$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72FA9B4C377D11EF8F9AF718C4F9AE02.roa File: 72FA9B4C377D11EF8F9AF718C4F9AE02.roa (raw, json) Hash identifier: 9Pm1EL/m9bMF3ZatUGniLJmX6A13A0l8aYko0PxhlPg= Subject key identifier: C0:B4:12:58:24:C0:17:F6:D2:EE:F7:7D:26:E8:21:B0:B4:C8:C0:93 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DCA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72FA9B4C377D11EF8F9AF718C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:09 +0000 ROA not before: Thu 08 May 2025 15:54:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152507 IP address blocks: 160.22.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7626 (0x1dca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3a0-e3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:37:86:9e:42:86:e7:c4:ed:2a:6a:9c:cf: 77:49:84:27:ed:17:07:d4:11:fc:7e:60:b3:d4:fb: 61:ad:24:86:2c:84:c5:fa:0b:be:c1:9c:9d:9d:d7: a1:e1:78:fe:fb:23:13:75:91:25:7a:c1:e1:5c:fa: 8e:80:f7:d2:c5:d6:80:cf:dd:e9:0f:6a:7d:f9:15: fb:65:58:eb:3a:87:a6:ec:a3:3c:79:f3:50:66:c8: 27:05:6e:1c:c9:c6:b9:41:d7:30:0f:7b:a8:75:85: d6:ac:3e:87:d4:3b:19:8f:f1:66:d8:c0:f3:74:2f: 6d:a7:7f:bc:72:e8:6b:23:39:be:a0:1c:3b:f1:15: 73:fe:3f:9c:3a:d7:6d:5f:bf:10:9c:56:00:71:c3: 55:49:ed:97:7f:84:7c:36:43:fe:a7:c7:0b:ef:72: 92:54:42:64:d9:4f:fb:09:c3:20:f1:2f:e5:93:13: 8d:13:37:21:03:21:2e:3a:d7:17:89:e6:32:3e:ea: f0:24:31:61:a3:41:5c:b4:89:be:73:08:d8:2c:18: 58:82:46:a5:0e:44:b6:91:db:1f:bf:44:0d:9c:ee: c8:64:ef:56:0f:1d:2e:0b:cb:9c:f7:18:e5:37:1e: 54:93:fb:8c:95:fe:b2:de:ab:70:0d:f0:39:32:ee: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B4:12:58:24:C0:17:F6:D2:EE:F7:7D:26:E8:21:B0:B4:C8:C0:93 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72FA9B4C377D11EF8F9AF718C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.226.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:71:f3:64:22:fe:fa:8c:07:fd:82:6f:96:c1:00:4a:69:8b: 34:fb:a2:12:d5:a6:59:f5:dc:70:33:cd:ca:96:b3:48:cc:b2: 09:be:ba:6d:14:cd:a4:97:99:cd:45:ac:26:9d:70:c7:98:88: 86:5a:4f:a8:eb:45:fb:e5:19:e7:82:2f:86:82:c7:6e:24:3a: 59:eb:b5:98:00:f5:bd:f8:8b:de:d9:fd:20:75:c7:7d:44:16: 16:b5:76:cf:7f:5c:2a:b9:2b:18:6e:14:50:c0:c4:2d:d3:c7: 13:9d:7b:b5:5d:68:6f:37:0e:a1:2c:63:52:c3:f0:9a:49:4b: be:9d:e1:fd:a8:e6:11:f8:04:ab:19:bc:d6:89:81:a0:21:e0: 8d:47:83:33:68:0e:19:e4:ab:98:76:0b:64:16:7a:4e:a9:5c: cc:ef:ac:c3:bc:ac:71:45:58:ed:61:a7:70:33:4d:ae:e6:85: 7e:4e:a7:d8:eb:f9:2d:2e:02:81:49:2f:e3:23:db:20:24:b2: e4:ee:91:8a:4e:54:01:b4:00:9a:bf:f1:a7:de:0e:d1:0a:9c: 50:00:bf:49:ab:07:30:b0:89:47:ca:38:1c:e0:9a:19:5b:c3: 2d:df:28:bd:ff:27:b2:69:31:b4:1e:5d:05:73:53:3e:4d:54: 96:a7:dc:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhMC1lM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpM3hp5ChufE7SpqnM93SYQn7RcH1BH8fmCz1PthrSSGLITF+gu+wZydndeh 4Xj++yMTdZElesHhXPqOgPfSxdaAz93pD2p9+RX7ZVjrOoem7KM8efNQZsgnBW4c yca5QdcwD3uodYXWrD6H1DsZj/Fm2MDzdC9tp3+8cuhrIzm+oBw78RVz/j+cOtdt X78QnFYAccNVSe2Xf4R8NkP+p8cL73KSVEJk2U/7CcMg8S/lkxONEzchAyEuOtcX ieYyPurwJDFho0FctIm+cwjYLBhYgkalDkS2kdsfv0QNnO7IZO9WDx0uC8uc9xjl Nx5Uk/uMlf6y3qtwDfA5Mu4mgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMC0Elgk wBf20u73fSboIbC0yMCTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJGQTlCNEMz NzdEMTFFRjhGOUFGNzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFuIwDQYJKoZIhvcNAQELBQADggEBAItx82Qi/vqMB/2C b5bBAEppizT7ohLVpln13HAzzcqWs0jMsgm+um0UzaSXmc1FrCadcMeYiIZaT6jr RfvlGeeCL4aCx24kOlnrtZgA9b34i97Z/SB1x31EFha1ds9/XCq5KxhuFFDAxC3T xxOde7VdaG83DqEsY1LD8JpJS76d4f2o5hH4BKsZvNaJgaAh4I1HgzNoDhnkq5h2 C2QWek6pXMzvrMO8rHFFWO1hp3AzTa7mhX5Op9jr+S0uAoFJL+Mj2yAksuTukYpO VAG0AJq/8afeDtEKnFAAv0mrBzCwiUfKOBzgmhlbwy3fKL3/J7JpMbQeXQVzUz5N VJan3GA= -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:49 2025 by rpki-client