$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa File: A5CD88AA7BF111EF985B7372C4F9AE02.roa (raw, json) Hash identifier: 8bBnOKrsxxvTgObiHO9egCXsRGQ6sL+rfJjNI5nRheE= Subject key identifier: 42:2B:E1:DF:83:5F:52:94:5F:AD:15:28:99:F0:15:07:82:C6:F1:7D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E0C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:08 +0000 ROA not before: Thu 08 May 2025 15:55:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153244 IP address blocks: 160.187.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7692 (0x1e0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3dc-6542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:c4:92:5f:c0:4e:15:c5:a7:75:86:64:c6: 51:fb:ff:b8:48:bf:8d:7f:55:b7:f6:ff:1d:ae:dd: 8b:0f:19:d8:44:51:f1:2a:7f:c4:8f:f5:9f:06:39: 6f:1a:53:ca:36:4d:75:da:a0:38:a3:48:1a:75:02: 19:91:d6:67:aa:26:d6:13:de:41:4e:e3:51:26:e4: 84:59:31:24:21:4d:c8:0f:ed:b0:64:17:59:d1:de: ff:1d:0e:59:fc:ef:aa:0e:9a:bf:9a:bb:67:0b:05: 35:b0:7f:e0:61:2c:33:24:8a:d0:b8:1d:d4:41:a2: 45:96:aa:72:c1:fd:59:37:88:32:51:18:8a:cd:f6: 71:f1:3b:12:9a:97:ee:3f:f6:0b:b7:ad:44:dd:46: 1a:20:37:58:91:60:45:24:27:f9:81:3d:71:5d:72: dc:6d:b2:33:11:05:25:9f:03:d6:22:63:f5:6b:b0: f9:9f:11:71:dd:eb:56:f6:21:c2:a4:18:3e:37:93: 39:fe:ea:2e:4b:ed:88:4c:94:a5:03:d1:8b:ef:b6: 71:ec:48:df:9c:2f:e1:91:bb:25:dc:67:23:3e:c8: bc:80:35:d1:24:8b:07:fd:8d:a1:50:5b:72:8a:06: dd:fe:ca:87:b7:7d:26:88:bd:96:6d:97:51:e2:b5: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:E1:DF:83:5F:52:94:5F:AD:15:28:99:F0:15:07:82:C6:F1:7D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A5CD88AA7BF111EF985B7372C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.50.0/23 Signature Algorithm: sha256WithRSAEncryption af:4d:23:02:a1:4c:3e:45:22:22:0b:a2:5f:32:60:5b:6b:0c: b1:5d:53:bb:b6:a6:48:03:57:af:b4:95:c8:f0:95:3d:34:e0: 46:c2:ad:d2:ff:d4:ce:d5:38:26:47:87:db:2f:15:90:b3:73: 93:cf:58:dc:6d:8d:54:d3:b5:af:17:ad:06:90:6f:0a:aa:46: 8f:a3:0d:e5:2a:e4:6f:c5:04:6a:4d:4d:de:6a:f9:3f:c3:9a: 8b:e1:bb:40:92:fb:f4:f1:91:c6:3f:eb:d8:f1:55:b7:f9:92: b9:f0:11:6b:63:2d:b2:6b:8e:28:1e:62:51:a8:aa:d6:76:74: 98:03:3b:05:0e:70:45:6e:cc:de:3a:10:a4:25:26:77:13:91: 19:b4:a6:27:d8:21:2a:90:47:52:2a:99:6a:b7:cd:4e:fb:bd: 64:f2:69:6c:bd:8d:86:82:54:69:5f:d5:31:c2:a6:d6:ee:c2: 74:a4:6e:1b:9f:24:0a:46:ac:ed:95:de:65:a3:90:e7:32:be: 35:fc:e4:4e:cd:7e:9e:7f:58:d7:1d:d7:84:39:a0:03:cb:42: 83:5c:54:74:8a:9e:21:24:82:ba:8e:aa:f1:fc:16:e6:71:a0: e3:90:b0:89:72:0f:55:fb:a9:10:83:34:0d:75:03:49:a6:00: e6:28:b7:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNkYy02NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsovEkl/AThXFp3WGZMZR+/+4SL+Nf1W39v8drt2LDxnYRFHxKn/Ej/WfBjlv GlPKNk112qA4o0gadQIZkdZnqibWE95BTuNRJuSEWTEkIU3ID+2wZBdZ0d7/HQ5Z /O+qDpq/mrtnCwU1sH/gYSwzJIrQuB3UQaJFlqpywf1ZN4gyURiKzfZx8TsSmpfu P/YLt61E3UYaIDdYkWBFJCf5gT1xXXLcbbIzEQUlnwPWImP1a7D5nxFx3etW9iHC pBg+N5M5/uouS+2ITJSlA9GL77Zx7EjfnC/hkbsl3GcjPsi8gDXRJIsH/Y2hUFty igbd/sqHt30miL2WbZdR4rV0JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEIr4d+D X1KUX60VKJnwFQeCxvF9MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTVDRDg4QUE3 QkYxMTFFRjk4NUI3MzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGguzIwDQYJKoZIhvcNAQELBQADggEBAK9NIwKhTD5FIiIL ol8yYFtrDLFdU7u2pkgDV6+0lcjwlT004EbCrdL/1M7VOCZHh9svFZCzc5PPWNxt jVTTta8XrQaQbwqqRo+jDeUq5G/FBGpNTd5q+T/Dmovhu0CS+/TxkcY/69jxVbf5 krnwEWtjLbJrjigeYlGoqtZ2dJgDOwUOcEVuzN46EKQlJncTkRm0pifYISqQR1Iq mWq3zU77vWTyaWy9jYaCVGlf1THCptbuwnSkbhufJApGrO2V3mWjkOcyvjX85E7N fp5/WNcd14Q5oAPLQoNcVHSKniEkgrqOqvH8FuZxoOOQsIlyD1X7qRCDNA11A0mm AOYot8Q= -----END CERTIFICATE-----Generated at Mon May 12 07:27:44 2025 by rpki-client