$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa File: C3FA344E86EC11EF969C0A6DC4F9AE02.roa (raw, json) Hash identifier: 8Xpqa+oE2QfREXmz/gTjUesWHi1aUo9aV4hQtKoAofk= Subject key identifier: 3A:D4:29:95:A2:05:14:4F:E5:76:38:AD:34:D9:85:DD:78:FE:4E:79 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D59 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa Signing time: Thu 08 May 2025 15:52:28 +0000 ROA not before: Thu 08 May 2025 15:52:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135802 IP address blocks: 160.187.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7513 (0x1d59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd33c-9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:df:33:7c:14:fb:62:30:cf:ff:52:a7:6b: dd:51:0f:79:7b:4b:5e:61:2b:92:0c:a3:99:8c:60: 4e:23:c9:76:30:5a:96:2b:f3:6b:5f:14:7f:03:17: 1e:20:6b:46:c6:86:85:6d:61:29:b1:33:9d:3d:fb: 8c:4c:0c:4c:72:bf:1d:dd:7c:56:d7:6b:f8:8c:4c: ca:13:4a:e7:b8:42:6f:6b:e3:16:9b:84:68:d5:e0: f3:e4:5f:8c:3d:15:e9:8e:16:73:0e:c7:7a:49:b2: b3:c7:46:e3:34:27:c9:82:fd:bb:e6:fa:8c:f1:12: e4:58:0e:13:5f:de:b0:f1:41:f9:24:6c:90:98:8f: 08:38:a3:54:eb:af:b9:22:f3:6b:78:9a:7f:82:7d: 3b:ab:df:2b:d1:55:55:fc:dd:8b:15:5b:c0:4a:ef: f3:32:94:16:0a:79:46:53:1d:8d:05:e0:10:c6:e0: 9b:26:37:1f:05:bf:d6:37:78:e1:20:28:02:94:4e: e6:01:87:69:2c:d2:74:53:d3:d3:f5:8b:43:52:69: 57:74:45:1d:d9:5a:81:86:72:a2:da:76:2f:de:f8: 1a:09:7b:18:5b:4f:a1:ea:2b:16:0e:79:58:0b:58: 26:44:9e:dd:cd:a2:31:b3:c5:9d:5d:1a:15:0c:65: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D4:29:95:A2:05:14:4F:E5:76:38:AD:34:D9:85:DD:78:FE:4E:79 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.206.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:30:38:a7:f9:14:73:9f:d9:58:60:91:20:47:d9:80:29:a5: f6:7d:1a:f7:16:d3:5a:ed:a5:0c:16:33:1b:4a:17:d4:f6:5f: f8:2c:27:02:39:3a:ac:22:9d:c3:9f:d0:64:01:48:49:ad:9f: a6:59:47:8e:28:db:63:2e:39:08:da:28:b9:d3:39:47:6a:7f: d6:a5:76:da:db:cc:ab:36:fd:8d:0e:31:47:d1:15:e1:b8:3d: 19:3d:ca:4f:9c:30:40:2e:13:dd:bb:a5:2c:29:5a:8c:6b:93: 69:1a:70:26:f2:7b:36:78:0f:f5:b0:7a:75:d5:bf:62:f5:31: 00:8c:3b:96:6a:12:ce:ee:33:e2:6a:cb:94:37:40:4f:9d:f9: 05:be:b0:16:de:a3:d9:a8:81:67:b7:33:2c:5a:cd:6d:5d:15: 9b:88:af:2b:5f:12:cf:77:f5:98:05:f8:d6:47:f2:66:44:1d: 17:19:25:7e:76:23:52:bd:45:6d:e5:da:e6:24:cf:42:64:7f: 5a:ec:01:32:bb:cd:3b:97:d1:ea:0c:1e:80:ff:66:1d:09:ba: 08:31:a0:7a:ef:d2:8e:67:39:42:3f:55:a8:eb:fd:81:bc:2b: 8c:06:51:21:64:81:9d:ba:0e:c5:ea:4f:88:ca:11:a1:8b:4e: e7:9c:5d:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMzYy05NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LffM3wU+2Iwz/9Sp2vdUQ95e0teYSuSDKOZjGBOI8l2MFqWK/NrXxR/Axce IGtGxoaFbWEpsTOdPfuMTAxMcr8d3XxW12v4jEzKE0rnuEJva+MWm4Ro1eDz5F+M PRXpjhZzDsd6SbKzx0bjNCfJgv275vqM8RLkWA4TX96w8UH5JGyQmI8IOKNU66+5 IvNreJp/gn07q98r0VVV/N2LFVvASu/zMpQWCnlGUx2NBeAQxuCbJjcfBb/WN3jh ICgClE7mAYdpLNJ0U9PT9YtDUmlXdEUd2VqBhnKi2nYv3vgaCXsYW0+h6isWDnlY C1gmRJ7dzaIxs8WdXRoVDGXsrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDrUKZWi BRRP5XY4rTTZhd14/k55MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzNGQTM0NEU4 NkVDMTFFRjk2OUMwQTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu84wDQYJKoZIhvcNAQELBQADggEBAJowOKf5FHOf2Vhg kSBH2YAppfZ9GvcW01rtpQwWMxtKF9T2X/gsJwI5OqwincOf0GQBSEmtn6ZZR44o 22MuOQjaKLnTOUdqf9aldtrbzKs2/Y0OMUfRFeG4PRk9yk+cMEAuE927pSwpWoxr k2kacCbyezZ4D/WwenXVv2L1MQCMO5ZqEs7uM+Jqy5Q3QE+d+QW+sBbeo9mogWe3 MyxazW1dFZuIrytfEs939ZgF+NZH8mZEHRcZJX52I1K9RW3l2uYkz0Jkf1rsATK7 zTuX0eoMHoD/Zh0JuggxoHrv0o5nOUI/Vajr/YG8K4wGUSFkgZ26DsXqT4jKEaGL TuecXXw= -----END CERTIFICATE-----Generated at Sun May 11 22:23:49 2025 by rpki-client