$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa File: BDE8D4DCDE0F11EF86254166C4F9AE02.roa (raw, json) Hash identifier: olO4h1KYxITErmb/xTvGSu1dH1pUU519wfo4UEBSvZA= Subject key identifier: 00:B6:03:A8:38:23:37:BB:D5:94:4D:D9:41:84:EC:C2:83:F2:BE:CC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1CA1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa Signing time: Wed 29 Jan 2025 07:07:46 +0000 ROA not before: Wed 29 Jan 2025 07:07:46 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134331 IP address blocks: 161.248.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7329 (0x1ca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 29 07:07:46 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6799d3c2-9931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:d8:3e:e4:e9:88:2f:45:b4:f6:88:99:74: b6:ad:7c:ba:b7:25:65:a8:5f:27:13:dd:26:d9:db: a6:a2:93:bf:5f:6d:84:73:c1:fe:bc:a4:74:49:52: 65:23:61:0d:5a:e4:4b:39:ba:69:b3:73:46:1f:33: e8:38:8a:28:1d:cb:ec:f0:26:5d:43:5b:30:60:fa: 9b:30:d3:48:19:b0:53:a9:9e:da:93:bb:a5:4e:2b: c4:b9:bf:dc:21:b6:b4:61:98:39:b2:7c:8b:e1:10: b7:dd:61:29:04:99:86:66:26:31:78:fd:ba:d0:ed: 6a:97:68:5c:67:11:ac:96:9f:32:05:fe:cb:63:63: 12:bf:10:dc:0c:3b:ef:96:04:22:cd:74:d5:7a:a0: 95:5e:3c:61:0d:b8:0b:00:c8:87:9a:16:48:45:d1: d0:89:7e:36:53:75:33:b3:2d:7c:0c:37:85:79:1a: 0a:c6:7d:1d:12:66:f5:a0:35:0b:6c:f0:b8:fc:ee: 22:9e:65:6b:54:b8:39:11:16:aa:62:6b:c4:b9:d3: e4:75:90:6f:7c:99:8d:71:93:f2:cf:46:2e:ef:d1: b9:dd:49:b4:2e:ff:35:a8:bc:d9:bd:7a:1a:3e:29: 6a:70:a7:19:f3:35:85:dc:d5:40:7f:14:b3:81:e0: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B6:03:A8:38:23:37:BB:D5:94:4D:D9:41:84:EC:C2:83:F2:BE:CC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BDE8D4DCDE0F11EF86254166C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.64.0/23 Signature Algorithm: sha256WithRSAEncryption 72:26:03:c1:9e:95:e0:d2:c3:92:74:83:0f:f3:55:7c:c4:d2: bc:83:79:12:4c:71:f0:17:c3:0f:3b:e8:d8:b0:97:99:fe:8c: d8:99:af:ea:a7:0d:39:17:16:7b:d7:24:db:43:15:7b:c4:22: 1f:c0:cf:57:d8:d9:4a:cf:48:d1:1c:ff:5e:59:14:04:30:48: 2b:be:f6:c5:c3:c6:50:4d:bb:d3:08:a5:ed:02:61:f9:ed:45: e3:0d:9b:93:f6:43:5f:8c:61:2a:a4:ae:97:eb:5c:b1:9c:bc: af:19:69:1d:fe:21:b7:6a:05:84:83:e2:31:b7:ee:7c:6d:bc: fa:ee:56:b8:b2:89:eb:63:10:b6:b9:39:a2:bb:db:d9:39:cd: 84:7a:dd:7a:04:99:d7:61:7b:e1:c8:bd:64:13:25:3b:a6:36: ab:7c:56:bb:1b:e3:d2:47:13:e3:21:f7:15:7a:3b:12:dc:2b: bf:7f:53:f4:a1:08:cb:90:ec:2e:b7:12:dc:89:f3:ea:08:d4: 15:bf:a5:33:a7:ec:31:ac:dd:45:36:fa:ab:5c:6b:4c:40:03: 54:14:26:b8:dc:01:2f:1e:ba:54:42:12:10:46:60:ed:f6:12: 3a:96:83:47:b1:3e:b9:bc:86:6f:89:c0:aa:92:e9:9a:d2:36: 40:57:2f:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwMTI5MDcwNzQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5ZDNjMi05OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTPYPuTpiC9FtPaImXS2rXy6tyVlqF8nE90m2dumopO/X22Ec8H+vKR0SVJl I2ENWuRLObpps3NGHzPoOIooHcvs8CZdQ1swYPqbMNNIGbBTqZ7ak7ulTivEub/c Iba0YZg5snyL4RC33WEpBJmGZiYxeP260O1ql2hcZxGslp8yBf7LY2MSvxDcDDvv lgQizXTVeqCVXjxhDbgLAMiHmhZIRdHQiX42U3Uzsy18DDeFeRoKxn0dEmb1oDUL bPC4/O4inmVrVLg5ERaqYmvEudPkdZBvfJmNcZPyz0Yu79G53Um0Lv81qLzZvXoa PilqcKcZ8zWF3NVAfxSzgeCicwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAC2A6g4 Ize71ZRN2UGE7MKD8r7MMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkRFOEQ0RENE RTBGMTFFRjg2MjU0MTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+EAwDQYJKoZIhvcNAQELBQADggEBAHImA8GeleDSw5J0 gw/zVXzE0ryDeRJMcfAXww876Niwl5n+jNiZr+qnDTkXFnvXJNtDFXvEIh/Az1fY 2UrPSNEc/15ZFAQwSCu+9sXDxlBNu9MIpe0CYfntReMNm5P2Q1+MYSqkrpfrXLGc vK8ZaR3+IbdqBYSD4jG37nxtvPruVriyietjELa5OaK729k5zYR63XoEmddhe+HI vWQTJTumNqt8Vrsb49JHE+Mh9xV6OxLcK79/U/ShCMuQ7C63EtyJ8+oI1BW/pTOn 7DGs3UU2+qtca0xAA1QUJrjcAS8eulRCEhBGYO32EjqWg0exPrm8hm+JwKqS6ZrS NkBXL8k= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:11 2025 by rpki-client