$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa File: 6C2D5320FDC511ECAEF22950C4F9AE02.roa (raw, json) Hash identifier: mCvymaxL7lSJ1hfWdQwOPl7zfWS3wwLDu4ZegllwiKc= Subject key identifier: E2:19:A8:40:42:30:F4:5B:3E:74:4F:F0:65:0A:3F:15:B5:0A:46:57 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E39 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:47 +0000 ROA not before: Thu 08 May 2025 15:55:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7633 IP address blocks: 164.164.0.0/16 maxlen: 23 164.164.0.0/17 maxlen: 24 164.164.128.0/19 maxlen: 24 164.164.160.0/20 maxlen: 24 164.164.176.0/21 maxlen: 24 164.164.185.0/24 maxlen: 24 164.164.186.0/23 maxlen: 24 164.164.188.0/22 maxlen: 24 164.164.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7737 (0x1e39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd403-5be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:be:ac:2d:b2:64:ca:2e:ae:27:be:3e:9d: f9:eb:1a:72:76:1b:ab:5b:bd:fa:68:ac:59:1e:1f: f3:4a:18:30:6b:77:cf:09:7b:53:85:e1:17:e5:64: 01:44:2b:ba:dd:82:21:72:c0:eb:f9:ca:18:d6:c7: ed:fc:ac:45:10:f7:65:ab:a3:13:bd:6c:e1:c1:b0: 2b:e0:17:00:24:43:b1:36:42:52:e2:3e:66:6a:da: d9:68:91:41:d4:64:fa:1e:1d:5f:22:7d:46:e5:d0: e0:27:e3:e5:02:4b:36:f4:25:1d:36:a0:95:91:6b: 09:44:88:10:2c:b0:08:05:61:48:9c:ca:70:80:72: 78:9a:78:1c:b7:9b:b5:4c:a5:ff:d1:b8:5e:0f:98: 54:33:32:0d:7c:c9:7f:26:87:dc:71:7d:90:e9:1f: 8e:2c:4e:f7:03:5b:cf:45:1b:8c:08:35:e8:6e:48: ac:7e:56:b3:e1:8c:1d:27:5d:91:83:88:9a:8c:6b: 1b:33:54:ee:37:a6:5e:3b:3b:a8:ff:ca:5a:c8:dd: 44:31:69:1e:18:40:9c:e9:dd:d5:13:1e:7b:0a:74: c1:11:64:03:12:e4:a1:a1:a9:32:0f:84:20:32:06: 5c:15:d7:b7:2a:8d:9d:60:54:bf:50:3c:90:83:f0: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:A8:40:42:30:F4:5B:3E:74:4F:F0:65:0A:3F:15:B5:0A:46:57 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6C2D5320FDC511ECAEF22950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.164.0.0/16 Signature Algorithm: sha256WithRSAEncryption c4:4f:ed:3d:7a:c0:0b:13:81:9d:14:24:cc:13:5a:c4:bc:0d: a6:94:75:72:a3:e3:36:93:7c:6f:ff:f0:27:da:49:5e:55:5d: 5d:6c:db:d2:de:ce:f3:6a:41:05:d8:44:27:2d:47:69:6b:3c: 79:57:f1:c5:bd:fb:31:94:1b:0d:10:dc:ab:85:e5:ed:d5:5e: 8a:63:81:17:52:9a:47:55:95:a7:6c:dc:49:72:69:b2:b9:25: 54:d0:f4:c0:98:8b:4f:e0:ca:8d:0f:17:5e:35:92:9b:8f:bb: 29:72:73:11:a6:d9:dd:45:76:66:57:82:9a:4d:35:64:73:d7: b8:2e:f6:0a:86:b7:83:e5:83:a4:83:8a:d1:a6:ba:11:c5:09: 33:69:b5:ba:fa:ed:b4:9f:77:24:8c:4e:e7:f5:99:de:3a:65: a1:a0:8b:01:33:1a:9f:24:47:5a:de:7f:2b:5e:6d:12:0d:a1: ca:93:32:d5:b1:1f:e8:a0:7e:4d:9b:41:61:7f:ca:11:5f:0a: cf:97:e0:1e:77:f2:f0:1d:a0:5e:14:3c:a5:99:7a:73:e9:99: 43:4d:61:ba:64:83:71:e2:18:1e:09:f6:51:ba:37:25:21:51: 8b:d9:a7:0c:ec:c0:17:e7:74:bc:60:6d:50:bb:e2:b7:77:9e: 67:12:bf:42 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICHjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDQwMy01YmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E++rC2yZMourie+Pp356xpydhurW736aKxZHh/zShgwa3fPCXtTheEX5WQB RCu63YIhcsDr+coY1sft/KxFEPdlq6MTvWzhwbAr4BcAJEOxNkJS4j5matrZaJFB 1GT6Hh1fIn1G5dDgJ+PlAks29CUdNqCVkWsJRIgQLLAIBWFInMpwgHJ4mngct5u1 TKX/0bheD5hUMzINfMl/JofccX2Q6R+OLE73A1vPRRuMCDXobkisflaz4YwdJ12R g4iajGsbM1TuN6ZeOzuo/8payN1EMWkeGECc6d3VEx57CnTBEWQDEuShoakyD4Qg MgZcFde3Ko2dYFS/UDyQg/DU2wIDAQABo4IClDCCApAwHQYDVR0OBBYEFOIZqEBC MPRbPnRP8GUKPxW1CkZXMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNkMyRDUzMjBG REM1MTFFQ0FFRjIyOTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCkpDANBgkqhkiG9w0BAQsFAAOCAQEAxE/tPXrACxOBnRQk zBNaxLwNppR1cqPjNpN8b//wJ9pJXlVdXWzb0t7O82pBBdhEJy1HaWs8eVfxxb37 MZQbDRDcq4Xl7dVeimOBF1KaR1WVp2zcSXJpsrklVND0wJiLT+DKjQ8XXjWSm4+7 KXJzEabZ3UV2ZleCmk01ZHPXuC72Coa3g+WDpIOK0aa6EcUJM2m1uvrttJ93JIxO 5/WZ3jploaCLATManyRHWt5/K15tEg2hypMy1bEf6KB+TZtBYX/KEV8Kz5fgHnfy 8B2gXhQ8pZl6c+mZQ01humSDceIYHgn2Ubo3JSFRi9mnDOzAF+d0vGBtULvit3ee ZxK/Qg== -----END CERTIFICATE-----Generated at Wed Jun 4 11:40:20 2025 by rpki-client