$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E13D7B8EB0A311EF99B2F923C4F9AE02.roa File: E13D7B8EB0A311EF99B2F923C4F9AE02.roa (raw, json) Hash identifier: XnB3VllkGZuJxyIRmRnVWQWfOzXu/3V3pr022mCq0ic= Subject key identifier: AB:CF:A7:6C:63:AF:66:0F:6B:95:BE:43:80:43:F4:F3:CF:39:43:BC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1C22 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E13D7B8EB0A311EF99B2F923C4F9AE02.roa Signing time: Fri 06 Dec 2024 08:43:57 +0000 ROA not before: Fri 06 Dec 2024 08:43:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150623 IP address blocks: 160.191.28.0/23 maxlen: 24 160.250.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7202 (0x1c22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 6 08:43:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6752b94d-2c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:fd:9c:8d:f0:bf:9d:95:9a:a8:02:fb:df: 62:e9:2c:2b:22:50:11:9a:33:4b:21:29:d8:d7:96: bc:21:96:64:c8:f9:2e:2d:fb:1f:91:7f:b4:a7:03: 45:02:4c:a8:0a:9c:c6:49:4a:bd:85:66:3d:bc:1c: 1e:cf:d7:f8:53:67:2e:53:d2:01:38:5e:2a:e0:f5: e5:db:64:be:7e:19:a0:20:3c:11:12:70:f0:d2:02: c8:80:a5:84:26:a6:77:61:58:9a:e4:0b:11:48:b5: a0:48:c7:ee:1a:b8:33:83:b8:39:33:b3:39:98:23: 64:6f:8b:16:23:8b:bc:d1:5e:94:6d:72:65:a4:4a: d9:d3:24:0a:ad:e1:d3:e2:06:0d:1c:af:61:48:3d: 96:fe:84:12:41:e5:d5:43:4b:6e:47:16:4a:2d:b8: 2c:ea:6e:a2:45:08:f3:91:82:24:f5:67:45:a5:56: a8:3c:aa:8c:f1:4e:20:47:fb:17:52:b3:45:f4:39: e2:ec:8c:2d:19:42:2e:83:ff:b4:b1:b6:fe:28:c4: d5:57:04:f3:19:7f:fb:f6:25:84:9b:a5:cf:0e:7e: 5f:c4:bf:d7:0a:5b:b2:0a:b7:26:48:45:c9:93:06: 6a:f0:7f:be:de:53:c7:30:61:1b:90:a9:48:af:bc: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:A7:6C:63:AF:66:0F:6B:95:BE:43:80:43:F4:F3:CF:39:43:BC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E13D7B8EB0A311EF99B2F923C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.28.0/23 160.250.111.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:2b:02:0a:09:8e:64:fa:8b:4e:da:a5:80:14:e9:b8:85:dd: 07:23:5e:d1:0c:da:53:66:f6:41:f4:57:f9:eb:07:48:d9:3a: 85:b3:5b:eb:7a:a8:94:4e:02:74:93:a6:7f:c9:4c:38:2a:63: 33:17:d7:5c:e9:7c:08:e8:cc:06:29:a1:c2:f5:b3:f1:88:02: df:6d:9e:48:3d:79:49:4e:68:cd:35:85:bf:e5:9e:5e:05:b0: 2e:ec:79:74:00:72:68:e1:41:7f:8d:08:64:4b:45:48:e7:78: ca:36:fd:df:f7:22:ed:f1:bf:fe:70:59:a3:fc:8e:f7:91:69: d4:a2:13:22:ca:af:96:e4:5c:8d:b7:27:33:b4:ef:95:23:fe: a3:da:df:cf:dc:3a:20:2a:e3:17:2c:8c:fe:92:01:a5:8f:87: 1f:4c:45:39:8d:f2:98:a2:78:ee:5b:45:fe:7f:51:2e:4b:a0: 0e:e3:db:71:fe:ce:d9:9d:de:f3:ef:1a:f7:3f:d3:40:48:b0: 0e:6f:21:51:04:12:ca:01:3f:ad:10:eb:b0:27:e6:fc:26:39: bb:fd:6f:9f:a7:1f:fb:1e:16:ed:c8:55:97:60:76:63:d6:b3: 87:b2:28:24:28:15:6d:53:68:2c:b6:6e:65:1b:01:d5:6a:d2: 37:71:06:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMjA2MDg0MzU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUyYjk0ZC0yYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUL9nI3wv52VmqgC+99i6SwrIlARmjNLISnY15a8IZZkyPkuLfsfkX+0pwNF AkyoCpzGSUq9hWY9vBwez9f4U2cuU9IBOF4q4PXl22S+fhmgIDwREnDw0gLIgKWE JqZ3YVia5AsRSLWgSMfuGrgzg7g5M7M5mCNkb4sWI4u80V6UbXJlpErZ0yQKreHT 4gYNHK9hSD2W/oQSQeXVQ0tuRxZKLbgs6m6iRQjzkYIk9WdFpVaoPKqM8U4gR/sX UrNF9Dni7IwtGUIug/+0sbb+KMTVVwTzGX/79iWEm6XPDn5fxL/XCluyCrcmSEXJ kwZq8H++3lPHMGEbkKlIr7z3sQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKvPp2xj r2YPa5W+Q4BD9PPPOUO8MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTEzRDdCOEVC MEEzMTFFRjk5QjJGOTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGgvxwDBACg+m8wDQYJKoZIhvcNAQELBQADggEBAB4rAgoJ jmT6i07apYAU6biF3QcjXtEM2lNm9kH0V/nrB0jZOoWzW+t6qJROAnSTpn/JTDgq YzMX11zpfAjozAYpocL1s/GIAt9tnkg9eUlOaM01hb/lnl4FsC7seXQAcmjhQX+N CGRLRUjneMo2/d/3Iu3xv/5wWaP8jveRadSiEyLKr5bkXI23JzO075Uj/qPa38/c OiAq4xcsjP6SAaWPhx9MRTmN8piieO5bRf5/US5LoA7j23H+ztmd3vPvGvc/00BI sA5vIVEEEsoBP60Q67An5vwmObv9b5+nH/seFu3IVZdgdmPWs4eyKCQoFW1TaCy2 bmUbAdVq0jdxBr8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:17 2025 by rpki-client