$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa File: EF2F049E74C411EFBE28DF30C4F9AE02.roa (raw, json) Hash identifier: AfOhDTZgmZU9Qn3MnFXI4vFx+OSPFf85kAmleZDh0I8= Subject key identifier: 2C:BC:D2:48:0F:33:C6:C4:2C:E6:0A:44:18:87:D1:F2:43:8F:86:A4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1F9F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa Signing time: Fri 26 Sep 2025 07:36:48 +0000 ROA not before: Fri 26 Sep 2025 07:36:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151690 IP address blocks: 160.187.48.0/24 maxlen: 24 160.187.207.0/24 maxlen: 24 160.191.124.0/24 maxlen: 24 160.191.125.0/24 maxlen: 24 165.99.142.0/24 maxlen: 24 165.99.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8095 (0x1f9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 26 07:36:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d6428f-3b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:8c:0d:95:16:fc:5e:2e:e0:d2:65:c1:a0: 1a:7f:66:10:86:b0:d1:c2:fe:b8:93:bc:6f:cd:2b: c1:d4:79:fb:d1:f6:e5:9d:e6:c5:a8:cd:ca:25:4f: 83:0d:bc:15:91:91:41:e6:8a:66:9e:a6:dc:7b:82: cb:b4:94:4b:66:04:6c:4e:2f:7e:33:1a:20:b8:bc: a8:55:8e:e4:10:b6:24:79:68:b9:5f:70:13:96:f9: 32:28:02:a0:88:f8:7a:ce:ad:bb:67:ae:d1:02:49: a6:7f:0c:02:fb:1a:c0:cb:a5:66:52:e2:01:f5:ff: 6e:74:2b:13:72:81:76:21:6d:ad:3a:92:66:a2:d6: c1:39:1e:b7:32:14:3d:be:ed:9c:80:0d:29:6f:6a: 6d:3b:a2:8c:44:71:d8:8a:ee:a6:11:26:ef:79:10: 32:48:83:ee:6c:10:9b:e1:92:55:b9:4c:ee:b2:64: 3a:d1:5f:8d:3c:67:11:3d:34:ee:14:00:c3:d1:5e: ed:b2:d0:26:e3:dc:12:fa:5b:0d:c2:53:57:9f:cf: 44:ff:14:42:1b:6c:ba:22:9b:a2:f1:d3:00:24:28: 8c:13:d2:25:d8:19:36:af:40:5d:13:8c:30:0e:87: e8:23:63:87:d8:28:6a:ca:fa:e9:41:d7:e1:1f:d2: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:D2:48:0F:33:C6:C4:2C:E6:0A:44:18:87:D1:F2:43:8F:86:A4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.48.0/24 160.187.207.0/24 160.191.124.0/23 165.99.142.0/23 Signature Algorithm: sha256WithRSAEncryption b5:89:20:1d:7d:04:73:53:56:d2:89:0f:34:01:eb:4f:32:e4: ad:f7:2c:86:c0:59:84:1b:24:d3:18:c4:77:50:4f:a1:d8:5f: 0a:fa:15:83:59:82:e2:ea:39:28:8c:f8:fc:fc:eb:f0:74:29: 08:36:69:66:c1:98:26:bd:62:fb:2a:99:a9:21:1a:45:bf:28: 0b:63:a4:5d:c2:77:fd:9a:08:29:58:88:9b:60:db:31:2e:e7: c6:0f:0c:69:56:0e:a3:01:ab:b9:b1:e0:ca:79:19:75:ae:cb: 2a:41:d7:57:1a:ce:ba:f7:46:73:d4:87:7a:47:5b:39:6e:74: ea:ed:b7:aa:d7:65:91:81:d0:fa:cd:4f:f6:c8:68:bc:38:8d: 47:2d:4b:a4:42:47:6c:2f:ff:64:e7:08:18:9b:4d:55:b5:5b: 30:07:83:11:f8:41:b4:99:76:4f:c6:48:df:3d:71:8e:46:07: bd:d9:4c:68:b5:97:8b:a5:22:1a:84:3c:5b:9c:a7:3d:21:59: a5:5b:f8:e4:d6:0a:52:83:0b:7b:57:f0:bb:8a:80:81:e5:8f: 9d:52:3c:82:7f:31:ab:88:3b:3f:76:4f:20:f7:db:bf:89:56: 45:d5:b2:a9:22:73:1f:6b:ce:d5:d6:e0:b5:86:60:91:24:20: a1:91:8f:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICH58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwOTI2MDczNjQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ2NDI4Zi0zYjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4r2MDZUW/F4u4NJlwaAaf2YQhrDRwv64k7xvzSvB1Hn70fblnebFqM3KJU+D DbwVkZFB5opmnqbce4LLtJRLZgRsTi9+MxoguLyoVY7kELYkeWi5X3ATlvkyKAKg iPh6zq27Z67RAkmmfwwC+xrAy6VmUuIB9f9udCsTcoF2IW2tOpJmotbBOR63MhQ9 vu2cgA0pb2ptO6KMRHHYiu6mESbveRAySIPubBCb4ZJVuUzusmQ60V+NPGcRPTTu FADD0V7tstAm49wS+lsNwlNXn89E/xRCG2y6Ipui8dMAJCiME9Il2Bk2r0BdE4ww DofoI2OH2ChqyvrpQdfhH9IFEQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCy80kgP M8bELOYKRBiH0fJDj4akMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUYyRjA0OUU3 NEM0MTFFRkJFMjhERjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBACguzADBACgu88DBAGgv3wDBAGlY44wDQYJKoZIhvcNAQEL BQADggEBALWJIB19BHNTVtKJDzQB608y5K33LIbAWYQbJNMYxHdQT6HYXwr6FYNZ guLqOSiM+Pz86/B0KQg2aWbBmCa9YvsqmakhGkW/KAtjpF3Cd/2aCClYiJtg2zEu 58YPDGlWDqMBq7mx4Mp5GXWuyypB11cazrr3RnPUh3pHWzludOrtt6rXZZGB0PrN T/bIaLw4jUctS6RCR2wv/2TnCBibTVW1WzAHgxH4QbSZdk/GSN89cY5GB73ZTGi1 l4ulIhqEPFucpz0hWaVb+OTWClKDC3tX8LuKgIHlj51SPIJ/MauIOz92TyD327+J VkXVsqkicx9rztXW4LWGYJEkIKGRj6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:15 2025 by rpki-client