$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: DiLiUTq4svYLUGh7Zlk/IkFGkuorqIquvoUuPTfglVo= Subject key identifier: AB:48:05:C8:47:32:35:92:74:44:6A:87:E5:25:9F:42:44:9E:F2:7D Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 0169 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa Signing time: Sat 06 Sep 2025 15:49:40 +0000 ROA not before: Sat 06 Sep 2025 15:49:40 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36007 IP address blocks: 45.130.164.0/24 maxlen: 24 45.130.165.0/24 maxlen: 24 45.130.166.0/24 maxlen: 24 45.130.167.0/24 maxlen: 24 45.151.152.0/24 maxlen: 24 45.151.153.0/24 maxlen: 24 45.151.154.0/24 maxlen: 24 45.151.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Sep 6 15:49:40 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bc5814-f280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7e:06:67:b1:5a:04:1f:ab:e9:80:b6:8f:cd: 3c:32:f7:b6:cb:f6:4a:bc:44:cc:2c:e5:c7:b4:2a: 4f:ae:42:6d:0d:1b:07:77:f3:23:78:e6:dc:94:0b: 25:65:27:99:ff:72:84:12:1e:58:f9:ef:e4:da:ea: e5:e2:73:03:ab:ce:ab:4b:b6:82:dc:cb:01:f2:94: 10:63:d0:07:2f:eb:f3:b1:3d:73:96:65:b8:5e:ff: 0e:e3:79:ef:74:1c:f7:e4:79:d0:fb:89:2e:fb:67: 23:e2:f9:de:8d:ec:b3:e8:08:4d:56:14:a6:bc:57: 27:d9:09:d9:75:e0:9b:92:bb:b8:73:4c:92:37:54: b9:e1:29:12:0f:3f:40:3e:ed:0e:97:59:7c:cd:1e: 4d:20:ce:4c:e0:11:89:c7:c9:43:ba:3b:21:90:3b: f3:65:e4:39:ad:b9:5b:38:48:c1:1e:13:fc:66:c5: 0d:3e:c1:9b:4a:c7:f9:fe:05:c2:04:69:52:d4:f4: 63:56:47:93:79:b4:6d:00:a0:ba:0b:57:c3:6c:f2: 18:1a:cf:8b:4f:bf:84:b3:8b:52:f1:15:e9:92:ae: 39:81:39:b7:9d:d1:60:4c:1a:60:bc:01:48:c2:97: 23:4d:b2:2f:40:5a:48:f8:79:a5:0f:b2:45:b4:bb: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:48:05:C8:47:32:35:92:74:44:6A:87:E5:25:9F:42:44:9E:F2:7D X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.130.164.0/22 45.151.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:f7:d3:b4:0e:d3:3e:98:ae:88:fd:f2:90:f4:b2:ae:41:68: 46:af:e7:c3:37:39:dd:a2:d5:c9:ba:8b:43:6f:cd:d6:3d:4b: 07:7e:46:84:2f:51:59:6a:dd:76:50:3e:46:e2:b3:e9:26:0c: 4e:9a:a9:7a:41:3f:88:fc:b3:4c:b9:01:80:31:29:c5:f6:84: 19:d7:58:e4:6b:46:0e:5d:c0:c9:dc:5c:a3:98:00:77:81:bd: 63:e7:16:ed:db:7d:3a:6b:33:7c:8e:00:7d:ca:ac:2e:db:da: c3:29:57:59:e0:8d:e0:d0:11:1d:9d:45:6f:13:c1:e7:de:35: 35:1e:49:9c:ea:1f:5a:ac:32:89:8c:7a:ea:e5:90:e4:a5:03: 43:5a:f1:f7:b0:5d:c2:a7:18:bc:52:ff:57:89:58:63:69:7c: 3c:28:1f:82:a2:07:1a:7e:40:5b:30:11:e5:d0:ea:f5:39:ca: 8f:73:36:ce:6f:37:d4:f3:ef:9d:b6:a9:0a:57:81:0a:ff:ec: 5f:c7:ea:7f:84:e7:40:20:5e:c9:66:5e:ce:f8:ca:d5:aa:7f: 17:47:66:e1:29:0d:9e:0e:c6:1a:5b:79:f1:36:49:31:f5:bd: 10:87:59:a0:0d:22:70:8c:d9:d9:89:8d:1e:9b:c9:ad:43:b5: 4b:09:df:73 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjUwOTA2MTU0OTQwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJjNTgxNC1mMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3n4GZ7FaBB+r6YC2j808Mve2y/ZKvETMLOXHtCpPrkJtDRsHd/MjeObclAsl ZSeZ/3KEEh5Y+e/k2url4nMDq86rS7aC3MsB8pQQY9AHL+vzsT1zlmW4Xv8O43nv dBz35HnQ+4ku+2cj4vnejeyz6AhNVhSmvFcn2QnZdeCbkru4c0ySN1S54SkSDz9A Pu0Ol1l8zR5NIM5M4BGJx8lDujshkDvzZeQ5rblbOEjBHhP8ZsUNPsGbSsf5/gXC BGlS1PRjVkeTebRtAKC6C1fDbPIYGs+LT7+Es4tS8RXpkq45gTm3ndFgTBpgvAFI wpcjTbIvQFpI+HmlD7JFtLuneQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKtIBchH MjWSdERqh+Uln0JEnvJ9MB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMUU0QUJDOEM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItgqQDBAItl5gwDQYJKoZIhvcNAQELBQADggEBAD/307QO 0z6Yroj98pD0sq5BaEav58M3Od2i1cm6i0NvzdY9Swd+RoQvUVlq3XZQPkbis+km DE6aqXpBP4j8s0y5AYAxKcX2hBnXWORrRg5dwMncXKOYAHeBvWPnFu3bfTprM3yO AH3KrC7b2sMpV1ngjeDQER2dRW8TwefeNTUeSZzqH1qsMomMeurlkOSlA0Na8few XcKnGLxS/1eJWGNpfDwoH4KiBxp+QFswEeXQ6vU5yo9zNs5vN9Tz7522qQpXgQr/ 7F/H6n+E50AgXslmXs74ytWqfxdHZuEpDZ4OxhpbefE2STH1vRCHWaANInCM2dmJ jR6bya1DtUsJ33M= -----END CERTIFICATE-----Generated at Sun Sep 7 08:36:17 2025 by rpki-client