$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa File: 4002AE6236CF11F0AA705D26C4F9AE02.roa (raw, json) Hash identifier: mqzypacDD7xIbwYv9NK8trW6oiDHkBTrKySSx1uZLFU= Subject key identifier: A1:B2:65:F3:46:DD:E8:0A:55:86:F9:5A:E0:3D:E9:07:BF:F5:FC:6C Certificate issuer: /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Certificate serial: 02 Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa Signing time: Thu 22 May 2025 05:40:21 +0000 ROA not before: Thu 22 May 2025 05:40:21 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 153181 IP address blocks: 160.30.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 07:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A Validity Not Before: May 22 05:40:21 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=682eb8c5-b98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:fd:04:aa:ae:0a:f1:23:3c:58:7f:aa:4a: 64:7d:40:13:b8:03:06:88:8c:b1:51:b8:e4:71:5f: 0d:36:0e:9f:5f:13:52:2c:e4:96:4a:6c:c1:d3:c8: f8:15:84:c8:99:46:d9:a3:f7:52:7b:16:26:ed:dd: 84:67:0c:c1:6f:5e:9a:e8:cf:68:0b:e3:67:8a:de: ed:bf:1c:d4:74:18:05:d1:69:01:a2:4c:5c:04:f0: e1:6d:5e:17:f6:69:42:f0:6c:ca:24:6c:a8:4d:fa: df:c1:02:2a:b8:7a:26:e3:0b:05:c1:d2:7d:59:13: a3:28:56:d1:0d:10:fe:cd:68:f7:b1:18:fe:b0:46: b1:3f:26:ea:68:68:66:ab:c9:27:fd:df:8b:13:9a: 35:d1:19:ca:7d:00:c0:d6:ba:49:25:72:7a:34:b9: 28:ff:62:e4:66:49:63:67:ea:34:1b:3a:7d:95:d9: 1f:f5:06:97:60:56:40:48:72:66:64:3b:5b:52:de: d5:f1:da:45:50:b7:f6:e7:e7:98:8a:ae:21:2d:5c: 8e:bb:87:78:03:54:c6:37:25:55:86:b3:d3:a5:bb: bb:5f:fd:34:d3:fc:b6:84:b5:e7:b9:0e:7e:74:93: 7e:d5:5e:e3:5c:2d:08:a6:62:ba:5a:59:30:d2:6a: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:65:F3:46:DD:E8:0A:55:86:F9:5A:E0:3D:E9:07:BF:F5:FC:6C X509v3 Authority Key Identifier: keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/4002AE6236CF11F0AA705D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.42.0/23 Signature Algorithm: sha256WithRSAEncryption 53:3c:69:66:9e:d9:36:8f:ab:ba:9b:da:f6:7c:33:d4:a8:cd: 9d:eb:1e:d4:6d:07:ee:85:0e:a1:24:ac:16:b6:3a:d9:49:b5: fc:2f:43:3c:11:e0:8d:9c:c2:78:e1:0a:34:bc:66:95:3d:a0: 75:cd:20:b7:8c:3c:db:e4:ab:6f:5c:d0:eb:79:8c:1e:02:01: d5:5d:6f:81:42:8c:c0:37:14:5d:de:66:99:ce:26:2d:79:bf: d3:72:63:bc:f9:5f:09:63:ff:7a:58:d4:2d:3e:83:b8:26:13: cd:e9:61:c8:3d:5f:1a:40:b0:e7:79:53:ed:9a:31:ea:27:17: b1:49:fd:61:a4:3a:1a:06:7b:c8:7a:84:b7:c2:60:db:50:aa: 3d:56:28:c8:02:d7:c4:0a:1d:65:6b:0c:55:26:25:3c:a3:56: 04:d8:55:96:e2:4d:f4:08:8b:f6:9f:ac:aa:66:aa:7c:13:b6: 73:63:eb:68:20:3b:f9:4f:1e:69:ac:87:11:63:a8:83:2b:29: ef:86:8a:5a:79:c7:68:96:4e:ca:1f:61:b9:e5:8c:00:ab:48: 0f:84:9d:24:d1:64:b7:63:0f:5e:f7:30:4f:d2:e0:7b:3c:aa: 6c:2c:3a:c8:88:e5:06:66:15:4a:e0:c3:eb:1c:e9:38:17:2a: 01:d4:18:14 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDcxRDExMC8GA1UEBRMoOTUyQTREQzdDNEQ2MTA5NTk4QkVFRTVBQzBBMjA2RDI3 Qjg1QzU2QTAeFw0yNTA1MjIwNTQwMjFaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MmViOGM1LWI5OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJp/0Eqq4K8SM8WH+qSmR9QBO4AwaIjLFRuORxXw02Dp9fE1Is5JZKbMHTyPgV hMiZRtmj91J7Fibt3YRnDMFvXproz2gL42eK3u2/HNR0GAXRaQGiTFwE8OFtXhf2 aULwbMokbKhN+t/BAiq4eibjCwXB0n1ZE6MoVtENEP7NaPexGP6wRrE/JupoaGar ySf934sTmjXRGcp9AMDWukklcno0uSj/YuRmSWNn6jQbOn2V2R/1BpdgVkBIcmZk O1tS3tXx2kVQt/bn55iKriEtXI67h3gDVMY3JVWGs9Olu7tf/TTT/LaEtee5Dn50 k37VXuNcLQimYrpaWTDSajI1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUobJl80bd 6ApVhvla4D3pB7/1/GwwHwYDVR0jBBgwFoAUlSpNx8TWEJWYvu5awKIG0nuFxWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJENzFELzFFMEY5OTJFMzZD RTExRjBBMkE2OUMxRkM0RjlBRTAyL2xTcE54OFRXRUpXWXZ1NWF3S0lHMG51RnhX by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbFNwTng4VFdFSldZdnU1YXdLSUcwbnVGeFdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcxRC8xRTBGOTkyRTM2Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi80MDAyQUU2MjM2 Q0YxMUYwQUE3MDVEMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAeKjANBgkqhkiG9w0BAQsFAAOCAQEAUzxpZp7ZNo+rupva 9nwz1KjNnese1G0H7oUOoSSsFrY62Um1/C9DPBHgjZzCeOEKNLxmlT2gdc0gt4w8 2+Srb1zQ63mMHgIB1V1vgUKMwDcUXd5mmc4mLXm/03JjvPlfCWP/eljULT6DuCYT zelhyD1fGkCw53lT7Zox6icXsUn9YaQ6GgZ7yHqEt8Jg21CqPVYoyALXxAodZWsM VSYlPKNWBNhVluJN9AiL9p+sqmaqfBO2c2PraCA7+U8eaayHEWOogysp74aKWnnH aJZOyh9hueWMAKtID4SdJNFkt2MPXvcwT9LgezyqbCw6yIjlBmYVSuDD6xzpOBcq AdQYFA== -----END CERTIFICATE-----Generated at Tue Jun 10 06:51:43 2025 by rpki-client