$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa File: 8CD3FB04478411F09233CC40C4F9AE02.roa (raw, json) Hash identifier: hikSJBTck3k+ARInyTmdOQRHYnRfaIEFLG+/7HpXIVk= Subject key identifier: BB:BC:37:84:C4:DE:89:24:BF:BC:ED:73:86:BF:86:25:3E:93:7E:A7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EA0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa Signing time: Thu 12 Jun 2025 11:58:27 +0000 ROA not before: Thu 12 Jun 2025 11:58:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9730 IP address blocks: 164.164.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7840 (0x1ea0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 12 11:58:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684ac0e3-9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:7d:10:0d:54:83:bd:c3:fb:cf:11:33:0a: 3f:10:35:66:82:96:49:05:28:ea:0b:bc:98:67:9c: 32:4e:8e:7a:07:de:c7:9f:4a:ec:60:85:04:ce:de: 9f:90:c8:86:4c:27:20:82:eb:07:8e:d2:4c:8e:b1: 1e:fb:46:2c:3e:85:72:3b:fe:9d:82:76:84:90:41: c7:4b:5d:96:dd:c2:21:a4:5e:b5:03:27:b1:f3:1e: 37:51:67:c1:c5:89:46:51:5d:5f:d0:12:df:11:39: 4d:74:2f:df:ee:60:31:39:67:b7:fc:c6:2a:d6:56: 6b:56:88:e0:82:cc:d2:c8:e8:c2:cd:5e:ec:22:7d: 03:7a:22:3a:01:ce:33:33:3e:b6:f7:a4:a4:40:e5: 7d:89:76:a1:04:6f:94:d9:50:d4:fa:6b:cd:17:79: c1:25:c4:fe:08:20:c0:0e:57:96:03:f5:33:55:c4: 19:3b:04:2e:cd:15:bb:ad:7e:e4:ec:36:69:6d:b4: 4c:49:0e:61:ba:2d:7c:8c:6d:49:94:33:71:c1:42: 22:bc:66:81:ab:a1:59:19:e8:5f:9d:39:b3:7b:c1: 6c:c5:bb:d7:0f:70:1e:fe:ba:01:05:2e:0a:2f:a7: 16:5c:6e:85:99:8c:73:53:97:3d:82:fe:55:9c:71: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BC:37:84:C4:DE:89:24:BF:BC:ED:73:86:BF:86:25:3E:93:7E:A7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8CD3FB04478411F09233CC40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.164.121.0/24 Signature Algorithm: sha256WithRSAEncryption 61:4a:47:96:96:0e:37:07:65:8a:9a:5b:78:1c:30:14:a3:35: 10:3a:94:45:6a:3b:7a:2e:28:66:1d:31:c0:f4:b7:91:aa:86: 6f:48:97:5e:f6:e0:7b:18:3c:93:e9:56:74:f0:a6:34:51:b6: c1:85:c2:e4:0c:5e:c5:db:68:3f:df:62:f4:2c:02:51:56:6d: 40:81:ba:73:07:0e:35:4a:4f:1f:ce:9d:e7:91:9d:de:b9:af: 8b:a2:ad:85:f6:a9:7c:42:25:b2:ef:47:14:82:fe:2f:f0:56: fa:e6:ad:5d:f0:f7:c6:9d:32:6a:e0:a4:95:fb:d3:0f:19:1a: db:21:27:0d:9d:ca:9a:2d:c9:d0:f4:eb:57:c0:21:48:e1:bf: 5c:6d:88:ea:de:6e:c4:b4:1a:ee:2b:88:4f:1d:eb:77:72:37: 09:0e:da:7a:a3:02:49:66:69:f3:eb:55:90:7d:06:8e:d1:74: db:cf:6f:9d:02:e5:fa:0e:d4:cf:75:87:9b:14:f8:5e:4a:45: 6a:1f:19:6f:29:15:f3:15:5c:c8:53:5c:45:f3:0c:64:10:3c: 46:bd:b4:bd:94:9c:ae:eb:a5:e8:9f:cc:1c:8a:00:71:7d:80: ef:67:ab:48:81:19:3b:66:5b:f3:55:fe:52:ed:f2:11:5d:0e: 41:4d:14:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjEyMTE1ODI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRhYzBlMy05ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOh9EA1Ug73D+88RMwo/EDVmgpZJBSjqC7yYZ5wyTo56B97Hn0rsYIUEzt6f kMiGTCcggusHjtJMjrEe+0YsPoVyO/6dgnaEkEHHS12W3cIhpF61Ayex8x43UWfB xYlGUV1f0BLfETlNdC/f7mAxOWe3/MYq1lZrVojggszSyOjCzV7sIn0DeiI6Ac4z Mz6296SkQOV9iXahBG+U2VDU+mvNF3nBJcT+CCDADleWA/UzVcQZOwQuzRW7rX7k 7DZpbbRMSQ5hui18jG1JlDNxwUIivGaBq6FZGehfnTmze8FsxbvXD3Ae/roBBS4K L6cWXG6FmYxzU5c9gv5VnHHy9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLu8N4TE 3okkv7ztc4a/hiU+k36nMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOENEM0ZCMDQ0 Nzg0MTFGMDkyMzNDQzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACkpHkwDQYJKoZIhvcNAQELBQADggEBAGFKR5aWDjcHZYqa W3gcMBSjNRA6lEVqO3ouKGYdMcD0t5Gqhm9Il1724HsYPJPpVnTwpjRRtsGFwuQM XsXbaD/fYvQsAlFWbUCBunMHDjVKTx/OneeRnd65r4uirYX2qXxCJbLvRxSC/i/w VvrmrV3w98adMmrgpJX70w8ZGtshJw2dypotydD061fAIUjhv1xtiOrebsS0Gu4r iE8d63dyNwkO2nqjAklmafPrVZB9Bo7RdNvPb50C5foO1M91h5sU+F5KRWofGW8p FfMVXMhTXEXzDGQQPEa9tL2UnK7rpeifzByKAHF9gO9nq0iBGTtmW/NV/lLt8hFd DkFNFAE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:22 2025 by rpki-client