generated at Mon May 12 04:31:43 2025 by rpki-client