$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8144A3A227D611EF92638144C4F9AE02.roa File: 8144A3A227D611EF92638144C4F9AE02.roa (raw, json) Hash identifier: Q3KWc/vqwuhScIVcEUVYGvEu1gvp4nz3XHRUvasLO4I= Subject key identifier: 92:EE:9D:30:A2:37:2F:16:E1:3D:34:59:67:9C:AD:7F:2F:8D:C5:20 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D8C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8144A3A227D611EF92638144C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:14 +0000 ROA not before: Thu 08 May 2025 15:53:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146863 IP address blocks: 160.22.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7564 (0x1d8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd36a-240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:cf:cb:5b:d3:11:1f:65:63:de:6d:10:39: b4:5e:7a:d6:dd:06:5a:4e:ec:a5:f6:5d:61:4a:8b: 0e:b4:eb:13:7c:5f:52:da:a9:89:7c:fa:20:42:89: 06:93:ba:6c:5f:aa:29:9e:32:a7:1a:d2:17:6b:87: 97:41:fa:9f:c4:78:64:2b:05:a5:3e:69:65:ec:e6: 10:68:30:3a:c4:5d:80:bb:e0:e8:ee:b0:26:18:28: 17:f9:b7:83:01:be:75:cc:1a:25:33:9f:6e:31:6d: b5:44:42:a1:49:9c:86:74:de:00:08:f2:28:cf:d4: 21:a3:8c:5e:69:e0:f4:8a:84:d3:c9:e5:85:12:c4: cc:40:11:c1:93:ea:ea:4b:40:16:82:b1:94:ae:12: 03:ca:25:11:f7:3c:10:7d:02:0e:91:ca:13:12:ec: 26:bc:04:d0:3b:24:47:78:0a:e6:de:99:0f:90:22: d8:3e:fa:91:f3:86:44:5e:dc:41:40:d0:ad:a6:d9: 8b:19:b2:55:0f:cd:9e:fe:59:c8:b7:99:63:aa:b9: 1b:99:ff:8a:09:47:d4:c1:56:be:6f:ea:4e:6a:56: 84:5c:f6:95:61:f2:e0:0d:ca:2d:b7:f8:42:f1:0f: 6e:c4:a6:42:6e:83:ae:96:22:88:3e:36:5d:13:15: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:9D:30:A2:37:2F:16:E1:3D:34:59:67:9C:AD:7F:2F:8D:C5:20 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8144A3A227D611EF92638144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.60.0/23 Signature Algorithm: sha256WithRSAEncryption 86:41:61:87:aa:92:e1:d6:ac:c2:65:e3:e8:e1:f1:e6:4f:24: bf:d9:ae:4d:75:e2:a6:03:4d:48:2f:f3:54:f0:fa:2d:f3:97: 0a:80:aa:a4:b2:4b:97:cf:c0:76:7c:32:7a:38:a4:6e:4f:4a: 78:a6:92:2d:58:12:63:46:3f:74:f8:78:86:16:2c:2c:06:d3: ed:22:3f:ab:da:e3:18:ca:35:39:1d:cd:89:49:2b:0f:cb:2b: 72:e2:ef:25:5a:b8:ef:50:fd:e7:cc:4f:28:df:83:f0:0c:ce: 70:51:aa:77:3f:1b:99:66:ba:d1:13:39:b6:d7:95:79:28:e3: 29:80:4f:1c:cf:3c:f0:66:67:3b:ec:a3:c4:c0:c1:e0:6e:cc: ff:d2:7c:25:ef:5a:33:bc:33:38:9e:b3:61:48:2e:a4:80:f9: 6e:bc:87:07:3c:70:e1:b8:dc:6a:a9:4e:e3:c4:27:27:6e:ff: 21:90:78:ea:f2:7a:ee:fb:e3:31:c9:ba:33:d9:8e:b0:63:d0: df:8d:03:d5:b5:93:92:43:33:f2:bb:4c:99:aa:ce:c5:c3:f1: cf:98:02:c9:94:a1:6c:fb:63:34:a9:af:48:68:7b:dc:21:79: 46:1d:ca:fa:e8:cf:cb:b3:9a:94:27:9e:d6:07:45:b3:95:7b: d6:15:62:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM2YS0yNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCzPy1vTER9lY95tEDm0XnrW3QZaTuyl9l1hSosOtOsTfF9S2qmJfPogQokG k7psX6opnjKnGtIXa4eXQfqfxHhkKwWlPmll7OYQaDA6xF2Au+Do7rAmGCgX+beD Ab51zBolM59uMW21REKhSZyGdN4ACPIoz9Qho4xeaeD0ioTTyeWFEsTMQBHBk+rq S0AWgrGUrhIDyiUR9zwQfQIOkcoTEuwmvATQOyRHeArm3pkPkCLYPvqR84ZEXtxB QNCtptmLGbJVD82e/lnIt5ljqrkbmf+KCUfUwVa+b+pOalaEXPaVYfLgDcott/hC 8Q9uxKZCboOuliKIPjZdExWUQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJLunTCi Ny8W4T00WWecrX8vjcUgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODE0NEEzQTIy N0Q2MTFFRjkyNjM4MTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFjwwDQYJKoZIhvcNAQELBQADggEBAIZBYYeqkuHWrMJl 4+jh8eZPJL/Zrk114qYDTUgv81Tw+i3zlwqAqqSyS5fPwHZ8Mno4pG5PSnimki1Y EmNGP3T4eIYWLCwG0+0iP6va4xjKNTkdzYlJKw/LK3Li7yVauO9Q/efMTyjfg/AM znBRqnc/G5lmutETObbXlXko4ymATxzPPPBmZzvso8TAweBuzP/SfCXvWjO8Mzie s2FILqSA+W68hwc8cOG43GqpTuPEJydu/yGQeOryeu774zHJujPZjrBj0N+NA9W1 k5JDM/K7TJmqzsXD8c+YAsmUoWz7YzSpr0hoe9wheUYdyvroz8uzmpQnntYHRbOV e9YVYjc= -----END CERTIFICATE-----Generated at Wed May 14 20:53:03 2025 by rpki-client