$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa File: BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa (raw, json) Hash identifier: bkIN22qB4cUcROjQPuS1xicY6HzNsQpzpVHiEy4jPXQ= Subject key identifier: 03:8E:E0:4A:DF:8D:02:53:F6:1D:A9:87:B9:0C:C8:93:FB:50:3F:34 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E26 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa Signing time: Thu 08 May 2025 15:55:30 +0000 ROA not before: Thu 08 May 2025 15:55:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153299 IP address blocks: 161.248.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7718 (0x1e26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3f2-6720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2c:b9:f1:86:fc:15:78:59:6f:ea:d6:0f:85: 37:08:ad:6d:a7:b1:23:ac:83:36:84:56:de:b2:1d: e2:97:b0:07:e0:6b:5d:b6:bf:0e:9f:0e:09:38:c3: 21:5b:80:63:28:28:00:69:5a:1c:57:16:b8:e6:0c: 4f:22:b8:7a:41:85:05:df:55:d2:c3:26:c2:14:5d: 87:4b:1e:b7:26:27:a1:f6:f1:f4:64:06:79:25:e1: d9:ad:31:01:49:b4:eb:1c:4a:b0:39:d2:13:bb:75: b9:0d:5e:e2:13:ca:ed:4a:90:d8:b9:c9:62:d4:e4: 3b:17:00:47:ae:bf:64:38:b8:f1:78:29:9d:c7:28: f6:ef:3d:e4:fd:28:60:c2:da:e4:9b:67:eb:bf:c6: 29:a5:fd:67:47:1a:46:b8:d3:ea:44:d2:91:b9:96: c9:23:8c:12:42:3f:55:94:3b:2b:58:3d:f2:eb:a5: 74:dc:28:86:d0:94:0f:7c:be:db:17:76:63:90:cb: 08:ab:7a:cc:5f:6a:58:38:26:9e:0f:7c:a9:8e:d3: a9:b1:04:1f:3a:a0:69:45:4e:e7:b5:d1:1a:6b:1d: ec:18:1d:83:a2:48:e6:96:92:b5:b4:12:32:94:ea: 0f:d0:99:fb:16:47:dc:d4:7c:7d:f2:27:27:32:3e: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:E0:4A:DF:8D:02:53:F6:1D:A9:87:B9:0C:C8:93:FB:50:3F:34 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.230.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:71:88:57:05:c6:19:0f:f4:e4:e1:01:ff:dd:eb:91:8b:66: ff:4b:cd:d9:3c:67:c2:01:96:0f:99:89:00:db:6e:31:43:81: 83:bf:c9:e8:ae:e3:e9:5b:6d:fc:92:a3:02:14:74:c1:3b:5c: 95:2f:54:56:56:a2:db:5f:72:a1:23:fd:84:48:af:42:12:63: 3c:1f:ee:ff:14:7f:b4:0c:67:31:d6:c2:38:95:15:37:ab:b3: 06:70:37:02:1c:c6:b4:9e:3d:d2:6c:ce:82:be:ab:c7:0f:07: ee:d4:b4:90:ae:23:4f:80:a1:c4:b7:dc:4e:00:30:74:91:81: 4d:14:0b:7f:ac:53:6c:25:de:83:f0:7b:4c:e0:a4:96:cd:7a: b5:40:03:b6:8f:de:fb:14:17:33:27:c7:43:b3:2b:24:ad:60: fe:28:db:61:aa:0a:77:26:ad:5c:7f:13:14:d6:e7:c4:d1:27: fb:2b:e1:a6:72:8a:d5:58:df:61:7c:49:3c:b2:b5:15:cd:c3: d6:b5:bd:88:07:08:97:2c:f0:3f:5c:a4:35:8d:d3:09:b9:b6: 5b:82:7c:f3:8e:df:05:37:d2:dc:d4:b1:74:01:9c:38:2d:11: 76:4e:e2:51:ad:b4:31:69:55:ef:6d:b1:bf:20:12:7b:26:14: cc:0b:b8:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNmMi02NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iy58Yb8FXhZb+rWD4U3CK1tp7EjrIM2hFbesh3il7AH4Gtdtr8Onw4JOMMh W4BjKCgAaVocVxa45gxPIrh6QYUF31XSwybCFF2HSx63Jieh9vH0ZAZ5JeHZrTEB SbTrHEqwOdITu3W5DV7iE8rtSpDYucli1OQ7FwBHrr9kOLjxeCmdxyj27z3k/Shg wtrkm2frv8Yppf1nRxpGuNPqRNKRuZbJI4wSQj9VlDsrWD3y66V03CiG0JQPfL7b F3ZjkMsIq3rMX2pYOCaeD3ypjtOpsQQfOqBpRU7ntdEaax3sGB2DokjmlpK1tBIy lOoP0Jn7Fkfc1Hx98icnMj4s9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAOO4Erf jQJT9h2ph7kMyJP7UD80MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkFDNUYwQTJE N0VCMTFFRjkzNEJBOTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+OYwDQYJKoZIhvcNAQELBQADggEBAJpxiFcFxhkP9OTh Af/d65GLZv9Lzdk8Z8IBlg+ZiQDbbjFDgYO/yeiu4+lbbfySowIUdME7XJUvVFZW ottfcqEj/YRIr0ISYzwf7v8Uf7QMZzHWwjiVFTerswZwNwIcxrSePdJszoK+q8cP B+7UtJCuI0+AocS33E4AMHSRgU0UC3+sU2wl3oPwe0zgpJbNerVAA7aP3vsUFzMn x0OzKyStYP4o22GqCncmrVx/ExTW58TRJ/sr4aZyitVY32F8STyytRXNw9a1vYgH CJcs8D9cpDWN0wm5tluCfPOO3wU30tzUsXQBnDgtEXZO4lGttDFpVe9tsb8gEnsm FMwLuJ4= -----END CERTIFICATE-----Generated at Sun May 11 00:50:29 2025 by rpki-client