$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98AACDBCBB8511EF9C98260DC4F9AE02.roa File: 98AACDBCBB8511EF9C98260DC4F9AE02.roa (raw, json) Hash identifier: oYx/4X3wxdOrAksKkbXN+WsrMvjLr4DldpLCwLS269M= Subject key identifier: 8C:A3:F5:98:70:6B:B1:E1:DE:AE:B6:64:73:12:5A:96:98:F3:79:FC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1F3D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98AACDBCBB8511EF9C98260DC4F9AE02.roa Signing time: Mon 04 Aug 2025 06:07:33 +0000 ROA not before: Mon 04 Aug 2025 06:07:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149020 IP address blocks: 160.30.84.0/23 maxlen: 24 160.187.141.0/24 maxlen: 24 160.191.77.0/24 maxlen: 24 161.248.242.0/24 maxlen: 24 165.99.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7997 (0x1f3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 4 06:07:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68904e25-c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:5c:6b:84:3d:5f:1a:64:5b:a3:4e:67:7f: 58:03:bd:68:76:f7:5f:28:82:a4:70:5d:63:f5:f7: e6:eb:09:9a:75:45:41:90:8f:41:cf:31:79:cf:4d: 2c:00:40:37:f5:96:b0:37:c3:77:40:eb:da:e6:c0: f3:0d:d8:c8:cb:d1:da:26:95:d7:97:cf:db:fa:73: 00:e7:55:5d:fa:bb:10:03:cf:9d:a5:bb:9c:86:1f: 43:b3:05:a8:73:b7:d5:0d:6d:ad:a4:8b:14:aa:1e: d2:ce:eb:e3:26:5d:fd:aa:56:32:62:0d:e2:d5:ca: 49:7c:35:9a:25:8a:1b:12:0b:52:63:b7:04:e4:f8: eb:99:2c:3b:f8:8e:2e:53:8f:9b:9d:ab:ba:95:94: 9d:29:28:b3:18:1a:e8:75:a3:47:8e:93:ad:27:a2: c0:b2:66:c6:72:b3:26:36:cd:73:bc:99:09:56:37: 11:1f:35:cc:84:ac:46:6b:80:5c:e3:ba:bd:7d:86: d2:ea:ef:79:31:35:44:a0:aa:62:55:be:00:02:e3: 6e:58:1d:80:1c:f4:11:e4:37:68:18:e3:5f:02:1d: a1:df:cb:ce:1d:58:55:09:a5:79:48:d1:ce:64:cf: ea:14:0b:bb:c3:ce:c1:7d:7c:ed:10:f9:0e:14:24: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:F5:98:70:6B:B1:E1:DE:AE:B6:64:73:12:5A:96:98:F3:79:FC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98AACDBCBB8511EF9C98260DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.84.0/23 160.187.141.0/24 160.191.77.0/24 161.248.242.0/24 165.99.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:de:5d:4f:21:7d:96:7f:9c:06:c4:1f:09:86:8e:3d:a8:c5: 86:33:7e:6b:89:69:8c:fe:20:38:73:fd:41:83:62:63:6e:36: b2:93:0f:bb:20:bf:fb:c4:16:e5:97:d6:95:05:19:1c:4e:3f: dc:93:4d:f3:13:95:41:b5:9f:b3:f8:70:e9:a6:96:b4:47:aa: 67:fc:37:14:c8:4d:fa:c5:a2:13:84:00:d4:da:34:45:b2:88: dc:c8:64:d6:71:c8:48:6c:b5:42:be:34:39:70:43:20:7d:13: e4:3d:69:7c:59:a8:44:bc:63:8c:b7:ad:0b:cf:ed:75:8c:83: c8:66:ce:52:db:a5:d3:fc:96:e9:fa:7a:bc:f1:03:5e:a1:ae: 9e:20:78:07:45:90:b3:52:20:7e:18:24:aa:c0:bd:4b:78:4a: 34:4a:a9:d7:55:17:9c:02:32:93:6e:3d:f9:79:f8:56:48:d7: 97:01:0c:b6:63:c3:4a:47:7c:ef:4f:37:93:de:e7:5b:5d:0c: 41:8a:15:1b:03:78:04:eb:7a:5b:35:e7:eb:9e:75:46:cc:15: d2:b7:7d:7c:3e:e1:95:1d:66:a9:f9:80:ef:fe:23:54:04:5c: 95:d7:0c:a5:4b:e0:1b:67:cc:73:13:2b:89:c8:92:5f:6c:11: e1:3e:f0:10 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICHz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwODA0MDYwNzMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwNGUyNS1jNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0tca4Q9XxpkW6NOZ39YA71odvdfKIKkcF1j9ffm6wmadUVBkI9BzzF5z00s AEA39ZawN8N3QOva5sDzDdjIy9HaJpXXl8/b+nMA51Vd+rsQA8+dpbuchh9DswWo c7fVDW2tpIsUqh7SzuvjJl39qlYyYg3i1cpJfDWaJYobEgtSY7cE5PjrmSw7+I4u U4+bnau6lZSdKSizGBrodaNHjpOtJ6LAsmbGcrMmNs1zvJkJVjcRHzXMhKxGa4Bc 47q9fYbS6u95MTVEoKpiVb4AAuNuWB2AHPQR5DdoGONfAh2h38vOHVhVCaV5SNHO ZM/qFAu7w87BfXztEPkOFCRClwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIyj9Zhw a7Hh3q62ZHMSWpaY83n8MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOThBQUNEQkNC Qjg1MTFFRjlDOTgyNjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAGgHlQDBACgu40DBACgv00DBACh+PIDBAClYwkwDQYJKoZI hvcNAQELBQADggEBAD/eXU8hfZZ/nAbEHwmGjj2oxYYzfmuJaYz+IDhz/UGDYmNu NrKTD7sgv/vEFuWX1pUFGRxOP9yTTfMTlUG1n7P4cOmmlrRHqmf8NxTITfrFohOE ANTaNEWyiNzIZNZxyEhstUK+NDlwQyB9E+Q9aXxZqES8Y4y3rQvP7XWMg8hmzlLb pdP8lun6erzxA16hrp4geAdFkLNSIH4YJKrAvUt4SjRKqddVF5wCMpNuPfl5+FZI 15cBDLZjw0pHfO9PN5Pe51tdDEGKFRsDeATrels15+uedUbMFdK3fXw+4ZUdZqn5 gO/+I1QEXJXXDKVL4BtnzHMTK4nIkl9sEeE+8BA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:21 2025 by rpki-client