$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa File: 6720B0E2E45511EFAEF28877C4F9AE02.roa (raw, json) Hash identifier: g3ekpASRlxB5LYgrFI1ya4Htx3+VDTAa9jo7NhQaFB0= Subject key identifier: 68:19:FB:7C:44:D1:72:11:4F:72:7D:FC:AD:8D:32:DA:DE:14:B3:9D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D5C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:31 +0000 ROA not before: Thu 08 May 2025 15:52:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135824 IP address blocks: 160.250.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7516 (0x1d5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd33f-f57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:57:39:2e:ee:55:7b:be:2a:1a:44:78:a5: da:ab:68:a4:76:91:b9:6c:1a:8f:78:72:1a:e3:f3: 00:c1:3e:e1:03:5b:fe:2a:66:bc:7e:c0:04:fc:2e: e7:25:d3:12:8c:a4:0a:fc:dc:e4:cb:a7:ab:de:9f: 9c:05:f3:a9:ad:48:ee:c7:b4:3f:7d:cd:af:b6:3e: 09:68:8a:3b:ea:b6:65:7c:a9:32:d4:87:f3:34:9c: b6:6e:cb:f4:fe:4e:fb:a8:69:2e:e1:ff:35:85:39: b2:6f:99:29:a0:c9:08:fd:1a:ac:20:f5:a3:49:78: fe:5e:c2:09:e8:66:00:fa:b1:ad:a3:68:b8:12:c7: f9:22:b1:3b:ff:cc:73:58:f0:92:a2:c2:13:3e:7b: f9:ab:2f:97:4d:1d:3f:7a:f3:98:42:28:2d:87:8e: a0:cd:93:7f:3c:69:23:e1:7d:b8:ea:e1:e6:77:f3: b5:24:82:76:16:3c:6f:14:ab:56:da:67:37:62:26: 1e:c2:dd:bd:b7:02:5f:a7:1a:0e:0f:ef:48:e7:67: a4:c0:83:92:a1:0c:be:09:bc:79:29:69:65:2d:03: c4:04:3a:ab:66:8a:91:4e:52:52:3f:73:7a:4e:31: d5:46:6a:8e:c6:b0:e0:ea:97:99:fa:fc:d9:6f:89: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:19:FB:7C:44:D1:72:11:4F:72:7D:FC:AD:8D:32:DA:DE:14:B3:9D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.236.0/23 Signature Algorithm: sha256WithRSAEncryption 08:a9:c6:9f:23:d8:6a:0f:c3:bf:ea:9d:86:6b:7f:21:2e:02: e9:38:92:68:79:7f:ed:9f:e5:d9:80:6e:c4:0d:09:d8:0e:12: aa:1d:a1:68:e2:d9:95:d9:d7:14:75:67:b2:d4:f0:95:ed:62: a0:6f:57:84:a0:d6:a4:39:cb:fa:2a:6f:71:53:38:bb:95:d9: 81:6d:b3:21:5f:6c:b4:ed:8b:37:b4:81:3b:18:b5:51:14:91: 96:d6:06:ed:20:4a:e1:e8:97:de:bd:67:ec:68:93:d8:30:5e: b7:a6:13:07:2c:37:9d:32:ba:e7:99:78:da:09:ba:0e:a2:cd: 44:a4:78:f0:a1:8c:05:f3:a3:7f:03:70:c0:e9:ed:c4:32:2a: 77:e7:cb:da:f0:27:90:02:ec:c9:45:3b:bd:81:01:76:66:bd: b7:c3:92:01:a7:a0:6a:19:d6:c5:25:0e:a7:f2:f1:c6:ef:69: 42:aa:1c:df:fc:34:33:5d:e6:24:7d:92:73:1a:38:72:82:31: f1:78:09:93:8c:30:0f:c2:50:6f:92:25:a4:bb:a0:5f:83:a4: 68:97:d6:7f:14:4f:75:7b:ed:84:e0:04:2d:8c:62:56:89:6c: b4:ec:7e:45:2b:2a:6b:30:9b:fc:d2:ea:f6:90:9d:67:56:a5: b7:db:04:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMzZi1mNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0FXOS7uVXu+KhpEeKXaq2ikdpG5bBqPeHIa4/MAwT7hA1v+Kma8fsAE/C7n JdMSjKQK/Nzky6er3p+cBfOprUjux7Q/fc2vtj4JaIo76rZlfKky1IfzNJy2bsv0 /k77qGku4f81hTmyb5kpoMkI/RqsIPWjSXj+XsIJ6GYA+rGto2i4Esf5IrE7/8xz WPCSosITPnv5qy+XTR0/evOYQigth46gzZN/PGkj4X246uHmd/O1JIJ2FjxvFKtW 2mc3YiYewt29twJfpxoOD+9I52ekwIOSoQy+Cbx5KWllLQPEBDqrZoqRTlJSP3N6 TjHVRmqOxrDg6peZ+vzZb4loVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGgZ+3xE 0XIRT3J9/K2NMtreFLOdMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjcyMEIwRTJF NDU1MTFFRkFFRjI4ODc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+uwwDQYJKoZIhvcNAQELBQADggEBAAipxp8j2GoPw7/q nYZrfyEuAuk4kmh5f+2f5dmAbsQNCdgOEqodoWji2ZXZ1xR1Z7LU8JXtYqBvV4Sg 1qQ5y/oqb3FTOLuV2YFtsyFfbLTtize0gTsYtVEUkZbWBu0gSuHol969Z+xok9gw XremEwcsN50yuueZeNoJug6izUSkePChjAXzo38DcMDp7cQyKnfny9rwJ5AC7MlF O72BAXZmvbfDkgGnoGoZ1sUlDqfy8cbvaUKqHN/8NDNd5iR9knMaOHKCMfF4CZOM MA/CUG+SJaS7oF+DpGiX1n8UT3V77YTgBC2MYlaJbLTsfkUrKmswm/zS6vaQnWdW pbfbBN0= -----END CERTIFICATE-----Generated at Mon May 12 18:53:04 2025 by rpki-client