$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa File: 72B6A58EEEA411EF980AE31AC4F9AE02.roa (raw, json) Hash identifier: cevyR7zxnRqXyyY4yG8dHLNBX6WG/iHDxXZuZ9hBPzw= Subject key identifier: 84:E7:07:E8:E4:91:15:3D:F9:0C:C4:31:99:78:1A:96:2E:A7:18:4E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1CC7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa Signing time: Wed 19 Feb 2025 09:32:34 +0000 ROA not before: Wed 19 Feb 2025 09:32:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 151108 IP address blocks: 160.250.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7367 (0x1cc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Feb 19 09:32:34 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67b5a532-9982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:dd:50:68:f2:35:17:ae:21:99:76:52:21: a4:a8:9f:7d:9e:66:98:8e:a8:c5:61:52:cd:7b:5a: 0d:ea:bb:18:e7:55:cf:44:e7:de:24:44:00:1e:2b: a6:50:21:96:60:46:2e:84:8d:10:9b:f3:55:86:75: 7d:e9:d5:e8:2e:de:ca:3b:2c:93:ea:99:62:91:13: 75:58:d7:b6:ba:8b:22:17:59:46:97:7f:dd:16:81: 95:17:b8:db:3b:9e:72:49:33:9f:f1:a7:73:ba:18: b7:e6:ce:8c:68:bf:78:26:e6:b7:4b:ab:5a:13:48: 59:92:36:bc:5d:bf:17:5d:0f:ce:1c:31:f1:f4:96: af:13:32:13:c4:cd:4a:03:0e:06:d4:46:58:57:e3: 60:6a:c8:31:f5:2f:c8:18:9d:9e:f3:93:20:61:44: f0:66:45:ea:03:67:cb:3b:19:cd:75:60:12:4d:5c: 04:e4:eb:a9:d8:0d:4b:e3:31:59:17:de:ae:88:f3: c4:c0:0c:a0:a6:39:c7:26:0a:b5:22:f0:cd:91:16: 83:48:4e:ec:44:ea:a8:1a:be:ec:74:3c:cf:f9:47: b2:ff:98:be:46:2e:1d:52:5e:69:d9:a3:f1:24:50: b0:68:36:2c:77:c4:a5:4d:ca:b5:05:32:f3:e7:35: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E7:07:E8:E4:91:15:3D:F9:0C:C4:31:99:78:1A:96:2E:A7:18:4E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.234.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:66:42:99:f0:7e:53:08:d9:cc:17:4b:7e:71:8d:47:a7:3f: ba:1e:7e:2f:d7:cf:66:35:71:64:db:be:10:d3:5e:b3:c8:7c: eb:8b:0e:7f:bf:8b:b2:b7:c8:e8:1d:d4:00:25:b4:35:54:08: 9a:2b:d2:2a:97:d6:f6:04:5a:db:b2:87:98:e3:bf:6b:68:79: 00:53:36:b8:67:e6:dc:c0:8d:6e:dd:37:0e:a4:d2:18:a9:8a: 98:e7:38:d5:a8:72:d3:a3:1e:2e:ee:d7:8c:28:59:df:8e:ae: 01:d1:c6:0a:8e:e4:fb:5c:e5:ac:a5:35:4c:da:d0:5b:7b:77: e7:20:1d:db:88:5c:a4:d0:d4:d1:1f:60:62:7d:5c:bf:1d:cb: 47:a8:e3:9a:0b:94:6e:8c:ae:db:e6:f9:6e:1f:5b:b0:48:8b: bb:24:5c:7e:b4:70:e6:2f:87:90:3d:56:fe:4e:9a:1c:f2:da: 96:7d:5a:a9:ef:20:5e:f7:08:64:61:ae:ef:fc:b4:f8:09:cd: fa:d0:74:33:70:1d:57:76:b0:86:8f:53:c7:37:dc:43:50:47: 31:5d:c7:7c:62:2a:ee:81:6f:7d:3d:a9:68:ff:35:09:a0:fe: 25:37:0d:68:87:83:41:f7:ad:e3:71:df:70:24:82:e1:1b:0d: 7b:6a:1c:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwMjE5MDkzMjM0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1YTUzMi05OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4/dUGjyNReuIZl2UiGkqJ99nmaYjqjFYVLNe1oN6rsY51XPROfeJEQAHium UCGWYEYuhI0Qm/NVhnV96dXoLt7KOyyT6plikRN1WNe2uosiF1lGl3/dFoGVF7jb O55ySTOf8adzuhi35s6MaL94Jua3S6taE0hZkja8Xb8XXQ/OHDHx9JavEzITxM1K Aw4G1EZYV+Ngasgx9S/IGJ2e85MgYUTwZkXqA2fLOxnNdWASTVwE5Oup2A1L4zFZ F96uiPPEwAygpjnHJgq1IvDNkRaDSE7sROqoGr7sdDzP+Uey/5i+Ri4dUl5p2aPx JFCwaDYsd8SlTcq1BTLz5zWhIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFITnB+jk kRU9+QzEMZl4GpYupxhOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzJCNkE1OEVF RUE0MTFFRjk4MEFFMzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+uowDQYJKoZIhvcNAQELBQADggEBACtmQpnwflMI2cwX S35xjUenP7oefi/Xz2Y1cWTbvhDTXrPIfOuLDn+/i7K3yOgd1AAltDVUCJor0iqX 1vYEWtuyh5jjv2toeQBTNrhn5tzAjW7dNw6k0hipipjnONWoctOjHi7u14woWd+O rgHRxgqO5Ptc5aylNUza0Ft7d+cgHduIXKTQ1NEfYGJ9XL8dy0eo45oLlG6Mrtvm +W4fW7BIi7skXH60cOYvh5A9Vv5Omhzy2pZ9WqnvIF73CGRhru/8tPgJzfrQdDNw HVd2sIaPU8c33ENQRzFdx3xiKu6Bb309qWj/NQmg/iU3DWiHg0H3reNx33AkguEb DXtqHFQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:17:54 2025 by rpki-client