$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa File: EF2F049E74C411EFBE28DF30C4F9AE02.roa (raw, json) Hash identifier: jmjFyJzS7aE9B/WPGaZLtRug+RhieeGyw/AMOwyGVN4= Subject key identifier: 60:AF:E0:2A:D2:81:B9:74:98:00:F0:C7:22:60:72:8F:16:02:76:C7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E95 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa Signing time: Tue 10 Jun 2025 08:27:10 +0000 ROA not before: Tue 10 Jun 2025 08:27:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151690 IP address blocks: 160.187.48.0/24 maxlen: 24 160.187.207.0/24 maxlen: 24 160.191.124.0/24 maxlen: 24 160.191.125.0/24 maxlen: 24 165.99.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 05:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7829 (0x1e95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 10 08:27:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6847ec5e-2c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:f8:0b:45:41:9a:50:56:13:36:b3:4b:e9: ca:30:f9:0e:9a:80:02:b7:07:09:b6:17:f7:66:19: 2d:69:47:25:90:ab:f4:39:3a:56:d3:05:21:54:b8: 26:8c:c3:b3:e5:f6:8e:f5:e6:c8:ef:34:6c:e5:25: 6e:7c:fb:8f:c7:89:74:fb:91:fd:fd:64:f7:bf:40: 80:7e:25:ad:62:4f:e3:4f:05:fd:cc:c5:b6:d3:2a: ff:cb:c6:ec:41:55:c5:20:98:30:c8:ad:c3:5c:39: 08:e9:c1:dc:8d:1f:78:dc:9a:37:59:b5:21:70:1b: 1b:f4:68:9e:aa:85:9e:a9:32:d8:96:02:da:69:ae: 57:0d:8d:ef:20:53:d7:9e:02:2e:85:be:61:59:1b: e8:53:0f:c1:02:57:f3:86:15:17:ea:51:ad:3b:57: 5b:ee:bf:8b:25:61:7b:85:99:32:87:4d:63:d1:a1: ad:ed:d3:6e:71:6c:4a:06:17:b6:c4:c4:18:72:6e: cf:f7:c8:6d:ee:94:af:3e:03:62:37:87:4f:2e:dc: 3c:d4:f8:43:da:81:b0:7d:c8:64:05:f0:e9:50:6c: 9b:d1:d8:28:b4:40:ec:f5:47:3b:f3:9f:6f:a9:ec: 15:8e:e9:44:4b:97:4e:e6:2c:d0:69:2c:65:c5:da: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:E0:2A:D2:81:B9:74:98:00:F0:C7:22:60:72:8F:16:02:76:C7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF2F049E74C411EFBE28DF30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.48.0/24 160.187.207.0/24 160.191.124.0/23 165.99.143.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a1:ac:0c:6a:14:2c:4d:8d:09:c8:8d:75:b4:1b:f6:41:99: 23:97:ce:e3:68:6d:19:0a:4c:79:44:c7:bf:9a:79:8b:0d:be: ba:90:6e:13:7b:f8:0a:7e:a7:0c:4a:f4:fe:ce:0a:51:5d:0d: 57:21:6f:cf:45:24:db:c7:3c:a1:45:98:6c:d2:e6:4c:e1:fd: ef:b6:2e:fb:38:b5:d1:22:51:8a:2c:40:d9:9d:0e:23:56:81: 8e:fa:96:e5:e0:67:10:d0:23:f9:27:1b:84:a7:4f:60:f3:6b: f6:c2:31:58:d3:1b:f3:1a:50:51:2a:a9:b7:9d:36:09:6a:73: 1e:39:cf:e1:8e:5c:fe:6b:f9:fc:35:53:56:d9:56:24:49:2a: 1d:6b:56:a8:dd:83:58:24:49:46:cf:c9:e4:df:5d:b6:6b:ff: 17:2b:f2:f7:1f:47:69:81:91:72:ed:17:87:8e:8a:b0:0a:d6: 0c:e3:24:4a:10:d6:48:ba:38:ac:d9:52:b4:30:5c:41:6b:cf: 55:60:7b:1c:9b:2b:0a:d3:b9:b2:6b:2d:20:df:1a:13:2a:76: a9:32:b2:ea:61:2c:48:1c:a5:75:67:a4:8e:29:5d:ad:f0:7a: 60:1d:d5:39:4d:4a:d8:d7:24:32:81:31:67:92:e1:eb:20:0b: ea:9f:e9:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjEwMDgyNzEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ3ZWM1ZS0yYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KL4C0VBmlBWEzazS+nKMPkOmoACtwcJthf3ZhktaUclkKv0OTpW0wUhVLgm jMOz5faO9ebI7zRs5SVufPuPx4l0+5H9/WT3v0CAfiWtYk/jTwX9zMW20yr/y8bs QVXFIJgwyK3DXDkI6cHcjR943Jo3WbUhcBsb9GieqoWeqTLYlgLaaa5XDY3vIFPX ngIuhb5hWRvoUw/BAlfzhhUX6lGtO1db7r+LJWF7hZkyh01j0aGt7dNucWxKBhe2 xMQYcm7P98ht7pSvPgNiN4dPLtw81PhD2oGwfchkBfDpUGyb0dgotEDs9Uc7859v qewVjulES5dO5izQaSxlxdrayQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFGCv4CrS gbl0mADwxyJgco8WAnbHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUYyRjA0OUU3 NEM0MTFFRkJFMjhERjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBACguzADBACgu88DBAGgv3wDBAClY48wDQYJKoZIhvcNAQEL BQADggEBAHOhrAxqFCxNjQnIjXW0G/ZBmSOXzuNobRkKTHlEx7+aeYsNvrqQbhN7 +Ap+pwxK9P7OClFdDVchb89FJNvHPKFFmGzS5kzh/e+2Lvs4tdEiUYosQNmdDiNW gY76luXgZxDQI/knG4SnT2Dza/bCMVjTG/MaUFEqqbedNglqcx45z+GOXP5r+fw1 U1bZViRJKh1rVqjdg1gkSUbPyeTfXbZr/xcr8vcfR2mBkXLtF4eOirAK1gzjJEoQ 1ki6OKzZUrQwXEFrz1VgexybKwrTubJrLSDfGhMqdqkysuphLEgcpXVnpI4pXa3w emAd1TlNStjXJDKBMWeS4esgC+qf6fc= -----END CERTIFICATE-----Generated at Mon Jun 16 14:39:28 2025 by rpki-client