$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa File: C19496A61E6711EFAF014F65C4F9AE02.roa (raw, json) Hash identifier: ZAxSheyKf4ysbfQCvjAWpOxBAjgoY2fzyqxuJalkkDQ= Subject key identifier: 3C:06:7D:8B:D2:14:0C:94:D8:5B:87:25:03:F4:03:C2:0B:4B:72:5F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1F0B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa Signing time: Wed 16 Jul 2025 12:58:06 +0000 ROA not before: Wed 16 Jul 2025 12:58:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150593 IP address blocks: 160.19.35.0/24 maxlen: 24 160.25.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7947 (0x1f0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 16 12:58:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6877a1dd-81bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:38:2e:28:37:46:12:72:3d:a7:24:85:41: de:22:66:9b:f6:6d:e9:ab:82:d2:a0:a3:95:23:9a: 2a:a5:c7:24:19:28:f1:89:b4:f2:1f:58:ce:9d:30: 61:00:a3:ff:ed:ba:17:c9:57:b1:29:38:aa:0f:36: 4d:4c:08:7e:a8:ba:74:27:01:36:b3:e7:fa:25:f5: 8b:41:b7:80:5f:b0:30:46:e8:dd:18:8e:b9:7c:37: 09:de:1d:d7:91:62:9d:4f:45:65:3d:1d:77:84:df: a2:73:58:5d:d0:11:30:f8:f2:90:6e:26:02:ad:57: 37:8b:07:67:3e:f9:08:30:1e:c6:ee:2d:93:e5:8c: b1:2c:b4:e7:87:8c:cd:cf:de:5e:18:a8:02:42:f3: 12:93:cc:1f:26:78:6b:aa:e4:20:fe:eb:f5:e3:66: 32:a4:a7:a3:79:76:49:2f:47:5c:69:72:e5:42:6c: 28:73:42:65:c2:6e:ac:cf:2a:ac:5b:d9:3d:93:08: d4:26:ca:72:6f:c4:18:b3:e0:91:67:8d:19:fc:2f: 5c:58:a9:e7:2f:9b:88:ab:54:24:fa:86:0d:0c:6b: 58:83:13:24:34:25:70:c1:50:4d:9a:23:13:30:d4: 30:12:09:1f:a9:cc:5a:7f:66:76:0c:57:89:77:6c: df:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:06:7D:8B:D2:14:0C:94:D8:5B:87:25:03:F4:03:C2:0B:4B:72:5F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.19.35.0/24 160.25.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:b8:4e:79:98:d3:46:3c:c7:e4:0c:47:63:d7:7c:2c:3f:db: 46:d1:0c:52:40:6b:2e:c6:18:bb:e3:30:96:32:dd:9b:af:12: d7:5d:65:8a:f2:d0:40:83:48:68:3e:e8:a3:49:cb:bb:fb:11: 62:01:37:c5:f1:13:5d:9f:ff:c2:30:b9:19:db:2c:40:ed:c4: 0c:5b:f1:80:c1:83:4d:a2:d4:4f:16:f0:2e:eb:d4:a3:7a:e1: 3a:34:cf:6e:3c:19:10:f6:b6:13:cd:c9:d5:e0:75:33:38:d5: ce:58:a1:52:11:60:b5:a6:9c:b1:eb:c9:e1:dd:24:5d:03:4b: a1:72:86:76:60:ff:84:b4:6d:34:d6:1b:7b:bc:d3:34:c6:ee: de:d1:1b:57:6b:83:c7:e9:5b:ac:31:70:04:db:7b:54:0b:ea: c4:d7:52:09:be:6f:a3:18:e7:e1:d8:5e:41:8c:d9:58:99:60: bd:8a:9a:1b:83:cc:be:93:07:72:9c:75:33:ab:cb:11:d6:c2: 54:7d:84:4a:e3:d7:84:97:37:c1:26:37:2f:70:d6:1b:fa:ac: 88:cb:e3:3a:12:dc:74:51:cc:12:99:11:b0:1e:d2:18:de:79: 58:df:e8:6a:ce:2b:53:07:df:aa:d6:4b:6a:fb:c0:97:bd:d6: e2:e1:33:13 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzE2MTI1ODA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3YTFkZC04MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzA4Lig3RhJyPackhUHeImab9m3pq4LSoKOVI5oqpcckGSjxibTyH1jOnTBh AKP/7boXyVexKTiqDzZNTAh+qLp0JwE2s+f6JfWLQbeAX7AwRujdGI65fDcJ3h3X kWKdT0VlPR13hN+ic1hd0BEw+PKQbiYCrVc3iwdnPvkIMB7G7i2T5YyxLLTnh4zN z95eGKgCQvMSk8wfJnhrquQg/uv142YypKejeXZJL0dcaXLlQmwoc0Jlwm6szyqs W9k9kwjUJspyb8QYs+CRZ40Z/C9cWKnnL5uIq1Qk+oYNDGtYgxMkNCVwwVBNmiMT MNQwEgkfqcxaf2Z2DFeJd2zfqQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDwGfYvS FAyU2FuHJQP0A8ILS3JfMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzE5NDk2QTYx RTY3MTFFRkFGMDE0RjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACgEyMDBAGgGSYwDQYJKoZIhvcNAQELBQADggEBAEu4TnmY 00Y8x+QMR2PXfCw/20bRDFJAay7GGLvjMJYy3ZuvEtddZYry0ECDSGg+6KNJy7v7 EWIBN8XxE12f/8IwuRnbLEDtxAxb8YDBg02i1E8W8C7r1KN64To0z248GRD2thPN ydXgdTM41c5YoVIRYLWmnLHryeHdJF0DS6FyhnZg/4S0bTTWG3u80zTG7t7RG1dr g8fpW6wxcATbe1QL6sTXUgm+b6MY5+HYXkGM2ViZYL2KmhuDzL6TB3KcdTOryxHW wlR9hErj14SXN8EmNy9w1hv6rIjL4zoS3HRRzBKZEbAe0hjeeVjf6GrOK1MH36rW S2r7wJe91uLhMxM= -----END CERTIFICATE-----Generated at Sun Jul 20 22:32:44 2025 by rpki-client