$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E15948C2230511EFB84B5F74C4F9AE02.roa File: E15948C2230511EFB84B5F74C4F9AE02.roa (raw, json) Hash identifier: GHCATnSnrR+lrTvIXzNGrscnAi//6AF6onaKfH8VXsk= Subject key identifier: 08:77:CA:00:62:9A:EC:8D:A9:8F:21:D4:CA:29:26:D7:29:03:FC:08 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D70 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E15948C2230511EFB84B5F74C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:49 +0000 ROA not before: Thu 08 May 2025 15:52:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138746 IP address blocks: 160.22.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7536 (0x1d70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd351-82d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:5e:80:24:c1:07:77:53:51:23:8b:1e:05: 1d:c5:82:a2:57:fa:61:b2:01:7f:68:26:55:1d:a4: e0:90:a8:3f:85:cf:d3:5f:fe:e6:61:6e:a4:73:5e: b8:00:46:4d:ad:7d:21:92:db:9b:2b:90:44:b9:a1: 92:6b:fc:ca:87:6a:65:5e:3f:9a:39:23:2d:f3:00: 6c:1d:c6:09:4f:4f:e5:2f:b2:5d:78:b6:c5:40:dd: a4:b7:39:5f:de:64:ab:c9:47:ec:69:af:fe:dd:fc: 05:1e:12:8d:68:21:eb:44:b9:38:79:3a:48:bf:1b: 49:bb:ee:f0:6e:be:44:7d:76:27:fb:64:42:b9:64: ef:bb:21:ac:ea:1e:05:aa:3b:80:a1:ae:26:62:9f: 22:7e:ce:92:e5:14:45:fd:de:75:62:63:c1:9f:07: a2:f7:21:85:ec:e3:67:f6:14:91:08:42:8e:f2:3b: 6a:c3:fe:99:4b:e4:98:50:bc:46:c2:48:3d:68:06: 84:fb:6a:4f:ec:19:f6:b4:98:9c:ec:2a:dd:5a:ee: 51:ee:59:93:88:20:73:f1:89:41:7f:85:c9:46:ef: 86:27:e0:8d:1f:65:11:85:bf:a0:50:0f:fb:b8:59: c1:ba:01:79:cd:34:70:4e:25:cd:b6:10:dd:4b:e1: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:77:CA:00:62:9A:EC:8D:A9:8F:21:D4:CA:29:26:D7:29:03:FC:08 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E15948C2230511EFB84B5F74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.44.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:92:44:a7:de:6c:50:d1:fc:cd:d6:d3:d2:ad:f1:2a:89:9b: a6:cd:84:85:80:e6:f3:ef:1c:d3:4c:21:fa:83:ff:7c:c8:11: 8c:2d:03:d9:2c:b7:8a:f9:e5:e7:30:1c:19:3b:27:e7:60:5d: 5c:30:8b:27:f9:b2:bd:7b:2f:9c:42:95:71:58:47:66:5b:65: cf:b1:5b:0b:20:55:be:a0:7c:bc:99:ea:cf:ab:25:1f:ed:18: e5:00:5a:a9:70:7c:25:e2:33:24:8a:7f:b9:5f:11:01:b0:b3: 88:48:26:cc:fa:61:63:6b:24:63:bb:a8:e8:eb:25:67:31:2f: 36:9a:d4:3a:65:f7:d1:f9:60:df:e9:2d:0e:a0:4f:e9:43:5c: 94:a5:77:f6:db:f7:e9:f7:24:df:a4:60:70:f8:03:a1:f4:78: 4c:9e:95:6b:24:61:d0:a3:16:0a:e4:c3:49:5a:cc:31:82:97: 81:04:25:1d:9e:91:e0:07:c3:db:05:e2:8e:31:c0:70:66:1a: 43:60:a2:fd:40:ff:97:d1:a5:35:bf:d9:01:15:60:aa:7b:47: 04:01:07:db:cf:38:b9:86:e0:e2:6f:87:68:f1:50:83:e5:c7: 61:d0:4e:95:7a:20:a9:90:96:3c:bb:77:40:af:b5:c5:0d:5c: aa:4d:34:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM1MS04MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ShegCTBB3dTUSOLHgUdxYKiV/phsgF/aCZVHaTgkKg/hc/TX/7mYW6kc164 AEZNrX0hktubK5BEuaGSa/zKh2plXj+aOSMt8wBsHcYJT0/lL7JdeLbFQN2ktzlf 3mSryUfsaa/+3fwFHhKNaCHrRLk4eTpIvxtJu+7wbr5EfXYn+2RCuWTvuyGs6h4F qjuAoa4mYp8ifs6S5RRF/d51YmPBnwei9yGF7ONn9hSRCEKO8jtqw/6ZS+SYULxG wkg9aAaE+2pP7Bn2tJic7CrdWu5R7lmTiCBz8YlBf4XJRu+GJ+CNH2URhb+gUA/7 uFnBugF5zTRwTiXNthDdS+E8+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAh3ygBi muyNqY8h1MopJtcpA/wIMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTE1OTQ4QzIy MzA1MTFFRkI4NEI1Rjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFiwwDQYJKoZIhvcNAQELBQADggEBACySRKfebFDR/M3W 09Kt8SqJm6bNhIWA5vPvHNNMIfqD/3zIEYwtA9kst4r55ecwHBk7J+dgXVwwiyf5 sr17L5xClXFYR2ZbZc+xWwsgVb6gfLyZ6s+rJR/tGOUAWqlwfCXiMySKf7lfEQGw s4hIJsz6YWNrJGO7qOjrJWcxLzaa1Dpl99H5YN/pLQ6gT+lDXJSld/bb9+n3JN+k YHD4A6H0eEyelWskYdCjFgrkw0lazDGCl4EEJR2ekeAHw9sF4o4xwHBmGkNgov1A /5fRpTW/2QEVYKp7RwQBB9vPOLmG4OJvh2jxUIPlx2HQTpV6IKmQljy7d0CvtcUN XKpNNA4= -----END CERTIFICATE-----Generated at Sun May 11 19:17:03 2025 by rpki-client