$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7863937C9B4111EFA56D9E39C4F9AE02.roa File: 7863937C9B4111EFA56D9E39C4F9AE02.roa (raw, json) Hash identifier: 3MT6EH7I0p4fxGvGm8z3RO90q/FdqwOdLSUuoA9eKwU= Subject key identifier: 55:E7:E3:12:CF:A9:57:8A:B4:86:A0:23:0E:E0:ED:76:AB:1B:D5:A4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EFD Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7863937C9B4111EFA56D9E39C4F9AE02.roa Signing time: Tue 15 Jul 2025 07:43:27 +0000 ROA not before: Tue 15 Jul 2025 07:43:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153256 IP address blocks: 160.191.74.0/23 maxlen: 24 161.248.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7933 (0x1efd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 15 07:43:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6876069f-a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:72:ad:82:fb:25:d6:51:32:f5:2f:94:ae: 4a:3a:89:e7:b3:ec:53:45:53:5d:0f:66:0a:08:3a: 50:c3:22:ac:05:34:fc:1f:a6:6a:70:58:1e:08:7e: e2:44:d7:55:74:e3:72:61:2d:a1:16:87:85:f8:32: fe:e0:76:2a:19:4a:cd:52:8d:b2:14:f7:91:1a:bf: 0b:e1:3f:c3:4c:3f:2b:13:32:3e:30:7a:1a:df:52: 1b:e8:2a:14:ec:62:21:94:a8:b4:5f:31:28:6e:cd: 31:c3:6e:84:37:94:f8:ff:12:01:e8:d6:c4:fa:b5: 78:67:49:13:fa:52:d4:22:b1:a4:be:cb:cf:d6:67: 2a:a0:2b:cd:50:57:3f:fc:ff:ee:7a:74:4a:c1:22: d3:ff:93:58:e8:1c:30:91:1b:fb:3b:2e:6f:0e:58: 1a:17:9d:35:83:c7:1e:3c:66:33:f1:4b:dc:73:9a: cb:cb:bb:e6:cb:14:a7:89:bd:fa:a8:02:65:09:71: 43:9e:5a:08:91:08:6e:53:18:ba:ce:45:fd:55:c8: ef:07:38:e7:7a:19:92:c5:f6:e2:92:e0:c2:3f:0d: 4f:7f:af:a7:dd:16:ef:46:17:6f:da:75:02:6b:3d: f5:f0:e0:c2:69:ee:ee:82:1d:2a:25:72:8f:b7:3e: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E7:E3:12:CF:A9:57:8A:B4:86:A0:23:0E:E0:ED:76:AB:1B:D5:A4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7863937C9B4111EFA56D9E39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.74.0/23 161.248.68.0/23 Signature Algorithm: sha256WithRSAEncryption 85:c2:12:09:c4:bb:54:8e:ed:4e:52:da:62:cf:99:53:db:9a: 76:9b:15:4a:10:77:84:0a:58:1a:26:ba:86:f3:95:de:d5:bf: 32:d3:a3:d7:09:7d:43:92:08:90:32:8a:57:e8:4d:2c:4f:b4: 1b:55:cf:5d:b8:87:77:b9:15:d1:0d:20:2a:31:ac:54:52:e6: 4d:49:5c:30:ec:b9:3b:37:94:bc:27:d8:98:29:5c:42:d4:ca: b9:b6:e1:a1:ef:0b:bf:05:43:fa:79:73:88:f4:6c:4d:e4:d0: 27:3b:71:c0:26:4f:0c:69:db:53:63:42:5c:e2:59:53:c7:10: f2:c4:cc:27:17:a0:7c:ad:7c:8f:e3:21:87:b1:f4:2b:38:96: 17:c4:dd:ff:9b:75:7d:9b:a8:e8:45:71:4d:cb:62:ef:49:29: 9b:d3:79:25:6a:56:96:57:b8:99:71:84:f2:5c:74:81:79:8d: 19:34:ae:de:94:99:8e:f1:b9:7c:99:b1:ee:bb:2c:90:35:99: 5b:3b:3a:2c:d6:26:16:9c:48:f8:26:2a:4e:a6:5c:ac:a1:95: af:bb:15:18:ad:16:10:88:27:b4:83:3c:63:2e:cb:f4:fc:87: cb:5c:e8:7c:db:7b:df:3a:ae:db:cd:ae:03:b7:6b:1d:95:ee: 08:55:70:6f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzE1MDc0MzI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc2MDY5Zi1hOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HxyrYL7JdZRMvUvlK5KOonns+xTRVNdD2YKCDpQwyKsBTT8H6ZqcFgeCH7i RNdVdONyYS2hFoeF+DL+4HYqGUrNUo2yFPeRGr8L4T/DTD8rEzI+MHoa31Ib6CoU 7GIhlKi0XzEobs0xw26EN5T4/xIB6NbE+rV4Z0kT+lLUIrGkvsvP1mcqoCvNUFc/ /P/uenRKwSLT/5NY6BwwkRv7Oy5vDlgaF501g8cePGYz8Uvcc5rLy7vmyxSnib36 qAJlCXFDnloIkQhuUxi6zkX9VcjvBzjnehmSxfbikuDCPw1Pf6+n3RbvRhdv2nUC az318ODCae7ugh0qJXKPtz7LeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFXn4xLP qVeKtIagIw7g7XarG9WkMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzg2MzkzN0M5 QjQxMTFFRkE1NkQ5RTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGgv0oDBAGh+EQwDQYJKoZIhvcNAQELBQADggEBAIXCEgnE u1SO7U5S2mLPmVPbmnabFUoQd4QKWBomuobzld7VvzLTo9cJfUOSCJAyilfoTSxP tBtVz124h3e5FdENICoxrFRS5k1JXDDsuTs3lLwn2JgpXELUyrm24aHvC78FQ/p5 c4j0bE3k0Cc7ccAmTwxp21NjQlziWVPHEPLEzCcXoHytfI/jIYex9Cs4lhfE3f+b dX2bqOhFcU3LYu9JKZvTeSVqVpZXuJlxhPJcdIF5jRk0rt6UmY7xuXyZse67LJA1 mVs7OizWJhacSPgmKk6mXKyhla+7FRitFhCIJ7SDPGMuy/T8h8tc6Hzbe986rtvN rgO3ax2V7ghVcG8= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:44 2025 by rpki-client