$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa File: D61B5A66480A11EF90444C33C4F9AE02.roa (raw, json) Hash identifier: OR4mKC69fbIdY3zEDM4p4C7jpSzPMx91kMymrb4GGh8= Subject key identifier: 18:69:47:27:6D:EF:48:EB:BF:EE:21:B6:C0:08:50:FD:13:D4:16:BE Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E2B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:34 +0000 ROA not before: Thu 08 May 2025 15:55:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17665 IP address blocks: 160.25.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7723 (0x1e2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3f6-ac06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:a6:1c:b4:a4:46:62:c0:b8:cd:a0:de:b4: 25:10:a1:08:56:ed:2a:04:8e:25:9d:cc:13:43:49: 0d:43:ea:23:da:33:a9:eb:f7:2e:f4:b8:12:a2:67: fb:20:95:e8:38:1e:0b:a1:df:8b:7c:8f:dc:8a:48: 47:ca:06:72:ee:4c:d1:a5:fd:62:e2:fa:6d:13:57: fa:71:27:ea:6c:43:b8:bc:ea:46:4c:bf:e0:09:95: ad:99:70:ee:f0:9a:4b:9a:ca:ec:aa:c1:03:2d:13: e6:38:f9:2a:67:37:a3:64:b3:cb:e8:fe:8e:33:a8: 5c:fc:9f:25:f7:76:b5:94:c7:d9:5f:a0:01:1c:6f: 7b:73:1e:f4:2e:b3:0b:25:c0:2b:fb:e3:15:b3:21: 67:44:ec:61:e1:1d:aa:31:34:fd:29:1b:94:eb:f3: 3d:0a:1f:aa:56:eb:fc:85:20:cd:ab:e3:eb:6a:44: c3:25:85:b9:01:57:62:b2:37:fc:43:34:93:09:70: 37:60:84:c3:cb:70:d6:08:17:59:17:25:d2:72:d4: 0f:6b:60:4d:1c:94:f9:87:17:58:3e:f2:1e:07:ad: ce:4d:2f:29:31:43:31:ad:0e:de:c7:30:bd:c7:99: 7e:37:9e:7e:e7:15:f5:cb:ac:ef:8d:2b:69:72:e3: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:69:47:27:6D:EF:48:EB:BF:EE:21:B6:C0:08:50:FD:13:D4:16:BE X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.30.0/23 Signature Algorithm: sha256WithRSAEncryption 71:44:8c:94:ce:c7:47:25:86:89:de:49:26:07:10:fc:fa:e4: 44:0a:ae:5b:f5:5b:78:8c:c7:09:e2:a1:6e:ef:4a:ff:b0:3c: 8b:6c:de:15:b3:4f:ce:92:d8:db:41:5b:69:b4:46:74:bb:6e: 54:b6:74:49:6f:e9:3f:40:f8:c9:25:4e:2d:10:a1:3e:31:7d: 7e:89:f2:43:a1:c1:43:cf:c6:ae:f9:8d:f5:12:e4:94:40:4b: ea:27:2e:c3:d7:3b:a5:d1:e0:83:b9:60:ba:70:d8:b6:e4:74: c9:8f:5a:0a:03:aa:90:ea:25:29:e4:6a:bb:36:7d:9d:13:0d: 3c:bb:bc:29:bb:ce:72:15:33:4a:c1:b1:17:ae:5c:6b:d9:52: 36:3e:c0:d7:af:af:f0:89:75:89:b2:cb:f3:a8:33:fe:9f:9d: db:da:1c:7c:1f:86:b8:e6:bd:00:43:90:3c:ca:17:c9:1e:c2: a1:f5:f3:81:4b:49:1e:a8:5e:5d:3b:f3:b8:24:26:e8:32:ff: 34:f0:b8:1d:be:01:e7:5d:95:2d:8a:88:6d:35:6a:a9:76:7b: 93:bd:e4:17:70:cf:82:45:2b:a5:c6:eb:22:ba:87:3f:16:cb: 58:2a:98:20:77:e2:1c:c1:5b:5e:d9:b2:f9:45:08:d8:87:54: 92:dc:19:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNmNi1hYzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2OmHLSkRmLAuM2g3rQlEKEIVu0qBI4lncwTQ0kNQ+oj2jOp6/cu9LgSomf7 IJXoOB4Lod+LfI/cikhHygZy7kzRpf1i4vptE1f6cSfqbEO4vOpGTL/gCZWtmXDu 8JpLmsrsqsEDLRPmOPkqZzejZLPL6P6OM6hc/J8l93a1lMfZX6ABHG97cx70LrML JcAr++MVsyFnROxh4R2qMTT9KRuU6/M9Ch+qVuv8hSDNq+PrakTDJYW5AVdisjf8 QzSTCXA3YITDy3DWCBdZFyXSctQPa2BNHJT5hxdYPvIeB63OTS8pMUMxrQ7exzC9 x5l+N55+5xX1y6zvjStpcuNv7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBhpRydt 70jrv+4htsAIUP0T1Ba+MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDYxQjVBNjY0 ODBBMTFFRjkwNDQ0QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGR4wDQYJKoZIhvcNAQELBQADggEBAHFEjJTOx0clhone SSYHEPz65EQKrlv1W3iMxwnioW7vSv+wPIts3hWzT86S2NtBW2m0RnS7blS2dElv 6T9A+MklTi0QoT4xfX6J8kOhwUPPxq75jfUS5JRAS+onLsPXO6XR4IO5YLpw2Lbk dMmPWgoDqpDqJSnkars2fZ0TDTy7vCm7znIVM0rBsReuXGvZUjY+wNevr/CJdYmy y/OoM/6fndvaHHwfhrjmvQBDkDzKF8kewqH184FLSR6oXl0787gkJugy/zTwuB2+ AeddlS2KiG01aql2e5O95Bdwz4JFK6XG6yK6hz8Wy1gqmCB34hzBW17ZsvlFCNiH VJLcGc8= -----END CERTIFICATE-----Generated at Sun May 11 13:48:05 2025 by rpki-client