$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa File: E66D1ADAC9AB11EF94E78272C4F9AE02.roa (raw, json) Hash identifier: WfxbfaOazGASu/d1kOHKnrpdAbC3zRWnLATj/5tsQ+o= Subject key identifier: D0:C2:2E:CC:02:E2:DD:F1:BF:E7:1E:98:FE:34:69:3D:EB:78:39:8A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D71 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:50 +0000 ROA not before: Thu 08 May 2025 15:52:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138751 IP address blocks: 161.248.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7537 (0x1d71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd351-c62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:ad:bd:10:13:6e:08:8c:d5:97:3b:df:b8: 7c:e2:b7:e9:78:eb:a3:7e:9f:88:87:0f:e0:95:63: c2:17:e7:01:c9:d0:7d:ad:97:85:0e:d1:b0:2b:05: 14:1c:09:fd:be:0d:c7:9b:38:e6:35:b9:94:df:c9: f4:db:67:72:15:87:95:a3:dc:69:40:fb:85:97:7a: 84:82:68:ff:3d:15:4f:d5:b3:31:02:3f:3b:8e:72: 4d:c0:97:37:93:26:28:e7:f5:6b:00:ff:8b:dd:11: 69:0b:b9:cb:3f:f8:76:47:7c:93:35:33:73:7b:dd: 1f:36:ee:78:a4:7f:48:bc:b6:dd:bc:42:30:80:ee: bb:29:fb:f5:1a:02:32:ca:fe:e9:8b:8f:a1:60:f1: c2:ec:3a:f7:16:8e:2f:ec:b2:40:c4:9e:b6:e7:9f: f7:28:78:25:87:84:45:3c:14:01:51:bb:f7:05:e1: 4d:4c:0e:f0:a9:fa:59:99:1f:2a:12:cc:7d:dc:bc: 7f:71:dd:48:68:83:e9:ac:39:e7:2c:f9:c0:82:52: 64:cf:84:bc:a8:8b:6f:31:69:10:3a:8a:e5:79:8c: 18:99:4c:48:3d:81:80:9f:6c:77:ae:a8:8c:c5:4e: 15:a3:44:db:18:c7:23:83:08:7c:f5:51:3d:16:e7: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:2E:CC:02:E2:DD:F1:BF:E7:1E:98:FE:34:69:3D:EB:78:39:8A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.68.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:07:e2:3d:4d:01:b3:a1:23:c9:db:97:55:0f:3a:6b:cb:f9: e0:cc:a0:07:77:ca:c6:59:81:f6:20:78:22:45:0e:2b:7a:cb: 62:e9:82:0e:0b:7b:8b:26:86:63:c3:0b:d8:55:a8:06:c9:d3: b1:ed:ee:1c:5e:53:6d:4a:e8:db:6c:87:e6:f7:21:64:64:d7: d4:11:b6:f1:30:e0:2c:ed:28:7e:72:1e:ad:3c:df:0a:ed:1d: 85:6f:cc:d4:e6:29:d1:57:60:78:0a:44:f9:ef:e1:c6:c0:0c: f2:a0:b4:10:6c:6b:56:cf:c0:5a:60:7f:70:f7:50:b6:42:32: 2b:49:67:a9:de:a0:94:53:b8:eb:cf:61:10:c8:ba:97:d2:5e: 45:bc:41:c2:61:2d:d6:ee:e9:d7:d3:1d:5b:64:62:55:86:c2: 76:3b:65:fb:50:eb:f1:46:03:55:92:40:8c:50:f4:75:9d:09: ae:b8:79:41:7a:fc:96:52:7d:e1:29:74:0a:83:e9:9e:46:0f: 9c:10:d6:1f:41:d0:c1:0b:0b:36:a3:9f:91:51:e5:8d:2c:60: 73:bb:9f:b8:f7:12:2b:e4:24:da:5f:4f:33:66:0d:3c:15:e7: ea:11:39:e0:47:e0:71:74:62:94:ad:87:94:bf:87:24:64:c1: a8:3f:63:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM1MS1jNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8OtvRATbgiM1Zc737h84rfpeOujfp+Ihw/glWPCF+cBydB9rZeFDtGwKwUU HAn9vg3HmzjmNbmU38n022dyFYeVo9xpQPuFl3qEgmj/PRVP1bMxAj87jnJNwJc3 kyYo5/VrAP+L3RFpC7nLP/h2R3yTNTNze90fNu54pH9IvLbdvEIwgO67Kfv1GgIy yv7pi4+hYPHC7Dr3Fo4v7LJAxJ6255/3KHglh4RFPBQBUbv3BeFNTA7wqfpZmR8q Esx93Lx/cd1IaIPprDnnLPnAglJkz4S8qItvMWkQOorleYwYmUxIPYGAn2x3rqiM xU4Vo0TbGMcjgwh89VE9Fud30wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNDCLswC 4t3xv+cemP40aT3reDmKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTY2RDFBREFD OUFCMTFFRjk0RTc4MjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+EQwDQYJKoZIhvcNAQELBQADggEBAE0H4j1NAbOhI8nb l1UPOmvL+eDMoAd3ysZZgfYgeCJFDit6y2Lpgg4Le4smhmPDC9hVqAbJ07Ht7hxe U21K6Ntsh+b3IWRk19QRtvEw4CztKH5yHq083wrtHYVvzNTmKdFXYHgKRPnv4cbA DPKgtBBsa1bPwFpgf3D3ULZCMitJZ6neoJRTuOvPYRDIupfSXkW8QcJhLdbu6dfT HVtkYlWGwnY7ZftQ6/FGA1WSQIxQ9HWdCa64eUF6/JZSfeEpdAqD6Z5GD5wQ1h9B 0MELCzajn5FR5Y0sYHO7n7j3EivkJNpfTzNmDTwV5+oROeBH4HF0YpSth5S/hyRk wag/Y68= -----END CERTIFICATE-----Generated at Sun May 11 13:12:07 2025 by rpki-client