$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa File: 56A321D62F9811EFBE3F3324C4F9AE02.roa (raw, json) Hash identifier: P/7yR5lgezLl9RBU8to9R3DtRZrZh44YuIDmqP8XMdk= Subject key identifier: 01:99:76:18:A0:46:C0:7E:23:8F:E5:57:71:7F:29:BC:16:3E:9C:B2 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DDF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:27 +0000 ROA not before: Thu 08 May 2025 15:54:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152535 IP address blocks: 160.22.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7647 (0x1ddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3b3-8714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:f5:40:e1:f0:59:32:7d:62:e8:78:5c:2e: b7:0d:d9:86:6b:0f:bb:d4:05:8b:de:b5:56:07:39: 5f:37:49:33:ec:60:d4:2e:ca:d4:40:11:9b:f1:16: e6:67:50:2d:ad:41:4d:ea:74:32:43:26:b9:8a:c9: 23:f5:1e:e2:c2:4d:64:e9:eb:e6:78:b1:b1:5f:1b: 3d:0c:93:9d:b4:a3:7f:9e:11:5d:cc:b7:7d:2b:d8: 2b:3b:95:7d:ae:61:38:3f:9e:b1:3f:15:fb:3c:14: bb:9c:05:69:21:05:48:59:50:28:7a:14:f5:9e:2a: c2:cc:ac:c9:b8:5b:fd:42:ee:17:9d:b4:1b:55:39: 6a:05:5e:69:4d:7d:e2:da:b6:c0:70:1b:1a:c8:16: 52:8a:39:47:d4:7e:fe:67:bf:ae:1a:42:a3:1d:1f: 7a:0b:10:0c:76:87:48:cc:d1:59:99:43:da:69:9a: 30:67:bc:78:7b:7b:ff:0c:c2:d5:3e:43:d3:ee:24: f6:34:65:38:b1:97:7e:c5:7f:ce:64:84:50:26:1f: 32:cf:e3:a7:7d:d8:e5:c3:76:79:99:79:bc:ba:31: f5:87:63:75:0b:7f:6a:81:1d:a0:63:11:a4:40:52: 74:d3:2d:ca:2a:08:bc:a5:a1:a2:d5:c0:b0:a3:bc: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:99:76:18:A0:46:C0:7E:23:8F:E5:57:71:7F:29:BC:16:3E:9C:B2 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56A321D62F9811EFBE3F3324C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.73.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a9:69:a5:a8:7d:4e:db:e6:64:a9:d9:f8:43:99:7f:2f:a3: 41:98:d1:6f:37:57:58:b1:e1:10:b0:e8:03:73:13:9b:b4:69: 28:10:39:d5:7e:77:12:69:1b:24:d1:96:91:92:c2:6e:1f:b2: c4:72:6a:90:ec:cc:79:75:a9:d1:21:14:b5:a7:71:17:8b:08: 20:49:f5:46:86:5c:57:e1:68:4e:44:07:51:dc:28:c2:ac:c9: 3c:9c:c0:60:ed:63:b5:5f:76:a4:9a:80:d9:51:b3:73:e9:9a: 2c:8e:a5:cd:4c:f6:90:ab:f6:2e:b4:40:a2:29:a1:88:ae:e0: 80:05:34:36:0b:47:93:ea:9d:b2:db:8a:4d:90:64:b9:97:b0: 55:fe:25:9d:41:39:01:89:e9:32:be:af:85:d2:82:d0:b7:8d: c3:f9:86:f9:f7:82:e7:74:d4:b1:dc:be:c8:70:99:97:1c:ba: 28:3c:04:f2:1b:18:7d:57:17:cb:be:69:8e:64:b6:89:52:20: f0:04:12:e8:fc:85:76:6d:61:1a:e6:ed:1d:53:fe:a3:dd:13: 3c:a9:cb:fd:95:25:eb:fb:8d:c9:cb:f5:e5:e3:06:33:de:4c: f8:5d:7e:58:f3:d4:17:0f:34:7e:49:bb:86:2c:bf:ba:cb:04: 86:0b:47:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNiMy04NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV71QOHwWTJ9Yuh4XC63DdmGaw+71AWL3rVWBzlfN0kz7GDULsrUQBGb8Rbm Z1AtrUFN6nQyQya5iskj9R7iwk1k6evmeLGxXxs9DJOdtKN/nhFdzLd9K9grO5V9 rmE4P56xPxX7PBS7nAVpIQVIWVAoehT1nirCzKzJuFv9Qu4XnbQbVTlqBV5pTX3i 2rbAcBsayBZSijlH1H7+Z7+uGkKjHR96CxAMdodIzNFZmUPaaZowZ7x4e3v/DMLV PkPT7iT2NGU4sZd+xX/OZIRQJh8yz+Onfdjlw3Z5mXm8ujH1h2N1C39qgR2gYxGk QFJ00y3KKgi8paGi1cCwo7xLUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAGZdhig RsB+I4/lV3F/KbwWPpyyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTZBMzIxRDYy Rjk4MTFFRkJFM0YzMzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFkkwDQYJKoZIhvcNAQELBQADggEBAESpaaWofU7b5mSp 2fhDmX8vo0GY0W83V1ix4RCw6ANzE5u0aSgQOdV+dxJpGyTRlpGSwm4fssRyapDs zHl1qdEhFLWncReLCCBJ9UaGXFfhaE5EB1HcKMKsyTycwGDtY7VfdqSagNlRs3Pp miyOpc1M9pCr9i60QKIpoYiu4IAFNDYLR5PqnbLbik2QZLmXsFX+JZ1BOQGJ6TK+ r4XSgtC3jcP5hvn3gud01LHcvshwmZccuig8BPIbGH1XF8u+aY5ktolSIPAEEuj8 hXZtYRrm7R1T/qPdEzypy/2VJev7jcnL9eXjBjPeTPhdfljz1BcPNH5Ju4Ysv7rL BIYLRxs= -----END CERTIFICATE-----Generated at Mon May 12 07:26:57 2025 by rpki-client