$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa File: E3EF319A4E3F11EFB7712730C4F9AE02.roa (raw, json) Hash identifier: /0Z7tQHh/mSw1H/x77CQJvCKqelvr5TdIDCDAeVqsV0= Subject key identifier: 66:FD:C2:0D:42:C2:76:70:89:90:08:69:1B:D6:B2:F3:A7:52:D2:CA Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1C19 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa Signing time: Tue 03 Dec 2024 12:29:10 +0000 ROA not before: Tue 03 Dec 2024 12:29:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59191 IP address blocks: 160.25.106.0/23 maxlen: 24 160.30.116.0/23 maxlen: 24 160.187.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7193 (0x1c19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 3 12:29:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=674ef995-9568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:40:70:8c:ac:fe:ed:02:6a:cb:d8:eb:25: 13:2a:25:7a:65:a5:00:a5:f6:63:e7:40:27:eb:8e: fd:e9:08:50:7d:b9:6a:e5:4b:11:53:48:d5:52:be: 3c:e3:dc:77:a0:37:ad:a3:41:48:62:86:42:14:db: 46:f7:6b:fe:e1:17:99:7c:d3:99:c9:e3:22:0a:c2: 94:cf:cf:b7:3b:48:14:cf:c2:84:d1:aa:6d:a9:06: c7:f7:9f:57:7a:79:39:3b:07:f2:f7:ea:08:e4:12: 3a:33:73:02:b5:ed:5c:c5:4b:86:0f:7b:c6:32:9f: 6e:e5:bb:58:ad:d2:89:8d:64:da:2b:51:a2:3c:24: 47:0a:1f:cd:a0:6a:c3:97:16:8f:de:4d:84:2d:2a: fa:b3:d2:b6:2c:e5:0f:8b:5d:47:72:6d:85:f8:69: f1:b1:ca:cd:6d:31:18:42:4f:07:6e:e6:a6:47:58: 31:b0:00:f3:51:a0:e8:ba:00:e8:77:11:05:dd:d3: 01:30:39:b7:b1:b5:12:54:ee:c6:a9:40:9d:f9:31: 2f:33:65:62:e6:16:b7:b8:ce:6a:35:ec:7e:14:74: 46:be:f1:9d:e9:d9:39:fd:71:9f:aa:9c:59:bb:d6: 56:2d:04:a6:e5:e5:02:bc:a2:1c:48:d5:de:25:2c: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FD:C2:0D:42:C2:76:70:89:90:08:69:1B:D6:B2:F3:A7:52:D2:CA X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.106.0/23 160.30.116.0/23 160.187.62.0/23 Signature Algorithm: sha256WithRSAEncryption 85:88:51:a4:b6:4c:6e:17:92:ed:09:1e:06:d3:0a:07:b3:24: 36:f6:23:b5:2e:e7:81:30:1d:50:f0:2a:04:71:fc:83:45:c5: e0:36:d0:cb:c0:38:cb:34:dd:81:cf:28:09:3f:71:11:33:62: 46:68:fa:fd:35:a3:d5:5b:a0:96:2a:16:0a:f9:5f:5f:a4:6a: ce:56:8f:42:7c:2c:74:7b:80:d2:ac:85:e5:8d:1b:1e:49:8b: ce:97:5b:7b:7b:8b:88:f0:1f:30:46:41:57:62:d1:90:4e:dc: 43:68:a2:e0:5e:1f:46:33:af:03:a0:ff:75:42:58:a6:02:4c: a4:48:d9:7b:36:f6:dd:79:5f:65:32:86:fd:8b:b3:63:21:15: e2:d7:cd:ee:e3:4a:1b:b6:01:e5:5f:11:8c:0b:c8:c0:22:51: 90:1f:51:1c:08:ab:28:5a:c0:6c:c2:55:4d:b7:e0:68:06:33: c6:be:82:61:70:d0:a0:7d:ba:69:0b:87:d9:49:ce:de:47:41: 60:fe:5f:69:ed:21:66:5f:9d:e9:33:05:44:9f:48:ac:a4:36: 3e:2c:32:70:16:5b:bf:f9:8b:cd:7c:30:97:b4:e5:d2:3c:ba: 47:08:57:3d:12:1d:5e:05:fe:e7:67:a4:04:87:a3:85:fc:a3: 05:34:de:74 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMjAzMTIyOTEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlZjk5NS05NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcNAcIys/u0CasvY6yUTKiV6ZaUApfZj50An64796QhQfblq5UsRU0jVUr48 49x3oDeto0FIYoZCFNtG92v+4ReZfNOZyeMiCsKUz8+3O0gUz8KE0aptqQbH959X enk5Owfy9+oI5BI6M3MCte1cxUuGD3vGMp9u5btYrdKJjWTaK1GiPCRHCh/NoGrD lxaP3k2ELSr6s9K2LOUPi11Hcm2F+GnxscrNbTEYQk8HbuamR1gxsADzUaDougDo dxEF3dMBMDm3sbUSVO7GqUCd+TEvM2Vi5ha3uM5qNex+FHRGvvGd6dk5/XGfqpxZ u9ZWLQSm5eUCvKIcSNXeJSwtgwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGb9wg1C wnZwiZAIaRvWsvOnUtLKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTNFRjMxOUE0 RTNGMTFFRkI3NzEyNzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGgGWoDBAGgHnQDBAGguz4wDQYJKoZIhvcNAQELBQADggEB AIWIUaS2TG4Xku0JHgbTCgezJDb2I7Uu54EwHVDwKgRx/INFxeA20MvAOMs03YHP KAk/cREzYkZo+v01o9VboJYqFgr5X1+kas5Wj0J8LHR7gNKsheWNGx5Ji86XW3t7 i4jwHzBGQVdi0ZBO3ENoouBeH0YzrwOg/3VCWKYCTKRI2Xs29t15X2Uyhv2Ls2Mh FeLXze7jShu2AeVfEYwLyMAiUZAfURwIqyhawGzCVU234GgGM8a+gmFw0KB9umkL h9lJzt5HQWD+X2ntIWZfnekzBUSfSKykNj4sMnAWW7/5i818MJe05dI8ukcIVz0S HV4F/udnpASHo4X8owU03nQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:38 2025 by rpki-client