$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa File: F62807A4A89111EFB9118F2BC4F9AE02.roa (raw, json) Hash identifier: r6gmK9C1PlH89K2pfG8vK7zJhSh+h8f96+GjeGR4gMs= Subject key identifier: 39:12:90:A9:F4:B3:27:5D:F8:D3:0A:90:1B:6E:12:45:B2:8A:E7:96 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E07 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa Signing time: Thu 08 May 2025 15:55:01 +0000 ROA not before: Thu 08 May 2025 15:55:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153234 IP address blocks: 160.250.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7687 (0x1e07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3d5-a97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:c0:de:17:bc:7a:a8:57:8d:19:88:31:ce: 1e:1a:16:a9:7d:51:19:61:6b:f4:b3:54:06:b5:40: ec:2f:c0:45:1f:1e:b0:68:90:e9:e0:89:43:e8:40: 5a:c8:b4:51:55:d5:8c:e7:27:27:07:7b:68:cd:9f: 5c:ff:20:25:76:11:f4:3a:42:10:98:8b:06:97:c5: 2d:ac:ba:d9:ef:76:2f:2b:40:00:11:0e:41:cf:6f: da:25:55:f5:f9:e8:67:b6:b2:7e:c5:f5:d9:85:ed: 9d:cc:cd:00:be:87:a1:b4:5e:d0:38:7c:53:f8:5d: e2:8a:ec:c1:e3:f5:f5:7a:7a:ec:69:3a:ce:bc:de: aa:4b:65:91:db:07:52:a7:57:60:91:76:52:20:f6: cd:e9:82:28:75:e3:00:cf:fc:dd:3d:85:c2:d0:20: 69:8d:02:05:5c:fa:80:1d:af:7a:b7:34:cf:3a:32: 70:4a:5c:81:58:b0:7e:2e:b6:8e:4a:59:f4:dd:b4: d7:c0:0b:0c:ba:98:e3:27:ac:90:9c:23:4b:dc:63: fe:5b:de:97:01:b7:68:3c:90:a5:b9:e0:cb:2e:fa: 5b:15:61:fe:9e:e8:2b:c8:35:bf:fd:e4:91:09:3c: 3b:03:45:b9:97:92:f2:7a:ff:d5:e3:d9:0b:d8:0a: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:12:90:A9:F4:B3:27:5D:F8:D3:0A:90:1B:6E:12:45:B2:8A:E7:96 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.38.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:fa:df:b0:b6:b7:88:9b:ab:de:d3:a0:bd:80:a4:46:15:5a: 3c:3e:bb:80:43:24:13:23:a3:72:0e:b3:4e:58:4b:3d:fd:63: d3:12:4b:2c:3f:34:60:c5:20:9d:57:c0:7f:5a:57:c6:60:01: f6:bb:ff:c4:8e:27:24:d6:c9:29:94:d6:64:5e:d9:51:77:79: f0:c1:63:1e:15:bf:06:ed:9b:59:3d:34:22:56:b1:9e:56:75: 42:d9:37:ff:f5:6a:98:88:1e:07:94:6e:ca:01:de:43:df:ba: 18:60:ef:5f:51:57:9f:2b:df:e3:4f:c8:82:b0:96:d7:f5:28: 49:ce:34:d4:08:6f:a6:9c:04:1c:5f:af:30:b3:2e:0d:6a:e7: 61:5f:f0:a2:56:a4:98:90:7a:04:c6:9f:ca:85:40:55:1c:f6: bb:7a:86:66:cb:56:9f:82:74:5a:b9:81:8c:d9:4d:b5:de:6e: 6d:d4:db:5b:dc:98:ea:9e:80:b2:5f:90:e5:81:59:ba:36:71: 31:55:cb:4e:ea:7b:b2:54:12:03:74:e5:0a:25:54:d7:0b:9a: e3:1f:9e:7a:1c:de:9f:b9:ab:63:cc:3d:6d:35:37:74:97:58: 84:c3:0a:5e:9c:49:ce:2c:95:ad:14:55:65:63:25:14:a5:5a: 4a:fd:3d:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNkNS1hOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TnA3he8eqhXjRmIMc4eGhapfVEZYWv0s1QGtUDsL8BFHx6waJDp4IlD6EBa yLRRVdWM5ycnB3tozZ9c/yAldhH0OkIQmIsGl8UtrLrZ73YvK0AAEQ5Bz2/aJVX1 +ehntrJ+xfXZhe2dzM0AvoehtF7QOHxT+F3iiuzB4/X1enrsaTrOvN6qS2WR2wdS p1dgkXZSIPbN6YIodeMAz/zdPYXC0CBpjQIFXPqAHa96tzTPOjJwSlyBWLB+LraO Sln03bTXwAsMupjjJ6yQnCNL3GP+W96XAbdoPJClueDLLvpbFWH+nugryDW//eSR CTw7A0W5l5Lyev/V49kL2AoINwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDkSkKn0 sydd+NMKkBtuEkWyiueWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjYyODA3QTRB ODkxMTFFRkI5MTE4RjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+iYwDQYJKoZIhvcNAQELBQADggEBACz637C2t4ibq97T oL2ApEYVWjw+u4BDJBMjo3IOs05YSz39Y9MSSyw/NGDFIJ1XwH9aV8ZgAfa7/8SO JyTWySmU1mRe2VF3efDBYx4Vvwbtm1k9NCJWsZ5WdULZN//1apiIHgeUbsoB3kPf uhhg719RV58r3+NPyIKwltf1KEnONNQIb6acBBxfrzCzLg1q52Ff8KJWpJiQegTG n8qFQFUc9rt6hmbLVp+CdFq5gYzZTbXebm3U21vcmOqegLJfkOWBWbo2cTFVy07q e7JUEgN05QolVNcLmuMfnnoc3p+5q2PMPW01N3SXWITDCl6cSc4sla0UVWVjJRSl Wkr9PZc= -----END CERTIFICATE-----Generated at Tue May 13 08:20:58 2025 by rpki-client