$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB22BAC0607011F0925EA11DC4F9AE02.roa File: DB22BAC0607011F0925EA11DC4F9AE02.roa (raw, json) Hash identifier: MihUpTWcCicI2UJWdwTbxi7yJb1pD+Z00/PElG+zUr0= Subject key identifier: F7:E7:4B:6C:19:4B:85:23:85:0B:26:A5:64:6F:74:73:5E:A4:6A:A0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EF5 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB22BAC0607011F0925EA11DC4F9AE02.roa Signing time: Mon 14 Jul 2025 05:10:28 +0000 ROA not before: Mon 14 Jul 2025 05:10:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154012 IP address blocks: 165.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7925 (0x1ef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 14 05:10:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68749144-19a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:61:b1:38:8c:7f:fc:d9:e3:bb:2e:8b:66:47: 27:fd:7d:95:ef:7c:25:80:c7:a3:d6:64:53:9e:1d: 34:c4:63:2a:78:4a:b2:20:4f:43:b8:68:f1:ac:cc: 31:13:53:44:44:22:e5:66:60:e5:28:18:fa:18:19: c3:e6:8f:0d:58:aa:15:45:70:b0:3d:ad:ed:e6:46: bb:9e:19:10:3a:3c:5c:e9:32:f1:15:8a:10:09:31: 7a:60:b8:07:c2:1a:bd:d9:46:9a:1d:f1:26:f6:20: 75:c5:64:25:48:1f:be:28:e9:e8:e5:bf:e4:46:eb: f7:9e:e6:16:76:87:09:ac:82:b1:25:3e:43:47:89: 7d:f0:f4:f2:fd:21:6f:2e:4a:d1:a3:67:72:ba:e8: 92:ab:49:9d:e9:59:b7:6d:0a:06:98:8d:b8:8c:c3: 10:2e:27:34:d8:d5:13:6f:89:e2:81:d1:91:13:45: ae:44:80:30:21:03:d2:78:94:26:92:98:1c:28:1b: 66:da:f1:37:a9:64:37:35:fd:18:6a:18:ed:00:cd: 07:e6:80:d0:90:fd:11:7e:e9:62:70:ae:3d:cc:ca: 3f:f5:b2:8a:a0:aa:f9:16:1e:e8:56:f2:29:04:09: 64:ac:ce:8b:28:3c:8e:de:4b:2e:82:6e:69:67:c0: 0f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E7:4B:6C:19:4B:85:23:85:0B:26:A5:64:6F:74:73:5E:A4:6A:A0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB22BAC0607011F0925EA11DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.108.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:09:15:8d:6a:7b:7d:49:0f:dc:ca:6e:87:69:b0:74:d6:8b: c6:86:9e:a7:14:6e:f1:d9:95:77:f1:76:45:b7:3c:23:50:25: 22:c6:9a:76:eb:aa:b3:4a:f3:0f:89:c2:f3:9f:77:8f:29:66: ce:5e:0f:8d:5c:ad:b7:c9:3c:fb:45:40:76:c4:93:5e:28:ee: 90:e1:22:1b:85:8f:aa:a2:b8:69:5a:66:8c:58:e8:76:dc:7f: d4:99:7b:5b:5b:f0:56:5e:8e:31:d8:9a:12:aa:d2:69:ef:c9: 81:af:08:95:1f:f1:27:c3:10:19:46:b7:69:cf:c3:8a:45:d2: b9:38:6e:a3:1f:ed:65:73:6f:5d:43:60:9e:ef:f1:a4:a2:8f: 3c:db:c0:56:6e:de:55:aa:e4:47:96:74:ad:ac:e6:02:c2:11: 92:c1:e5:d8:3c:bf:05:28:97:17:ab:81:d3:67:38:b8:1c:93: 8f:3f:4a:34:96:43:f4:3e:90:8f:fa:00:09:61:18:5b:fa:0c: bd:0f:3f:fa:34:77:18:11:2d:54:82:ba:43:89:4e:b8:60:da: ee:9a:a5:7b:65:14:c0:84:f3:6a:e2:f3:59:98:5f:18:55:83: 45:e4:c6:9b:5e:c4:61:4d:5d:c5:35:a1:e3:81:5c:b8:a7:cf: b3:31:09:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzE0MDUxMDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc0OTE0NC0xOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mGxOIx//Nnjuy6LZkcn/X2V73wlgMej1mRTnh00xGMqeEqyIE9DuGjxrMwx E1NERCLlZmDlKBj6GBnD5o8NWKoVRXCwPa3t5ka7nhkQOjxc6TLxFYoQCTF6YLgH whq92UaaHfEm9iB1xWQlSB++KOno5b/kRuv3nuYWdocJrIKxJT5DR4l98PTy/SFv LkrRo2dyuuiSq0md6Vm3bQoGmI24jMMQLic02NUTb4nigdGRE0WuRIAwIQPSeJQm kpgcKBtm2vE3qWQ3Nf0YahjtAM0H5oDQkP0RfulicK49zMo/9bKKoKr5Fh7oVvIp BAlkrM6LKDyO3ksugm5pZ8AP9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPfnS2wZ S4UjhQsmpWRvdHNepGqgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREIyMkJBQzA2 MDcwMTFGMDkyNUVBMTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAClZWwwDQYJKoZIhvcNAQELBQADggEBAE8JFY1qe31JD9zK bodpsHTWi8aGnqcUbvHZlXfxdkW3PCNQJSLGmnbrqrNK8w+JwvOfd48pZs5eD41c rbfJPPtFQHbEk14o7pDhIhuFj6qiuGlaZoxY6Hbcf9SZe1tb8FZejjHYmhKq0mnv yYGvCJUf8SfDEBlGt2nPw4pF0rk4bqMf7WVzb11DYJ7v8aSijzzbwFZu3lWq5EeW dK2s5gLCEZLB5dg8vwUolxergdNnOLgck48/SjSWQ/Q+kI/6AAlhGFv6DL0PP/o0 dxgRLVSCukOJTrhg2u6apXtlFMCE82ri81mYXxhVg0XkxptexGFNXcU1oeOBXLin z7MxCaA= -----END CERTIFICATE-----Generated at Mon Jul 21 12:35:31 2025 by rpki-client