$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa File: FEE0F80A0ECC11F08C313C71C4F9AE02.roa (raw, json) Hash identifier: 4tBQNNOsB8nb/jb9Os6dHOqVIWKN82R8twsoPHQtW4s= Subject key identifier: 94:BD:0F:A4:45:3A:89:E6:E7:A4:41:D3:15:25:75:EA:20:BB:9D:7C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AD2D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa Signing time: Tue 01 Apr 2025 07:48:00 +0000 ROA not before: Tue 01 Apr 2025 07:48:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153734 IP address blocks: 163.223.194.0/23 maxlen: 24 2401:f920::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44333 (0xad2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Apr 1 07:48:00 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67eb9a30-e932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:ca:d5:24:6d:1f:48:20:b5:15:94:c2:de: 44:25:c7:a8:12:99:e0:a8:3b:ea:2a:93:36:49:48: 95:07:fe:7d:90:3d:94:09:66:9e:3c:49:27:73:3d: 43:34:e2:fa:d7:dd:b2:f2:30:e8:1b:71:a0:b9:5a: 1b:b5:2b:ed:10:92:3b:14:46:2e:c3:2e:d8:40:18: a2:75:a9:f4:2f:c8:9b:d4:a3:5b:5c:d7:ae:34:63: 05:28:f3:f2:1e:94:65:97:38:90:54:68:04:e7:74: 4b:ad:30:8a:ee:2b:b7:3e:34:c1:ca:a0:f7:a2:38: 4a:a3:b9:62:b0:0a:b2:60:03:da:46:79:a8:39:e2: 7f:9f:3a:e3:d1:60:e6:cf:4c:29:2d:78:52:fb:3d: a1:15:42:7a:c4:e3:a1:ed:de:ed:67:dc:c9:cf:21: b7:ce:7f:71:29:e7:7a:3a:b4:9e:0c:e8:cc:d0:f7: 03:7e:5f:8b:50:e8:b2:19:13:6e:ba:c7:41:0d:db: 09:17:30:26:3c:c8:6c:c5:4a:54:02:d4:63:30:76: 05:e1:08:2a:5a:20:8b:7b:4b:7c:e6:75:a3:7a:e6: 73:0e:ad:2e:a8:dd:c9:6b:a7:c2:ff:00:b1:18:8d: c8:3d:31:fb:e0:27:83:77:64:ee:9d:14:a0:e4:5c: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:0F:A4:45:3A:89:E6:E7:A4:41:D3:15:25:75:EA:20:BB:9D:7C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.194.0/23 IPv6: 2401:f920::/32 Signature Algorithm: sha256WithRSAEncryption 50:41:1c:74:b0:b0:11:25:7c:70:c2:3d:53:c6:05:aa:69:6f: aa:4d:11:01:70:5f:0d:45:b6:7a:39:fe:8d:07:24:b6:56:90: 08:53:ed:e1:ba:b4:88:ea:b0:25:ca:ec:f1:c4:5f:e8:72:5f: 1f:b0:3a:aa:d3:63:f4:d1:46:1a:1c:b3:1b:78:e1:97:55:82: 5c:68:06:b3:db:2b:a4:05:02:4f:b9:89:93:1f:55:0b:50:76: 80:23:c4:41:3f:6b:d1:26:cd:29:03:14:7a:a1:ce:ba:58:8f: 53:14:26:c8:41:5a:3f:ca:95:24:7a:4c:d7:c3:02:e2:7f:4e: 1e:6c:20:98:2e:b3:5e:fa:a2:00:82:47:4a:20:0a:23:22:2a: e0:37:4a:5f:0c:85:d7:91:b3:1b:1d:70:a2:52:8f:79:1d:e1: c4:aa:c6:7c:0f:1e:19:0d:a9:9d:ff:da:09:f4:59:07:c0:4f: fc:26:ee:ae:35:6f:af:90:3c:06:2d:d8:f5:f2:f0:ca:98:30: 19:96:61:06:d5:5e:b5:f8:b4:48:d3:83:ae:8c:a8:6f:61:4a: 85:68:93:1d:ac:00:18:3e:de:dc:34:a0:e1:b0:74:17:7a:35: 4b:67:40:cb:61:27:b0:da:ba:e1:a4:83:2c:b7:0c:63:a0:b4: 9b:39:16:b0 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDAK0tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDQwMTA3NDgwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlYjlhMzAtZTkzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1XytUkbR9IILUVlMLeRCXHqBKZ4Kg76iqTNklIlQf+fZA9lAlmnjxJJ3M9 QzTi+tfdsvIw6BtxoLlaG7Ur7RCSOxRGLsMu2EAYonWp9C/Im9SjW1zXrjRjBSjz 8h6UZZc4kFRoBOd0S60wiu4rtz40wcqg96I4SqO5YrAKsmAD2kZ5qDnif58649Fg 5s9MKS14Uvs9oRVCesTjoe3e7Wfcyc8ht85/cSnnejq0ngzozND3A35fi1DoshkT brrHQQ3bCRcwJjzIbMVKVALUYzB2BeEIKlogi3tLfOZ1o3rmcw6tLqjdyWunwv8A sRiNyD0x++Ang3dk7p0UoORcv+MCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSUvQ+k RTqJ5uekQdMVJXXqILudfDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZFRTBGODBB MEVDQzExRjA4QzMxM0M3MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBo9/CMA0EAgACMAcDBQAkAfkgMA0GCSqGSIb3DQEBCwUA A4IBAQBQQRx0sLARJXxwwj1TxgWqaW+qTREBcF8NRbZ6Of6NByS2VpAIU+3hurSI 6rAlyuzxxF/ocl8fsDqq02P00UYaHLMbeOGXVYJcaAaz2yukBQJPuYmTH1ULUHaA I8RBP2vRJs0pAxR6oc66WI9TFCbIQVo/ypUkekzXwwLif04ebCCYLrNe+qIAgkdK IAojIirgN0pfDIXXkbMbHXCiUo95HeHEqsZ8Dx4ZDamd/9oJ9FkHwE/8Ju6uNW+v kDwGLdj18vDKmDAZlmEG1V61+LRI04OujKhvYUqFaJMdrAAYPt7cNKDhsHQXejVL Z0DLYSew2rrhpIMstwxjoLSbORaw -----END CERTIFICATE-----Generated at Fri Apr 4 10:41:46 2025 by rpki-client