$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa File: E3EF319A4E3F11EFB7712730C4F9AE02.roa (raw, json) Hash identifier: KTNvVoE/NtEO/3t8CIi911mEE9g4M6H6SEUKwt0HCZA= Subject key identifier: 8A:E1:D2:D1:4D:82:13:96:E7:0F:BD:6A:4B:E8:33:1E:8B:B6:35:6A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E38 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:46 +0000 ROA not before: Thu 08 May 2025 15:55:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59191 IP address blocks: 160.25.106.0/23 maxlen: 24 160.30.116.0/23 maxlen: 24 160.187.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7736 (0x1e38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd402-44d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:80:66:b1:eb:ff:8e:c0:4d:de:60:1a:f5:2b: 24:aa:de:6d:1a:42:ea:2c:c5:b8:34:ca:51:7b:e3: 7c:46:dd:1f:8a:5e:a4:34:f4:ec:9e:00:29:66:fc: 3a:06:d8:99:5d:d4:e4:e3:30:49:6b:0f:2f:b4:c7: 56:7a:7e:09:29:37:ac:e4:b6:f6:7f:d1:b2:97:2c: 97:cd:62:df:03:81:60:81:04:06:8f:cd:93:0a:05: 89:c3:d5:d3:13:bc:ce:5e:b5:75:71:37:04:d2:51: 6e:44:e6:33:19:2e:09:9f:b2:99:e2:c2:b0:d3:86: eb:48:a6:b4:b8:ab:38:3e:ea:32:4f:9f:b8:f5:5f: df:11:79:3f:f2:59:6b:7f:53:7d:24:42:63:db:54: cb:df:8b:87:2e:9c:a5:88:49:3b:c6:0b:59:e9:67: 0f:36:69:3c:57:00:95:55:2f:4f:bb:14:0e:6b:e0: c1:90:fd:a7:2b:f3:de:42:1b:c0:b1:52:3f:aa:16: fd:d0:67:f7:5a:24:89:41:28:8c:ca:c2:bf:eb:46: 27:72:62:42:ae:5b:23:06:56:bf:ce:1d:48:00:8f: f5:67:2e:67:04:ce:31:2e:03:61:44:cf:54:d0:a5: a2:cc:98:24:c2:8b:38:40:a0:14:32:e3:c2:ed:f8: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:D2:D1:4D:82:13:96:E7:0F:BD:6A:4B:E8:33:1E:8B:B6:35:6A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.106.0/23 160.30.116.0/23 160.187.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:8f:17:d8:08:79:56:64:fc:bf:a1:5b:34:f6:b7:9c:5d:31: d4:6d:58:e9:91:2c:1b:bd:17:e6:69:37:61:72:e6:36:01:39: 2f:6f:9b:04:7e:bd:24:00:1b:dc:f1:6d:12:0f:e8:8b:21:90: 71:06:f6:15:ba:94:79:f7:c7:76:23:7c:25:98:75:89:dd:62: d9:d4:bc:ea:cb:77:fd:d3:9c:8c:6b:1a:01:a4:f0:bb:3f:7d: b2:c8:d8:6f:d9:a2:c8:18:f7:ab:5e:12:dc:03:2a:4e:76:a7: eb:d5:df:d7:c1:f5:0c:01:11:72:59:d2:b6:0a:e2:98:07:f2: ff:dd:85:81:ca:15:b4:07:c6:a5:1d:5c:13:63:f0:c7:cf:b8: 27:66:de:a7:c7:2b:58:14:8f:1a:e0:f2:66:9d:a4:ae:6c:a3: d7:f7:14:58:ac:02:6c:1c:e5:67:f4:f2:e4:1e:c6:a1:a2:9f: c2:28:92:36:bc:ac:01:71:67:3a:2b:7e:a6:1d:e1:78:33:54: 61:5d:8d:91:88:4b:0f:fa:06:98:1b:26:4a:d8:09:23:b8:20: 78:e8:2f:16:1e:2b:a7:e9:a8:5c:fe:62:c9:4b:05:51:66:49: a6:34:ab:e3:1f:8b:4d:39:71:bd:4e:df:ca:a8:4f:c7:38:ca: 82:e2:7f:92 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDQwMi00NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oBmsev/jsBN3mAa9Sskqt5tGkLqLMW4NMpRe+N8Rt0fil6kNPTsngApZvw6 BtiZXdTk4zBJaw8vtMdWen4JKTes5Lb2f9GylyyXzWLfA4FggQQGj82TCgWJw9XT E7zOXrV1cTcE0lFuROYzGS4Jn7KZ4sKw04brSKa0uKs4PuoyT5+49V/fEXk/8llr f1N9JEJj21TL34uHLpyliEk7xgtZ6WcPNmk8VwCVVS9PuxQOa+DBkP2nK/PeQhvA sVI/qhb90Gf3WiSJQSiMysK/60YncmJCrlsjBla/zh1IAI/1Zy5nBM4xLgNhRM9U 0KWizJgkwos4QKAUMuPC7fgI1QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIrh0tFN ghOW5w+9akvoMx6LtjVqMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTNFRjMxOUE0 RTNGMTFFRkI3NzEyNzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGgGWoDBAGgHnQDBAGguz4wDQYJKoZIhvcNAQELBQADggEB AGyPF9gIeVZk/L+hWzT2t5xdMdRtWOmRLBu9F+ZpN2Fy5jYBOS9vmwR+vSQAG9zx bRIP6IshkHEG9hW6lHn3x3YjfCWYdYndYtnUvOrLd/3TnIxrGgGk8Ls/fbLI2G/Z osgY96teEtwDKk52p+vV39fB9QwBEXJZ0rYK4pgH8v/dhYHKFbQHxqUdXBNj8MfP uCdm3qfHK1gUjxrg8madpK5so9f3FFisAmwc5Wf08uQexqGin8Iokja8rAFxZzor fqYd4XgzVGFdjZGISw/6BpgbJkrYCSO4IHjoLxYeK6fpqFz+YslLBVFmSaY0q+Mf i005cb1O38qoT8c4yoLif5I= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:08 2025 by rpki-client