$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa File: EF2F049E74C411EFBE28DF30C4F9AE02.roa (raw, json) Hash identifier: y/Br5p2I74O79U+Nq/8i6zbeAC1rfVmiJ8p/qnT+Xn4= Subject key identifier: B1:BB:B5:A8:4F:B7:D2:62:CA:2C:08:BC:96:B8:2B:65:58:2D:D7:0E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:31 +0000 ROA not before: Thu 08 May 2025 15:53:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151690 IP address blocks: 160.187.48.0/24 maxlen: 24 160.191.124.0/24 maxlen: 24 160.191.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7584 (0x1da0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37b-5c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:5a:45:27:fb:77:5b:80:cb:6c:67:be:81: e6:0f:ce:ff:96:8f:c0:e6:e0:76:ad:f1:70:7e:47: ab:67:7c:27:92:68:a1:4d:ea:5e:f8:f6:c3:11:dc: 9e:b1:e3:65:f1:07:5a:8c:f7:53:99:2c:84:e7:bc: 5f:ac:03:ae:dc:46:53:fd:55:ac:a1:d7:28:87:e5: a9:8d:cc:29:f9:b3:17:f7:b4:e8:b8:62:0e:e2:57: d8:55:bf:3a:a1:87:b1:60:44:25:4a:7d:5c:de:b5: ce:84:57:8e:73:8f:e0:ed:60:91:61:1e:23:07:21: a7:29:de:89:f4:8a:5b:4c:02:8e:cf:32:73:17:e9: 89:2d:2e:0e:d3:ad:a7:82:71:3c:96:99:4c:99:5c: 96:88:d2:c9:83:9e:a6:4b:ca:2f:62:be:1c:64:0f: 20:7d:9d:a2:21:30:87:c2:45:9b:41:c8:2e:66:a9: 22:1f:fd:59:2e:96:1a:9e:e4:9f:eb:bc:b8:47:c6: ad:26:3c:c4:fb:b4:e3:27:c9:ca:36:81:71:fd:46: 2b:cb:e2:eb:f0:f9:46:72:98:e6:1d:09:b2:ff:97: 03:52:43:a8:87:c1:3c:1c:11:7c:9f:7a:b4:7b:40: be:76:e1:07:67:cc:c0:9a:ed:ab:82:78:ac:75:a8: 77:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BB:B5:A8:4F:B7:D2:62:CA:2C:08:BC:96:B8:2B:65:58:2D:D7:0E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.48.0/24 160.191.124.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:be:3f:1f:52:6c:f3:db:c2:23:25:ee:de:67:4b:89:69:b6: 50:d9:c2:73:a6:32:9f:95:2e:e6:42:0c:59:e8:e0:02:bc:ec: 53:d1:56:8d:a1:e2:28:fb:3e:fa:4e:e1:b4:ef:f0:7c:e1:cc: cb:1f:65:f5:0a:8b:a0:12:62:b4:96:07:73:34:a7:8f:53:79: ea:e2:01:a8:d2:ef:40:e8:30:e2:5f:67:13:ce:b9:82:f0:7c: 22:42:77:42:9b:37:48:c1:f6:10:3f:81:58:af:fd:6b:00:a4: c8:3b:9e:fe:30:fc:67:93:12:5e:17:72:c0:03:5e:55:c6:7e: 58:87:db:26:7f:58:af:1d:53:86:12:55:11:0c:23:e4:db:72: 6c:9f:27:98:49:30:e9:2e:fd:e0:00:c1:28:4b:60:34:4b:c5: ca:fe:86:0e:b4:a9:96:4c:05:84:6e:18:d7:74:c6:4a:6b:9b: e4:12:18:c5:49:f0:8a:81:2a:fd:94:d8:30:33:1e:29:87:68: 75:f6:72:62:cb:77:4a:3a:b1:6c:60:61:1a:4e:bb:21:77:53: ee:ff:ad:ce:0c:a9:48:f4:92:45:d7:5a:3e:2f:38:c0:3f:e5: ee:4e:b8:e6:37:64:aa:d1:27:9d:0f:5d:bf:97:e1:b4:d2:e2: 53:5d:4e:70 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3Yi01YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/VaRSf7d1uAy2xnvoHmD87/lo/A5uB2rfFwfkerZ3wnkmihTepe+PbDEdye seNl8QdajPdTmSyE57xfrAOu3EZT/VWsodcoh+Wpjcwp+bMX97TouGIO4lfYVb86 oYexYEQlSn1c3rXOhFeOc4/g7WCRYR4jByGnKd6J9IpbTAKOzzJzF+mJLS4O062n gnE8lplMmVyWiNLJg56mS8ovYr4cZA8gfZ2iITCHwkWbQcguZqkiH/1ZLpYanuSf 67y4R8atJjzE+7TjJ8nKNoFx/UYry+Lr8PlGcpjmHQmy/5cDUkOoh8E8HBF8n3q0 e0C+duEHZ8zAmu2rgnisdah3bQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLG7tahP t9JiyiwIvJa4K2VYLdcOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUYyRjA0OUU3 NEM0MTFFRkJFMjhERjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACguzADBAGgv3wwDQYJKoZIhvcNAQELBQADggEBAEy+Px9S bPPbwiMl7t5nS4lptlDZwnOmMp+VLuZCDFno4AK87FPRVo2h4ij7PvpO4bTv8Hzh zMsfZfUKi6ASYrSWB3M0p49TeeriAajS70DoMOJfZxPOuYLwfCJCd0KbN0jB9hA/ gViv/WsApMg7nv4w/GeTEl4XcsADXlXGfliH2yZ/WK8dU4YSVREMI+TbcmyfJ5hJ MOku/eAAwShLYDRLxcr+hg60qZZMBYRuGNd0xkprm+QSGMVJ8IqBKv2U2DAzHimH aHX2cmLLd0o6sWxgYRpOuyF3U+7/rc4MqUj0kkXXWj4vOMA/5e5OuOY3ZKrRJ50P Xb+X4bTS4lNdTnA= -----END CERTIFICATE-----Generated at Sun May 11 00:19:37 2025 by rpki-client