$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa File: 9A80C87203EB11F0AA408709C4F9AE02.roa (raw, json) Hash identifier: ex75CqmVE56fSQuCIB9D2L0l8ICyfeifOROn5drreGw= Subject key identifier: E4:B6:1B:FB:46:ED:8B:57:F0:5B:32:83:E6:57:D0:C7:F1:B9:13:0E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1F46 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa Signing time: Tue 05 Aug 2025 06:20:33 +0000 ROA not before: Tue 05 Aug 2025 06:20:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134912 IP address blocks: 160.30.124.0/24 maxlen: 24 160.30.125.0/24 maxlen: 24 165.101.174.0/24 maxlen: 24 165.101.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8006 (0x1f46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 5 06:20:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6891a2b1-d943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:5e:f2:95:a1:1a:1d:8e:c5:a2:b7:41:12: eb:6d:af:2f:bf:e6:76:70:7e:52:e5:d2:35:95:c3: 23:78:c6:7d:24:64:74:41:5b:4a:e7:da:70:fd:86: 05:a0:08:a7:dd:07:f4:51:32:cf:2c:f7:a4:13:e4: ec:29:30:ef:7b:76:96:eb:17:ec:5a:83:58:4d:c5: 98:32:9d:3e:1a:d5:ca:e7:ec:ff:3f:1e:ad:bb:b3: 97:50:20:38:b1:a3:06:f1:df:af:34:88:c4:93:a6: 86:81:0f:e9:96:40:55:f1:dc:49:14:ab:df:1b:ca: 3e:da:19:cc:69:27:b7:8e:bb:7c:20:d9:07:ef:f7: 58:f0:2f:3e:80:c6:22:5e:c2:36:aa:6c:77:36:11: b6:17:0b:f5:21:e5:04:39:29:0f:81:93:92:57:06: 4a:fa:c2:5f:85:c7:a2:cb:43:d4:3c:a9:29:0e:ed: 3f:8c:26:38:dc:40:69:fc:d1:f3:3c:4a:e9:e7:1b: 3a:16:7e:d3:be:b0:6f:b5:0e:a4:40:d8:ec:8c:bb: e6:19:59:a0:59:84:63:34:45:85:c5:02:82:3d:76: bd:e7:03:1a:80:2d:a1:df:23:67:45:3d:62:5a:01: 0c:9f:77:b1:87:63:e0:4c:70:64:98:e1:33:39:40: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B6:1B:FB:46:ED:8B:57:F0:5B:32:83:E6:57:D0:C7:F1:B9:13:0E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9A80C87203EB11F0AA408709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.124.0/23 165.101.174.0/23 Signature Algorithm: sha256WithRSAEncryption 84:fc:18:9d:03:6b:0d:b5:41:bf:bd:11:2a:15:66:ce:c1:0c: e4:26:22:d7:3b:8b:2e:1a:44:71:73:bb:ca:aa:62:66:8f:10: 9a:6c:30:29:3a:91:aa:7d:07:a3:bf:20:2d:08:13:a3:4b:59: 09:2a:8a:4c:35:2e:4c:3c:f6:97:24:a4:63:8d:5e:ce:ba:48: 30:b9:3c:b2:79:0e:6f:1b:29:53:d8:56:62:ff:5a:cd:7b:fb: 7d:48:a8:45:3a:dc:23:90:eb:88:4e:3d:37:f2:be:7b:18:87: d8:7c:af:b2:31:da:97:e8:9b:5d:34:a6:18:c5:ec:5d:cd:14: 3b:d3:93:bc:9f:13:5b:6e:70:76:a8:1b:39:59:69:b2:93:3e: f2:f6:ef:eb:8c:e1:07:23:1c:1c:1d:78:e2:dc:85:63:63:1d: 1a:1f:74:f7:dc:1e:66:dc:be:1c:25:01:1c:de:8c:09:33:a2: 0c:e1:fa:ce:00:90:75:16:ba:fc:4f:99:e5:74:d8:9b:f7:fc: 66:af:07:b3:ff:ba:29:e4:aa:8d:8d:5f:6b:2a:6c:b5:0e:02: 5f:eb:80:1f:6d:f9:eb:a1:94:02:a6:60:21:50:99:e9:d5:e0: 47:71:78:5a:e4:3e:6f:5d:19:21:19:31:3d:e6:74:45:91:cd: 49:20:10:ad -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICH0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwODA1MDYyMDMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxYTJiMS1kOTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLte8pWhGh2OxaK3QRLrba8vv+Z2cH5S5dI1lcMjeMZ9JGR0QVtK59pw/YYF oAin3Qf0UTLPLPekE+TsKTDve3aW6xfsWoNYTcWYMp0+GtXK5+z/Px6tu7OXUCA4 saMG8d+vNIjEk6aGgQ/plkBV8dxJFKvfG8o+2hnMaSe3jrt8INkH7/dY8C8+gMYi XsI2qmx3NhG2Fwv1IeUEOSkPgZOSVwZK+sJfhceiy0PUPKkpDu0/jCY43EBp/NHz PErp5xs6Fn7TvrBvtQ6kQNjsjLvmGVmgWYRjNEWFxQKCPXa95wMagC2h3yNnRT1i WgEMn3exh2PgTHBkmOEzOUAGHQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOS2G/tG 7YtX8Fsyg+ZX0MfxuRMOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUE4MEM4NzIw M0VCMTFGMEFBNDA4NzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGgHnwDBAGlZa4wDQYJKoZIhvcNAQELBQADggEBAIT8GJ0D aw21Qb+9ESoVZs7BDOQmItc7iy4aRHFzu8qqYmaPEJpsMCk6kap9B6O/IC0IE6NL WQkqikw1Lkw89pckpGONXs66SDC5PLJ5Dm8bKVPYVmL/Ws17+31IqEU63COQ64hO PTfyvnsYh9h8r7Ix2pfom100phjF7F3NFDvTk7yfE1tucHaoGzlZabKTPvL27+uM 4QcjHBwdeOLchWNjHRofdPfcHmbcvhwlARzejAkzogzh+s4AkHUWuvxPmeV02Jv3 /GavB7P/uinkqo2NX2sqbLUOAl/rgB9t+euhlAKmYCFQmenV4EdxeFrkPm9dGSEZ MT3mdEWRzUkgEK0= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:50 2025 by rpki-client