$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A47347E2433411EF99F0AD40C4F9AE02.roa File: A47347E2433411EF99F0AD40C4F9AE02.roa (raw, json) Hash identifier: kfINq1blXq3b2LxyZDbs2c+isqcZCfhVAr/XkolrPSU= Subject key identifier: EF:5D:87:07:E3:F1:16:C1:89:B4:DC:D8:0E:AA:2C:6F:82:2B:6D:CB Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DE4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A47347E2433411EF99F0AD40C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:31 +0000 ROA not before: Thu 08 May 2025 15:54:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152545 IP address blocks: 160.25.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7652 (0x1de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3b7-50d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:68:63:f3:25:f9:a8:85:15:42:a9:92:eb:82: da:27:c1:fd:bf:1d:46:45:ea:57:fc:88:c0:b5:15: ab:f1:c9:65:58:a5:b7:70:09:88:ae:06:c6:cd:2c: 57:a4:1d:88:94:e7:b8:4d:b8:7d:4b:aa:10:b3:df: eb:2f:7d:a6:15:fc:62:14:42:4d:ca:d6:e6:5b:fd: 35:0a:58:a1:6e:6c:1d:30:90:4c:1e:24:2e:a3:5b: bb:4e:01:17:bc:1c:9d:ef:09:67:ba:dd:00:3d:91: aa:3d:3a:77:4f:d2:a5:e3:32:e8:32:a5:ad:21:e0: 6c:07:a8:95:d1:17:19:b5:67:98:b1:59:a6:20:55: 19:4b:75:1b:ed:7d:52:bd:76:db:90:ff:c3:f2:5f: 60:7a:7b:2f:3e:25:73:95:55:4d:71:91:94:9b:d5: b7:7c:31:65:1a:88:af:29:1a:d7:04:61:b5:cd:de: 02:18:cf:84:49:d3:1b:aa:f1:f2:3e:6f:69:c3:f1: ba:41:8c:ae:fc:6e:5d:38:44:ae:6a:89:38:89:8c: 04:04:5f:05:8c:df:d9:0c:d1:9f:33:62:14:e8:8c: e6:78:66:85:ea:9b:ec:d9:7d:f9:0c:da:5d:05:87: 2e:bb:cd:cc:9e:55:5d:3b:20:16:df:61:ea:91:be: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5D:87:07:E3:F1:16:C1:89:B4:DC:D8:0E:AA:2C:6F:82:2B:6D:CB X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A47347E2433411EF99F0AD40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.60.0/23 Signature Algorithm: sha256WithRSAEncryption 35:5f:30:91:71:34:41:96:79:84:65:be:ff:0b:87:5e:d5:de: c7:d8:7b:c6:4c:36:fc:24:58:d7:61:d1:92:ac:fb:92:ad:c0: c3:de:5f:62:15:59:39:f8:2e:c1:ae:df:99:4d:01:ad:d5:fd: 1e:17:8f:6e:5f:46:da:01:cd:b5:ad:5d:65:e9:b6:be:f0:b9: 78:18:30:0f:06:84:aa:12:22:24:e7:9d:c5:bf:32:f1:4f:71: 89:9f:a5:d9:3d:b3:49:cb:bc:f4:36:e7:ac:ac:ee:fb:47:07: 10:81:71:a6:1f:92:77:6e:ba:e8:c0:65:a9:76:1d:2f:3f:7c: ab:0d:1d:85:31:11:2a:14:47:a4:9b:07:ba:81:e2:88:e7:ac: 98:51:3a:ba:75:c8:e7:a6:0c:12:02:eb:13:c3:d0:78:af:a1: 65:1f:14:f7:d2:4c:ed:ac:ee:6b:88:bc:7e:aa:87:66:2d:6f: df:54:83:31:a5:37:b6:50:ae:ad:3e:e3:8e:22:df:14:e0:a0: 9a:ee:3a:41:33:a5:dc:fe:3e:6e:b3:73:b9:34:be:52:21:08: 0f:56:63:fc:54:f4:87:4c:82:37:75:19:38:ee:7a:93:63:e1: 5f:23:a4:ef:01:3b:2c:e7:f5:64:1a:bc:cb:cf:b1:1e:4f:9c: 59:6c:89:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNiNy01MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ghj8yX5qIUVQqmS64LaJ8H9vx1GRepX/IjAtRWr8cllWKW3cAmIrgbGzSxX pB2IlOe4Tbh9S6oQs9/rL32mFfxiFEJNytbmW/01ClihbmwdMJBMHiQuo1u7TgEX vByd7wlnut0APZGqPTp3T9Kl4zLoMqWtIeBsB6iV0RcZtWeYsVmmIFUZS3Ub7X1S vXbbkP/D8l9gensvPiVzlVVNcZGUm9W3fDFlGoivKRrXBGG1zd4CGM+ESdMbqvHy Pm9pw/G6QYyu/G5dOESuaok4iYwEBF8FjN/ZDNGfM2IU6IzmeGaF6pvs2X35DNpd BYcuu83MnlVdOyAW32Hqkb4yWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO9dhwfj 8RbBibTc2A6qLG+CK23LMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTQ3MzQ3RTI0 MzM0MTFFRjk5RjBBRDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGTwwDQYJKoZIhvcNAQELBQADggEBADVfMJFxNEGWeYRl vv8Lh17V3sfYe8ZMNvwkWNdh0ZKs+5KtwMPeX2IVWTn4LsGu35lNAa3V/R4Xj25f RtoBzbWtXWXptr7wuXgYMA8GhKoSIiTnncW/MvFPcYmfpdk9s0nLvPQ256ys7vtH BxCBcaYfknduuujAZal2HS8/fKsNHYUxESoUR6SbB7qB4ojnrJhROrp1yOemDBIC 6xPD0HivoWUfFPfSTO2s7muIvH6qh2Ytb99UgzGlN7ZQrq0+444i3xTgoJruOkEz pdz+Pm6zc7k0vlIhCA9WY/xU9IdMgjd1GTjuepNj4V8jpO8BOyzn9WQavMvPsR5P nFlsiVE= -----END CERTIFICATE-----Generated at Sun May 11 15:30:15 2025 by rpki-client