$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa File: 2D4C331CA70311EF81A7C564C4F9AE02.roa (raw, json) Hash identifier: oSCleIONaClLhgyrDK2IyHdYhmXgSLg1UJBb/nW2VV8= Subject key identifier: 95:7E:90:53:1B:8D:9B:89:93:9B:70:C3:2C:FD:2A:5E:02:0A:23:4E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DD6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:19 +0000 ROA not before: Thu 08 May 2025 15:54:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152523 IP address blocks: 160.22.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7638 (0x1dd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3aa-5be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:50:46:b3:e6:23:f5:fa:ee:a9:50:5d:62: f0:4b:bd:dc:bd:97:d7:58:82:26:a5:ea:9f:8f:75: 6b:ce:b7:dc:0e:e1:77:31:7c:3d:5e:e1:19:2d:80: 21:8a:11:de:a2:f7:b5:a6:67:3d:8e:10:2a:e9:ff: 2f:72:16:60:64:1d:bd:a1:a3:9d:50:d5:1f:07:8f: f6:72:b5:3f:67:8c:fd:4d:ba:64:df:5d:88:e6:48: 25:69:ff:85:52:fe:01:b7:a0:77:e4:84:d1:21:88: a1:7f:af:b0:96:55:99:7a:73:82:cc:a6:17:ec:12: 6f:8b:14:58:4b:2a:3e:24:1f:76:15:e8:39:48:e0: 4f:3a:e5:72:c2:e5:64:ca:f8:d8:86:c5:a2:3e:be: 90:1b:3e:1f:0a:8f:29:59:8a:19:bf:5f:3c:bc:1c: 22:96:0a:6e:3f:11:dd:50:a8:36:0a:13:8e:8e:67: b8:e4:ed:24:bf:a2:4d:f4:1e:8a:ac:c0:c0:eb:e2: bd:c8:0e:d9:85:ac:f1:40:5f:df:88:43:fc:04:0a: 53:63:c0:c6:d2:5c:3a:91:8c:f8:16:5e:e7:46:2b: ed:bd:78:d3:66:9e:8b:38:bb:68:f0:dd:52:70:0d: ab:1a:a7:c3:6c:11:b4:64:97:56:fa:cd:a7:34:48: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7E:90:53:1B:8D:9B:89:93:9B:70:C3:2C:FD:2A:5E:02:0A:23:4E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2D4C331CA70311EF81A7C564C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.108.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:38:77:6b:f0:68:be:75:f7:18:d6:6c:08:0b:65:2a:06:fd: 00:9b:ca:85:45:f8:84:dd:4d:02:65:62:92:da:80:72:3e:16: eb:4d:4d:c9:5b:d9:4e:53:c9:3c:b9:b4:04:b3:f8:cf:85:5a: 13:32:cc:85:2c:76:01:26:56:49:ae:0b:7c:3f:91:77:3e:88: c4:b3:8b:85:19:c2:09:7b:07:f2:53:c3:84:d7:7f:a2:11:29: e1:c0:4b:27:74:c4:1e:e8:5e:1e:11:97:89:68:5b:b0:77:58: fb:bb:d1:e2:4f:49:c2:cb:1c:8e:b1:44:18:29:13:77:6f:cd: 3f:c4:d1:7b:87:ef:98:ab:ff:03:39:2b:d6:ee:c2:8c:c5:63: 55:15:3d:0c:03:18:2f:99:af:ba:d5:23:09:4f:32:66:9d:2d: 91:44:ad:db:d1:c3:11:5e:f7:e1:2e:c4:b4:43:c6:0f:df:14: 27:35:22:ae:3e:4d:39:0e:a9:6c:b9:c3:0c:91:5d:92:3e:2e: 93:d8:a0:18:d8:d8:a0:a8:a7:f2:e0:9d:9a:21:74:ce:0c:5b: 3a:33:e6:66:db:bc:77:63:6b:57:9c:0c:b1:82:40:c2:75:2c: 20:23:3b:bf:81:c1:03:0c:fd:e7:ed:fa:6d:f0:9d:9a:f6:5c: e9:94:dd:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhYS01YmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUVQRrPmI/X67qlQXWLwS73cvZfXWIImpeqfj3VrzrfcDuF3MXw9XuEZLYAh ihHeove1pmc9jhAq6f8vchZgZB29oaOdUNUfB4/2crU/Z4z9Tbpk312I5kglaf+F Uv4Bt6B35ITRIYihf6+wllWZenOCzKYX7BJvixRYSyo+JB92Feg5SOBPOuVywuVk yvjYhsWiPr6QGz4fCo8pWYoZv188vBwilgpuPxHdUKg2ChOOjme45O0kv6JN9B6K rMDA6+K9yA7ZhazxQF/fiEP8BApTY8DG0lw6kYz4Fl7nRivtvXjTZp6LOLto8N1S cA2rGqfDbBG0ZJdW+s2nNEgV+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJV+kFMb jZuJk5twwyz9Kl4CCiNOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkQ0QzMzMUNB NzAzMTFFRjgxQTdDNTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFmwwDQYJKoZIhvcNAQELBQADggEBAGw4d2vwaL519xjW bAgLZSoG/QCbyoVF+ITdTQJlYpLagHI+FutNTclb2U5TyTy5tASz+M+FWhMyzIUs dgEmVkmuC3w/kXc+iMSzi4UZwgl7B/JTw4TXf6IRKeHASyd0xB7oXh4Rl4loW7B3 WPu70eJPScLLHI6xRBgpE3dvzT/E0XuH75ir/wM5K9buwozFY1UVPQwDGC+Zr7rV IwlPMmadLZFErdvRwxFe9+EuxLRDxg/fFCc1Iq4+TTkOqWy5wwyRXZI+LpPYoBjY 2KCop/LgnZohdM4MWzoz5mbbvHdja1ecDLGCQMJ1LCAjO7+BwQMM/eft+m3wnZr2 XOmU3UY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:16 2025 by rpki-client