$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa File: C219C6EEAC8F11EF84BC2754C4F9AE02.roa (raw, json) Hash identifier: HVJ3gGF66Ltdbpn2F11vblD/AIWIxPn3JLOWoECXTJE= Subject key identifier: BC:2F:D5:31:91:42:7B:74:5E:08:35:44:60:D4:FF:D4:D5:F7:9B:42 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D54 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:24 +0000 ROA not before: Thu 08 May 2025 15:52:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135722 IP address blocks: 160.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7508 (0x1d54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd338-99b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:89:d8:f6:b6:28:a9:de:b7:a5:a6:c3:74: 72:1f:d6:15:9f:da:df:0c:8c:da:e6:4b:58:cc:e2: b4:7a:44:6c:fc:1a:9d:3e:e3:83:e7:fc:28:6d:db: 83:bb:84:37:68:5b:9d:a9:52:9b:87:5e:58:f2:f9: 40:48:62:2f:b3:fd:ee:3e:06:2b:68:07:a9:01:cf: 9f:52:55:31:6b:1b:fa:a7:06:7d:71:60:8b:9b:dc: 7e:f1:9a:bb:f5:9c:e9:5e:14:db:b2:1f:59:ec:fc: 63:26:14:4c:2c:6d:ac:5c:57:45:a5:1a:74:03:a2: c6:15:fc:04:90:26:09:29:ed:77:c1:2c:34:2b:a8: 11:57:16:5b:7f:62:4a:67:6e:64:71:87:b0:0b:50: 4f:24:0a:d0:e1:ba:ba:7a:97:b3:6f:aa:09:70:6e: 84:5b:fa:cd:45:aa:ee:9c:6d:85:83:c3:d2:dc:1c: e7:76:8f:09:cf:af:67:9b:a4:82:8d:ec:32:0b:a4: 7c:f0:ae:f3:9f:59:f0:20:76:7c:d0:c0:71:a8:be: 2f:c2:38:de:3b:88:de:96:d8:22:7a:2a:7c:b1:e1: 34:62:23:f8:31:4e:9a:a0:0f:ec:00:53:19:66:7f: 4d:e6:41:82:25:ac:6f:04:6b:c5:56:54:25:13:b0: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:D5:31:91:42:7B:74:5E:08:35:44:60:D4:FF:D4:D5:F7:9B:42 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C219C6EEAC8F11EF84BC2754C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.153.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f0:3f:7b:e1:48:92:98:4f:10:3b:3b:51:27:9c:f0:43:9d: f5:8a:eb:ba:91:c3:ed:82:c9:4c:2a:6b:7e:98:8c:f5:8c:40: 3b:25:53:71:ed:70:a7:7a:75:e8:d5:a6:b5:6c:67:99:1c:5b: 73:90:92:08:84:aa:3d:d9:e2:38:13:7e:8c:17:0b:6b:fa:f3: eb:d8:3e:50:7a:34:18:c5:1c:fd:33:b5:62:ab:a5:2c:24:1e: 7b:c5:c3:c9:ee:7d:14:95:b4:92:85:f0:bc:82:ed:2f:3f:d9: d8:44:46:1a:07:98:76:36:d7:ce:46:4b:75:a4:d4:e8:23:9e: a1:1c:67:64:bc:3a:9c:68:74:fd:04:14:b0:cd:ea:39:11:1b: 08:63:c3:8c:31:92:4a:63:b3:60:36:31:3e:cf:0b:1a:61:b4: cd:ce:65:88:0e:48:33:35:69:72:ea:16:59:cd:4c:cd:d9:4f: a1:6d:c6:6c:87:00:e6:cd:9f:77:c8:84:14:88:65:dd:5f:79: 67:d5:ab:21:a8:a4:c0:c4:9a:1a:cf:86:15:e4:59:fb:99:78: 95:88:5c:0c:82:0b:09:dd:ac:68:65:6c:28:5a:2d:da:b6:b3: 4b:d2:ee:4b:81:a8:d8:89:ed:7d:b5:54:37:87:95:fb:9c:c2: b1:6a:5b:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMzOC05OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtuJ2Pa2KKnet6Wmw3RyH9YVn9rfDIza5ktYzOK0ekRs/BqdPuOD5/wobduD u4Q3aFudqVKbh15Y8vlASGIvs/3uPgYraAepAc+fUlUxaxv6pwZ9cWCLm9x+8Zq7 9ZzpXhTbsh9Z7PxjJhRMLG2sXFdFpRp0A6LGFfwEkCYJKe13wSw0K6gRVxZbf2JK Z25kcYewC1BPJArQ4bq6epezb6oJcG6EW/rNRarunG2Fg8PS3Bzndo8Jz69nm6SC jewyC6R88K7zn1nwIHZ80MBxqL4vwjjeO4jeltgieip8seE0YiP4MU6aoA/sAFMZ Zn9N5kGCJaxvBGvFVlQlE7BIdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLwv1TGR Qnt0Xgg1RGDU/9TV95tCMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzIxOUM2RUVB QzhGMTFFRjg0QkMyNzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFpkwDQYJKoZIhvcNAQELBQADggEBAAvwP3vhSJKYTxA7 O1EnnPBDnfWK67qRw+2CyUwqa36YjPWMQDslU3HtcKd6dejVprVsZ5kcW3OQkgiE qj3Z4jgTfowXC2v68+vYPlB6NBjFHP0ztWKrpSwkHnvFw8nufRSVtJKF8LyC7S8/ 2dhERhoHmHY2185GS3Wk1OgjnqEcZ2S8OpxodP0EFLDN6jkRGwhjw4wxkkpjs2A2 MT7PCxphtM3OZYgOSDM1aXLqFlnNTM3ZT6FtxmyHAObNn3fIhBSIZd1feWfVqyGo pMDEmhrPhhXkWfuZeJWIXAyCCwndrGhlbChaLdq2s0vS7kuBqNiJ7X21VDeHlfuc wrFqWzU= -----END CERTIFICATE-----Generated at Sun May 11 00:46:29 2025 by rpki-client