$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa File: F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa (raw, json) Hash identifier: C6DtfCaAkzaa+zHM2FvLmibUGjqKHyX7rVeiwpXphis= Subject key identifier: A0:C7:05:79:F2:BD:FF:1F:11:D2:5F:D0:29:34:43:26:67:17:4F:CD Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D95 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:21 +0000 ROA not before: Thu 08 May 2025 15:53:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150093 IP address blocks: 160.22.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7573 (0x1d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd371-5c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:f8:f7:a1:77:96:e5:ad:43:5c:02:a6:94: 76:bb:57:39:58:86:0b:8e:ea:c3:0c:0b:dd:49:8d: e9:f7:e4:7d:47:17:c6:26:76:ab:9e:6f:70:5b:36: 0f:78:e7:f0:e0:8d:40:62:a0:7d:a9:a6:ef:33:25: 43:02:02:87:d8:87:39:d1:52:f6:45:4c:d7:d8:29: 6e:24:80:bc:44:c3:60:f1:d8:80:c6:f1:98:bb:6f: be:97:31:2b:31:ab:d4:cd:1c:c3:df:b9:f5:f0:da: d1:5f:d7:4e:c7:a9:1b:ea:0b:19:39:75:07:cc:69: ff:de:0f:7b:39:28:02:be:8e:bd:54:fc:6c:3a:19: 89:67:8f:e6:fc:97:60:09:2e:a0:bf:45:75:a8:a8: 7d:5c:d9:75:93:87:9a:13:11:b3:97:bc:ac:f1:7d: d5:38:07:36:37:a8:e9:03:2c:1c:49:1a:0d:43:55: 21:e4:3b:94:14:ea:a6:97:7e:3a:a1:d9:ef:18:8d: 8f:04:98:3e:f2:59:44:af:ab:a4:2a:0b:b8:1a:e4: 0f:09:f5:7c:dd:79:a6:bc:d1:a3:e0:aa:ad:f3:3d: a1:ed:34:e8:c6:ce:3e:b6:fd:a7:be:3d:94:70:6d: 66:f7:5f:64:fe:60:9d:c1:0d:7a:ab:f3:bb:a0:2e: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:05:79:F2:BD:FF:1F:11:D2:5F:D0:29:34:43:26:67:17:4F:CD X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F7FBF3C0AE2B11EFA17C3E70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.235.0/24 Signature Algorithm: sha256WithRSAEncryption 92:3f:e9:c1:17:9a:06:12:51:7a:da:34:32:d0:b4:ff:7e:9b: 71:96:0b:b0:eb:9d:a7:c5:1c:bb:1d:cf:9a:d4:ce:4b:5b:3c: 1c:b2:80:17:3f:b1:99:74:a2:bd:fd:8b:18:3a:e2:7e:41:c0: 6a:94:3b:92:0e:44:d0:ef:cd:77:53:80:c1:56:1f:79:92:8e: c9:11:55:eb:c2:fe:fc:57:de:d3:61:d3:45:90:45:18:8d:9b: 28:81:a6:d5:13:00:b6:76:aa:57:1e:33:4b:b1:37:c2:03:11: 39:15:1b:19:28:a2:de:c5:22:9e:68:93:1f:53:28:8b:15:6a: ee:5c:cc:28:d3:08:44:3c:3c:93:23:21:d0:53:c6:fe:f7:7e: 5a:6e:78:a9:c7:ca:49:90:18:c9:a3:9c:a6:09:8f:2f:0c:f2: 7d:e5:69:e3:d6:60:bf:02:e8:5e:c0:a4:32:bd:3b:b4:b1:ea: 40:1f:5f:9c:70:c4:dd:24:a4:b1:16:e0:66:d4:1b:5e:c7:0c: dc:ab:86:e1:7b:4c:3e:e1:e3:1e:58:9a:47:9b:4e:6e:2f:9f: ca:08:e6:70:f2:3a:a3:51:7e:fe:e3:ce:b7:01:ca:92:12:6d: bc:d8:20:17:c1:b2:e0:b7:b7:27:bd:f0:06:0b:d3:f9:2c:0f: 40:a1:a2:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3MS01YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qv496F3luWtQ1wCppR2u1c5WIYLjurDDAvdSY3p9+R9RxfGJnarnm9wWzYP eOfw4I1AYqB9qabvMyVDAgKH2Ic50VL2RUzX2CluJIC8RMNg8diAxvGYu2++lzEr MavUzRzD37n18NrRX9dOx6kb6gsZOXUHzGn/3g97OSgCvo69VPxsOhmJZ4/m/Jdg CS6gv0V1qKh9XNl1k4eaExGzl7ys8X3VOAc2N6jpAywcSRoNQ1Uh5DuUFOqml346 odnvGI2PBJg+8llEr6ukKgu4GuQPCfV83XmmvNGj4Kqt8z2h7TToxs4+tv2nvj2U cG1m919k/mCdwQ16q/O7oC4SeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKDHBXny vf8fEdJf0Ck0QyZnF0/NMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjdGQkYzQzBB RTJCMTFFRkExN0MzRTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFuswDQYJKoZIhvcNAQELBQADggEBAJI/6cEXmgYSUXra NDLQtP9+m3GWC7DrnafFHLsdz5rUzktbPByygBc/sZl0or39ixg64n5BwGqUO5IO RNDvzXdTgMFWH3mSjskRVevC/vxX3tNh00WQRRiNmyiBptUTALZ2qlceM0uxN8ID ETkVGxkoot7FIp5okx9TKIsVau5czCjTCEQ8PJMjIdBTxv73flpueKnHykmQGMmj nKYJjy8M8n3laePWYL8C6F7ApDK9O7Sx6kAfX5xwxN0kpLEW4GbUG17HDNyrhuF7 TD7h4x5YmkebTm4vn8oI5nDyOqNRfv7jzrcBypISbbzYIBfBsuC3tye98AYL0/ks D0ChovQ= -----END CERTIFICATE-----Generated at Sat May 10 23:14:44 2025 by rpki-client