$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa File: 8651A204EAC311EF98912624C4F9AE02.roa (raw, json) Hash identifier: mTB3lhf6omL0D0HnwCuMukLrKsN66jkVN4l06R+Irgs= Subject key identifier: 57:D2:5D:94:4D:D0:4B:A2:4E:39:28:1A:54:8A:18:F6:9E:2C:FA:55 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E1F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:25 +0000 ROA not before: Thu 08 May 2025 15:55:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153284 IP address blocks: 161.248.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7711 (0x1e1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3ec-a36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:1c:79:4d:3c:f2:85:f5:12:64:92:8b:51: ce:a8:6d:4f:3f:db:59:d5:97:6d:a4:2a:52:7e:7d: 56:74:93:1c:43:ae:36:fc:8a:1e:59:0c:af:27:f6: 0b:1e:0d:99:2e:1f:12:14:81:5c:df:29:0b:2f:7e: 84:02:2f:89:43:0f:e7:fb:50:4b:bd:90:33:eb:5c: 20:be:19:7e:45:59:a7:81:f3:62:65:66:56:6e:7b: 20:ba:ec:ec:03:74:c9:e6:d0:10:b1:71:dc:a7:68: 50:f3:7d:53:a2:01:b6:36:66:5e:13:37:ec:97:fc: 37:e5:b6:d5:3f:e8:29:7c:05:4d:60:fa:6a:ad:a8: de:7c:56:88:79:24:e2:60:99:ef:ca:07:a4:80:6f: e0:8e:dc:83:b4:a6:6a:e1:c3:0c:f2:8c:a6:7b:11: b9:38:4f:71:65:df:d0:7c:83:b2:dc:b8:b1:8d:61: 51:39:f2:ff:aa:65:53:f2:b6:46:eb:e1:fe:c2:0f: b8:52:81:19:f0:ef:17:b9:be:0f:86:05:fb:08:60: e8:a4:ac:40:82:32:7a:17:c1:f7:81:cf:1e:2a:53: 2d:02:ac:7d:71:58:13:2e:b3:13:b6:34:bb:63:a3: ce:7d:31:c8:0d:30:c0:c8:88:8e:73:14:8c:bf:1c: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D2:5D:94:4D:D0:4B:A2:4E:39:28:1A:54:8A:18:F6:9E:2C:FA:55 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.18.0/23 Signature Algorithm: sha256WithRSAEncryption 06:b3:51:3a:de:2f:8f:fd:85:f2:ef:b4:e0:b0:13:ed:0e:b6: 24:b0:21:c6:e1:44:fe:ed:9b:3b:bd:a5:73:b4:5a:2d:ce:ac: 86:28:f4:05:54:73:b9:64:76:d8:bf:e7:1b:05:9a:8a:d3:3c: ad:41:f2:d0:2e:84:1b:b5:38:bd:61:de:ac:d1:90:ee:46:5a: 63:3b:33:10:38:95:fe:e7:9b:a3:a9:eb:c5:a3:83:57:89:8a: 83:8f:8f:6d:28:08:6c:f2:67:c1:8b:a9:c6:2f:65:d3:ef:3c: d0:b9:93:16:0c:0d:0c:c5:de:b1:2c:c5:73:a5:82:ad:37:dd: e7:91:b1:a0:03:45:80:f7:31:33:76:9e:d8:4d:9a:fc:8f:84: a9:29:df:e3:ad:79:59:1e:6a:b6:aa:4d:70:0a:8e:8a:b5:83: 17:25:70:ae:52:1c:c0:a1:43:4c:bd:9b:a8:26:65:62:ca:a2: 41:56:91:7f:b5:d0:1e:2f:4b:d6:27:fb:20:13:1d:2c:64:d0: 51:c7:7b:17:24:8a:55:5d:36:5d:7d:a4:12:bd:ee:24:80:db: 51:ee:6b:02:08:3d:2b:3a:45:74:8d:ec:c3:af:fb:cd:03:cc: 7e:01:39:e7:25:bc:a2:15:b9:fa:22:df:24:0a:c9:e0:b9:f1: c5:f0:d0:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNlYy1hMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJoceU088oX1EmSSi1HOqG1PP9tZ1ZdtpCpSfn1WdJMcQ642/IoeWQyvJ/YL Hg2ZLh8SFIFc3ykLL36EAi+JQw/n+1BLvZAz61wgvhl+RVmngfNiZWZWbnsguuzs A3TJ5tAQsXHcp2hQ831TogG2NmZeEzfsl/w35bbVP+gpfAVNYPpqrajefFaIeSTi YJnvygekgG/gjtyDtKZq4cMM8oymexG5OE9xZd/QfIOy3LixjWFROfL/qmVT8rZG 6+H+wg+4UoEZ8O8Xub4PhgX7CGDopKxAgjJ6F8H3gc8eKlMtAqx9cVgTLrMTtjS7 Y6POfTHIDTDAyIiOcxSMvxwE8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFfSXZRN 0EuiTjkoGlSKGPaeLPpVMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODY1MUEyMDRF QUMzMTFFRjk4OTEyNjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+BIwDQYJKoZIhvcNAQELBQADggEBAAazUTreL4/9hfLv tOCwE+0OtiSwIcbhRP7tmzu9pXO0Wi3OrIYo9AVUc7lkdti/5xsFmorTPK1B8tAu hBu1OL1h3qzRkO5GWmM7MxA4lf7nm6Op68Wjg1eJioOPj20oCGzyZ8GLqcYvZdPv PNC5kxYMDQzF3rEsxXOlgq033eeRsaADRYD3MTN2nthNmvyPhKkp3+OteVkearaq TXAKjoq1gxclcK5SHMChQ0y9m6gmZWLKokFWkX+10B4vS9Yn+yATHSxk0FHHexck ilVdNl19pBK97iSA21HuawIIPSs6RXSN7MOv+80DzH4BOeclvKIVufoi3yQKyeC5 8cXw0IE= -----END CERTIFICATE-----Generated at Thu May 15 07:03:39 2025 by rpki-client