$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa File: 94066EF0FE5C11EF942E0982C4F9AE02.roa (raw, json) Hash identifier: EZGSyWcrJKKX9qHyDMaFN/9sSLsswY6rZ2mWYbbJljg= Subject key identifier: 54:5B:4D:10:A3:18:67:B2:08:CF:D6:47:51:98:0B:5C:EF:B6:A0:20 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D51 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:22 +0000 ROA not before: Thu 08 May 2025 15:52:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135247 IP address blocks: 67.158.52.0/24 maxlen: 24 162.216.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7505 (0x1d51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd335-65ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:e8:c7:85:ac:63:ab:c2:4f:f3:f8:50:28: 17:1e:9e:c4:10:b5:42:1e:5f:b8:5d:01:f8:f8:4c: 4e:4c:c3:ff:8f:c4:b8:8c:db:31:a6:84:f6:bf:90: 61:41:a3:91:f7:d7:0b:b7:fd:17:f5:7d:91:36:1e: a0:2e:bb:9d:8e:1b:90:ba:7a:00:32:80:bb:9c:0f: 98:56:5c:66:77:54:29:1e:06:51:f7:56:29:bc:52: ab:f5:94:0c:85:d3:a3:6f:bb:b4:a9:21:cf:e1:24: 0c:11:85:63:f2:c7:5d:54:12:34:d4:15:f7:ab:7b: 28:ee:ed:ce:ca:f1:ab:81:6e:47:4a:70:3c:16:0b: 4b:68:90:63:dc:cc:ad:38:75:20:0a:61:75:ab:93: 6a:81:b5:8f:5b:aa:bb:fb:f4:64:8b:0d:48:e7:24: b9:73:64:3a:98:03:f5:5f:4c:d0:ab:be:41:8b:d6: 65:0f:1a:35:b4:16:d9:c8:77:15:09:eb:a1:78:d1: 04:9f:38:8b:0b:83:44:3f:2c:52:8a:b2:6a:89:1f: 34:f4:83:39:7b:38:08:08:f2:60:1d:9d:4c:d3:8b: 3d:0a:cb:b6:f1:f6:e0:e4:d7:0b:25:f8:dc:77:93: 7b:33:c3:d7:b4:09:76:74:d0:1a:c0:3f:31:be:16: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5B:4D:10:A3:18:67:B2:08:CF:D6:47:51:98:0B:5C:EF:B6:A0:20 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 67.158.52.0/24 162.216.140.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:70:d4:77:1e:8d:0e:07:9e:4a:46:93:59:79:1b:1e:00:f1: 49:d3:2b:1a:c2:b1:07:f7:94:c6:90:e4:1d:74:1c:cf:30:cc: 8e:04:e3:39:6d:fc:e7:42:26:30:4d:62:8a:e3:d0:e3:06:01: ea:50:c9:3c:ad:27:8e:95:15:6b:7d:65:d2:6f:b2:6b:b6:c1: f7:1f:36:2b:c0:a8:ce:b4:72:a7:50:07:36:72:c6:0c:f8:cd: 30:98:61:26:26:8f:5f:cc:22:76:5d:10:6c:06:02:87:c6:85: 98:ae:51:b3:55:9e:5f:44:4c:84:c5:fd:a0:01:9e:8f:bc:f2: d1:ef:89:53:8e:83:84:63:79:23:8f:a4:7a:d4:a5:dd:c9:a9: f2:95:d4:e1:0a:8d:38:fa:45:66:11:db:47:6b:46:a0:d3:1f: c1:58:73:46:75:35:eb:56:e4:18:84:f6:ed:20:63:2b:da:fa: ff:46:f1:7f:15:45:be:e0:97:66:0e:c0:1d:2b:b1:3c:f5:bb: 73:92:ab:2e:a1:be:3f:94:35:fe:a0:5c:0a:6b:fd:e5:71:93: 51:9d:a3:0a:ac:4d:3d:3c:c0:4c:7f:1c:da:17:5a:76:97:fd: fe:c1:f3:fa:65:33:7d:69:7c:23:6f:df:6e:79:51:41:c6:30: 59:c0:e3:13 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMzNS02NWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5vox4WsY6vCT/P4UCgXHp7EELVCHl+4XQH4+ExOTMP/j8S4jNsxpoT2v5Bh QaOR99cLt/0X9X2RNh6gLrudjhuQunoAMoC7nA+YVlxmd1QpHgZR91YpvFKr9ZQM hdOjb7u0qSHP4SQMEYVj8sddVBI01BX3q3so7u3OyvGrgW5HSnA8FgtLaJBj3Myt OHUgCmF1q5NqgbWPW6q7+/Rkiw1I5yS5c2Q6mAP1X0zQq75Bi9ZlDxo1tBbZyHcV CeuheNEEnziLC4NEPyxSirJqiR809IM5ezgICPJgHZ1M04s9Csu28fbg5NcLJfjc d5N7M8PXtAl2dNAawD8xvhY2IwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFRbTRCj GGeyCM/WR1GYC1zvtqAgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTQwNjZFRjBG RTVDMTFFRjk0MkUwOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABDnjQDBAKi2IwwDQYJKoZIhvcNAQELBQADggEBAG5w1Hce jQ4HnkpGk1l5Gx4A8UnTKxrCsQf3lMaQ5B10HM8wzI4E4zlt/OdCJjBNYorj0OMG AepQyTytJ46VFWt9ZdJvsmu2wfcfNivAqM60cqdQBzZyxgz4zTCYYSYmj1/MInZd EGwGAofGhZiuUbNVnl9ETITF/aABno+88tHviVOOg4RjeSOPpHrUpd3JqfKV1OEK jTj6RWYR20drRqDTH8FYc0Z1NetW5BiE9u0gYyva+v9G8X8VRb7gl2YOwB0rsTz1 u3OSqy6hvj+UNf6gXApr/eVxk1GdowqsTT08wEx/HNoXWnaX/f7B8/plM31pfCNv 3255UUHGMFnA4xM= -----END CERTIFICATE-----Generated at Tue May 13 08:21:57 2025 by rpki-client