$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa File: 56494EB6DD5F11EFA1B96834C4F9AE02.roa (raw, json) Hash identifier: 8LNGRPya3PEaduDErSJUs1SdqlVxpUJCc4+2V8dWGlQ= Subject key identifier: E2:7A:35:A6:C0:99:64:17:C5:B5:A8:E8:12:D4:1A:73:04:CE:1A:6A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DD5 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:18 +0000 ROA not before: Thu 08 May 2025 15:54:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152522 IP address blocks: 160.22.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7637 (0x1dd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3a9-2ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:d4:60:36:a3:fc:62:d7:08:8e:7d:74:77: a1:74:f5:83:c1:7a:d0:42:be:c0:b3:e2:12:07:33: c6:f9:f1:eb:ea:07:4b:fd:5c:09:d9:cd:5b:e2:58: 43:b0:73:f1:0f:45:74:87:e5:71:18:fe:00:18:8c: bd:74:32:cc:38:04:70:da:a9:4c:6f:9f:66:45:84: a2:92:49:e1:b8:2d:6a:4f:ca:d5:5f:79:06:6a:81: a0:28:d8:f2:83:b4:32:9e:86:55:39:aa:e7:5b:dd: 57:d4:32:eb:98:1a:1d:1d:18:13:08:35:60:65:3c: 31:94:53:13:83:d1:c4:e0:a4:21:b0:91:6f:33:4d: 49:2d:0d:9c:bb:e5:20:94:15:19:9d:44:86:af:94: 7c:4d:1c:de:8d:df:0e:4a:69:1f:bd:d2:e7:9e:cf: c2:94:b8:ac:54:6e:97:b2:ac:c6:94:69:cc:29:c2: e1:0c:4b:9f:0f:0e:e7:b7:23:12:40:12:23:41:e6: 97:04:cd:44:f6:36:c5:2d:46:4b:3a:81:f6:70:dc: 42:97:a1:18:40:37:ae:ed:9e:a6:65:00:69:68:8e: 81:52:8f:0e:f6:c0:33:75:0a:a8:ae:0a:9b:9e:8d: 97:55:25:fb:d1:e2:7b:fa:99:11:b1:83:bf:44:de: 3c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7A:35:A6:C0:99:64:17:C5:B5:A8:E8:12:D4:1A:73:04:CE:1A:6A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.86.0/24 Signature Algorithm: sha256WithRSAEncryption b6:5d:e7:60:97:d2:1d:94:97:ce:e3:bc:95:e5:26:ba:05:12: 41:a8:9c:66:d9:91:75:35:79:79:9d:1d:ba:37:df:cd:7d:47: 43:4c:e2:a0:8c:42:83:8c:6f:84:2f:dc:23:01:26:8f:e2:01: 69:d2:e3:44:d0:01:34:58:62:5f:21:04:1e:8f:a0:10:eb:b0: 28:63:b9:f5:f4:3d:03:62:82:18:2b:e6:ea:d6:39:8c:c7:1a: 43:b4:f8:50:fa:69:b6:d3:94:a9:5f:af:64:50:3d:bd:c7:ab: ac:ee:3e:84:7c:14:57:aa:a0:ee:7a:2e:8d:41:e6:f1:45:a5: 0f:c5:43:ed:3b:0a:02:34:1d:2f:d5:40:33:74:6a:b2:2e:44: 96:02:80:15:97:b4:75:06:74:38:90:a6:a3:08:54:b5:3a:13: a1:1a:84:85:1e:cc:ff:fb:ec:08:92:46:8c:04:9d:f9:2d:c4: ab:bb:c6:c2:9d:18:02:23:0d:62:db:8b:33:91:82:81:4a:da: 59:dd:de:83:33:2b:6c:d7:5d:f9:69:7e:53:c3:98:8b:ea:72: 92:40:23:ea:f9:0d:7b:35:3d:65:e7:69:33:29:da:2d:c4:a2: 10:a0:11:a5:59:94:a3:2f:4b:54:b7:03:a2:d8:d6:93:99:e2: f2:b2:29:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhOS0yZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvPUYDaj/GLXCI59dHehdPWDwXrQQr7As+ISBzPG+fHr6gdL/VwJ2c1b4lhD sHPxD0V0h+VxGP4AGIy9dDLMOARw2qlMb59mRYSikknhuC1qT8rVX3kGaoGgKNjy g7QynoZVOarnW91X1DLrmBodHRgTCDVgZTwxlFMTg9HE4KQhsJFvM01JLQ2cu+Ug lBUZnUSGr5R8TRzejd8OSmkfvdLnns/ClLisVG6XsqzGlGnMKcLhDEufDw7ntyMS QBIjQeaXBM1E9jbFLUZLOoH2cNxCl6EYQDeu7Z6mZQBpaI6BUo8O9sAzdQqorgqb no2XVSX70eJ7+pkRsYO/RN48RQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOJ6NabA mWQXxbWo6BLUGnMEzhpqMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTY0OTRFQjZE RDVGMTFFRkExQjk2ODM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFlYwDQYJKoZIhvcNAQELBQADggEBALZd52CX0h2Ul87j vJXlJroFEkGonGbZkXU1eXmdHbo33819R0NM4qCMQoOMb4Qv3CMBJo/iAWnS40TQ ATRYYl8hBB6PoBDrsChjufX0PQNighgr5urWOYzHGkO0+FD6abbTlKlfr2RQPb3H q6zuPoR8FFeqoO56Lo1B5vFFpQ/FQ+07CgI0HS/VQDN0arIuRJYCgBWXtHUGdDiQ pqMIVLU6E6EahIUezP/77AiSRowEnfktxKu7xsKdGAIjDWLbizORgoFK2lnd3oMz K2zXXflpflPDmIvqcpJAI+r5DXs1PWXnaTMp2i3EohCgEaVZlKMvS1S3A6LY1pOZ 4vKyKWY= -----END CERTIFICATE-----Generated at Sun May 11 00:58:25 2025 by rpki-client