$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa File: 7C8CA816644211EF8BECBC36C4F9AE02.roa (raw, json) Hash identifier: sRp1psxRqKebJIXrITGnaDUXKG0esbJ5E2AvVjE95ko= Subject key identifier: 2C:2E:32:42:CA:BB:8E:4D:55:4C:07:72:D8:A1:2A:07:15:E2:88:08 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DEC Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:38 +0000 ROA not before: Thu 08 May 2025 15:54:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152559 IP address blocks: 160.25.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7660 (0x1dec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3be-64ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:68:4c:9c:77:9d:da:48:59:86:91:75:ea: c2:b9:84:e2:ba:ef:4f:39:b4:2d:07:eb:3b:4f:17: ad:be:c4:6b:1a:e8:74:0e:34:7c:00:df:1e:d1:ce: 15:68:0b:c3:d5:6e:8b:85:ba:56:f5:98:61:b4:ce: 40:98:55:5b:57:44:86:d9:b1:fd:89:8b:be:93:b9: 6f:bd:7b:9a:bc:99:76:ef:08:66:71:71:ea:41:b4: bf:20:ef:7e:93:0d:c4:20:5b:49:0d:b4:d3:22:fe: 9e:a0:06:d8:43:28:ec:46:86:95:f5:07:99:42:5d: f8:78:15:3a:f7:4e:f1:c6:4a:1d:65:c3:a5:fa:9b: cc:f2:6b:22:a6:30:bb:67:57:43:d3:91:c3:57:07: 94:c9:ff:4c:80:23:cb:fd:7f:28:1e:e0:c0:00:0d: 07:da:13:e7:09:60:43:28:01:a0:db:00:10:2c:91: a4:de:fe:a1:23:69:ce:24:59:48:33:0e:8f:ac:10: b2:52:af:a2:c6:e1:5e:96:28:01:f1:45:9e:3e:3e: 50:1d:56:ee:67:de:c8:de:00:69:0f:1d:86:2a:75: 17:b2:98:f6:6c:f5:a8:3e:03:11:46:51:a9:b4:3b: 90:fd:ef:be:83:d4:cb:a9:3c:4d:ad:32:2d:b9:e7: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:32:42:CA:BB:8E:4D:55:4C:07:72:D8:A1:2A:07:15:E2:88:08 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.122.0/23 Signature Algorithm: sha256WithRSAEncryption 69:2e:f1:2a:f8:23:c6:42:ed:1f:a9:24:51:b8:73:55:ad:72: 5a:4e:44:4f:e3:31:ad:89:34:f3:f7:30:eb:30:c1:1a:d9:99: 29:fc:92:41:3d:b8:21:e5:5b:dc:41:9c:3e:dd:7d:aa:91:70: 0d:2b:69:06:fa:ca:cb:a4:8a:46:8a:7a:49:60:14:1f:e8:9f: 57:96:08:8d:63:6e:1f:d8:6f:e4:5e:bb:98:f3:ae:94:f1:c1: ce:36:9e:3e:5e:7d:e5:a0:09:d8:5d:93:7a:ef:d6:b2:f0:c6: ab:05:1e:36:01:ef:4f:cc:10:21:b5:82:89:9f:83:92:93:43: 72:d9:0a:8c:62:26:b1:ee:0c:ff:82:ee:e8:c0:62:bf:c9:8f: c3:12:d4:56:bd:b1:67:0b:b3:7a:6c:ed:c5:7b:25:0e:8d:9e: 12:ef:35:04:b9:00:3c:67:e2:6d:91:96:37:5c:2a:94:e5:93: c3:70:cf:06:2f:f9:17:16:73:ea:5c:8e:5b:14:54:a1:5d:e7: a2:ad:30:fe:5b:a4:c5:25:07:f0:c5:c5:bf:b2:3d:4e:66:e1: 84:75:12:19:8b:56:00:06:57:ba:e7:f7:c2:02:b1:6f:e7:bc: ef:0a:d8:e0:5e:25:6c:8c:c5:42:b3:1d:aa:0f:0c:fe:38:3f: 9c:f8:08:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNiZS02NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8doTJx3ndpIWYaRderCuYTiuu9PObQtB+s7TxetvsRrGuh0DjR8AN8e0c4V aAvD1W6LhbpW9ZhhtM5AmFVbV0SG2bH9iYu+k7lvvXuavJl27whmcXHqQbS/IO9+ kw3EIFtJDbTTIv6eoAbYQyjsRoaV9QeZQl34eBU6907xxkodZcOl+pvM8msipjC7 Z1dD05HDVweUyf9MgCPL/X8oHuDAAA0H2hPnCWBDKAGg2wAQLJGk3v6hI2nOJFlI Mw6PrBCyUq+ixuFeligB8UWePj5QHVbuZ97I3gBpDx2GKnUXspj2bPWoPgMRRlGp tDuQ/e++g9TLqTxNrTItuecHYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCwuMkLK u45NVUwHctihKgcV4ogIMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0M4Q0E4MTY2 NDQyMTFFRjhCRUNCQzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGXowDQYJKoZIhvcNAQELBQADggEBAGku8Sr4I8ZC7R+p JFG4c1WtclpORE/jMa2JNPP3MOswwRrZmSn8kkE9uCHlW9xBnD7dfaqRcA0raQb6 ysukikaKeklgFB/on1eWCI1jbh/Yb+Reu5jzrpTxwc42nj5efeWgCdhdk3rv1rLw xqsFHjYB70/MECG1gomfg5KTQ3LZCoxiJrHuDP+C7ujAYr/Jj8MS1Fa9sWcLs3ps 7cV7JQ6NnhLvNQS5ADxn4m2RljdcKpTlk8NwzwYv+RcWc+pcjlsUVKFd56KtMP5b pMUlB/DFxb+yPU5m4YR1EhmLVgAGV7rn98ICsW/nvO8K2OBeJWyMxUKzHaoPDP44 P5z4CPU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:08 2025 by rpki-client