$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa File: D37BCAFCABBF11EF991C833DC4F9AE02.roa (raw, json) Hash identifier: R7aQNE16W6J399kfddxVAAlqSI9qFlyRDMfqFk8fAHg= Subject key identifier: 44:A0:5C:4D:39:ED:47:A7:8C:E2:E1:33:F0:4D:F9:08:78:B3:9B:20 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D52 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa Signing time: Thu 08 May 2025 15:52:23 +0000 ROA not before: Thu 08 May 2025 15:52:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135269 IP address blocks: 160.250.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7506 (0x1d52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd336-cc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:a6:4f:18:96:c5:24:1c:eb:cb:cb:2a:88: 13:c1:8f:03:96:4b:b2:a4:67:49:9d:a3:92:9f:0f: 01:5e:a4:f1:77:4b:87:9e:c6:5a:82:2a:ec:54:eb: f2:51:9b:8a:ee:72:91:34:34:e5:34:c4:b9:c0:ee: d9:7d:5f:2b:99:90:70:74:76:42:f1:30:86:d6:59: 0d:7e:08:4d:c9:60:96:1b:88:92:85:41:31:29:6c: bf:bc:eb:44:3d:96:af:54:d3:b5:59:d4:ab:8d:8f: d0:3a:c6:42:8e:07:90:1b:7c:6d:78:ed:71:dc:33: ee:43:d9:bf:24:bc:a1:f5:a3:62:71:db:ff:97:7c: d2:70:81:78:a4:a3:cd:94:90:01:f1:35:c5:f9:43: 1a:c7:c2:ae:7b:3d:4e:31:63:83:2e:e6:04:f5:f5: 68:b9:7c:57:be:c3:dd:49:f7:bf:25:01:39:1b:81: 35:ab:b6:44:57:d6:1a:85:d8:7f:0e:89:73:74:55: 6c:16:90:35:88:8d:e3:34:4e:76:e9:d7:d9:29:c5: 43:bb:30:fe:91:42:5f:cc:3c:0f:5b:46:fb:78:4d: d2:0c:d9:07:67:50:1f:39:27:e6:f7:ff:78:06:e3: 8c:c9:e3:ea:c5:fd:31:fa:39:b7:68:38:5d:cf:d0: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A0:5C:4D:39:ED:47:A7:8C:E2:E1:33:F0:4D:F9:08:78:B3:9B:20 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.28.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:2e:b2:ca:b1:19:99:77:77:1b:6f:3c:cf:0c:68:53:06:1b: d5:14:32:16:da:9e:7e:26:b0:d1:72:a5:28:c7:94:68:dc:dd: 59:75:3c:01:81:d6:83:b5:d8:98:62:8d:7e:c8:5d:7c:fe:e3: 19:3c:c8:cb:fc:76:ee:df:15:e3:94:53:c3:11:e3:e4:00:3f: 31:9c:8d:55:5a:f0:bd:2f:fa:ab:a9:5b:78:99:5d:74:c6:ba: 27:39:7b:d6:bb:b8:24:34:1c:a5:e5:4e:03:6f:24:d5:15:e4: 4b:ef:89:d3:0e:9c:03:56:25:31:8f:14:f1:97:db:52:79:13: 9f:69:3e:08:90:a3:f8:5d:5c:d2:f9:5a:93:67:b4:a4:ae:87: a1:0d:1f:33:64:4d:c1:47:18:9f:b8:e5:ad:a7:43:47:88:a4: cd:e1:21:cc:b2:99:c7:cf:fe:f1:f0:07:09:55:5b:90:5b:c8: a1:e5:80:f7:f8:07:6b:ec:62:18:92:30:ad:dc:33:25:39:4c: fd:ff:0d:d0:3d:78:1b:ea:8f:3c:49:d6:e3:ea:4c:6d:d6:76: c5:78:b8:04:0e:1c:ea:c7:56:be:d0:fa:d9:d0:30:b8:1e:5f: 99:c1:91:dc:ca:d0:32:fb:cd:65:41:75:4f:14:7a:80:e6:7b: 4b:3e:27:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDMzNi1jYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUamTxiWxSQc68vLKogTwY8DlkuypGdJnaOSnw8BXqTxd0uHnsZagirsVOvy UZuK7nKRNDTlNMS5wO7ZfV8rmZBwdHZC8TCG1lkNfghNyWCWG4iShUExKWy/vOtE PZavVNO1WdSrjY/QOsZCjgeQG3xteO1x3DPuQ9m/JLyh9aNicdv/l3zScIF4pKPN lJAB8TXF+UMax8Kuez1OMWODLuYE9fVouXxXvsPdSfe/JQE5G4E1q7ZEV9Yahdh/ DolzdFVsFpA1iI3jNE526dfZKcVDuzD+kUJfzDwPW0b7eE3SDNkHZ1AfOSfm9/94 BuOMyePqxf0x+jm3aDhdz9BZmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFESgXE05 7UenjOLhM/BN+Qh4s5sgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDM3QkNBRkNB QkJGMTFFRjk5MUM4MzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+hwwDQYJKoZIhvcNAQELBQADggEBAAsussqxGZl3dxtv PM8MaFMGG9UUMhbann4msNFypSjHlGjc3Vl1PAGB1oO12JhijX7IXXz+4xk8yMv8 du7fFeOUU8MR4+QAPzGcjVVa8L0v+qupW3iZXXTGuic5e9a7uCQ0HKXlTgNvJNUV 5EvvidMOnANWJTGPFPGX21J5E59pPgiQo/hdXNL5WpNntKSuh6ENHzNkTcFHGJ+4 5a2nQ0eIpM3hIcyymcfP/vHwBwlVW5BbyKHlgPf4B2vsYhiSMK3cMyU5TP3/DdA9 eBvqjzxJ1uPqTG3WdsV4uAQOHOrHVr7Q+tnQMLgeX5nBkdzK0DL7zWVBdU8UeoDm e0s+J68= -----END CERTIFICATE-----Generated at Sun May 11 12:23:43 2025 by rpki-client