$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa File: C053613E38B311F08DB63209C4F9AE02.roa (raw, json) Hash identifier: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw= Subject key identifier: F5:23:6F:09:06:6C:C5:E8:B4:F6:27:27:D2:FC:2C:3A:F0:04:FA:EA Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 02 Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa Signing time: Sat 24 May 2025 15:28:33 +0000 ROA not before: Sat 24 May 2025 15:28:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132475 IP address blocks: 165.99.90.0/23 maxlen: 23 165.99.90.0/24 maxlen: 24 165.99.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: May 24 15:28:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6831e5a0-6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:18:0a:e1:af:83:11:a9:53:60:15:19:37: 64:e1:9a:28:ba:c0:01:0b:a3:14:4a:59:6d:e1:1c: d8:87:ea:ec:42:7d:99:a5:18:26:aa:f9:d5:fb:a1: 06:e4:a3:06:a9:7c:33:46:36:5d:b3:b3:07:15:cb: 3d:a5:84:de:cd:49:9b:31:38:37:1b:a4:6c:7c:d3: cd:4d:62:0a:9e:42:15:10:b9:55:2d:66:4c:e3:20: 11:64:61:5f:cf:56:33:5c:8d:fe:37:c4:fd:cb:4b: d6:b2:05:1a:e4:d5:db:33:13:f9:bb:5a:ef:fa:b7: 9d:80:b7:4a:7e:94:7f:29:fe:c6:0b:a6:64:59:ea: 04:a1:1f:32:e6:bd:3d:16:ba:33:0b:1c:56:7e:7f: 8d:10:d3:6e:00:86:d7:07:96:67:53:af:de:34:c4: 5a:42:fc:49:92:a2:4e:b7:68:93:7d:8a:74:1c:24: 8a:e0:51:87:55:85:8e:70:ff:dc:b7:05:a7:81:8b: 23:36:0e:35:76:8f:76:88:f2:7f:90:eb:9c:a9:39: 9d:03:d3:ed:c8:fb:4a:02:63:c1:21:0c:4c:a3:4a: a3:f4:f1:90:15:0c:59:15:75:3d:9f:d8:b4:a3:d5: b1:9f:3a:5e:5a:eb:34:5c:5e:0e:22:80:e0:d6:3a: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:6F:09:06:6C:C5:E8:B4:F6:27:27:D2:FC:2C:3A:F0:04:FA:EA X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.90.0/23 Signature Algorithm: sha256WithRSAEncryption 71:d9:a4:b6:73:72:c8:6f:c3:f9:29:ec:2c:54:ce:75:d8:f4: c5:40:d5:b0:6d:6b:a0:33:91:14:58:6f:9b:ef:97:dc:81:8c: 03:1d:21:89:44:70:ad:12:6f:95:d9:3d:1c:81:d6:90:35:da: f5:1f:2f:e6:06:f3:42:8e:cf:7d:51:e2:9a:2d:6d:1f:04:5b: bb:37:00:06:bd:f3:d2:4c:7e:fe:23:cb:b5:3f:a1:e8:b1:db: f2:51:57:89:30:6e:a1:63:e3:49:7e:71:79:68:21:5a:b9:c2: 98:b6:e9:f7:6f:ee:5e:39:a9:84:dc:6b:d8:84:f9:ed:89:2d: 35:ea:12:62:a1:0a:08:63:76:a9:b7:53:ce:e9:50:90:48:97: 07:80:95:d3:e4:78:5b:52:a2:96:95:cb:a3:92:36:9d:c8:ef: 7f:88:dc:b6:05:a4:61:50:e7:58:8f:ce:6e:32:46:3a:4a:f2: 2c:3c:7b:85:44:7a:a8:a3:56:52:6e:56:fb:7f:e2:ea:52:3f: fe:b0:6e:1c:f5:68:cf:af:0a:ce:49:dd:48:22:d9:95:df:17: eb:09:59:2a:b2:c6:ae:83:e1:e6:2a:8c:cd:aa:cc:d2:f6:cf: 46:d7:39:87:d7:e2:4c:99:c9:2e:8d:8b:3d:8c:8d:3b:4e:0f: 7d:6d:79:53 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTA1MjQxNTI4MzNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzFlNWEwLTZhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMqBgK4a+DEalTYBUZN2Thmii6wAELoxRKWW3hHNiH6uxCfZmlGCaq+dX7oQbk owapfDNGNl2zswcVyz2lhN7NSZsxODcbpGx8081NYgqeQhUQuVUtZkzjIBFkYV/P VjNcjf43xP3LS9ayBRrk1dszE/m7Wu/6t52At0p+lH8p/sYLpmRZ6gShHzLmvT0W ujMLHFZ+f40Q024AhtcHlmdTr940xFpC/EmSok63aJN9inQcJIrgUYdVhY5w/9y3 BaeBiyM2DjV2j3aI8n+Q65ypOZ0D0+3I+0oCY8EhDEyjSqP08ZAVDFkVdT2f2LSj 1bGfOl5a6zRcXg4igODWOsHtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9SNvCQZs xei09icn0vwsOvAE+uowHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY4Ny8zNDAwODAyMjM4QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMDUzNjEzRTM4 QjMxMUYwOERCNjMyMDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjWjANBgkqhkiG9w0BAQsFAAOCAQEAcdmktnNyyG/D+Sns LFTOddj0xUDVsG1roDORFFhvm++X3IGMAx0hiURwrRJvldk9HIHWkDXa9R8v5gbz Qo7PfVHimi1tHwRbuzcABr3z0kx+/iPLtT+h6LHb8lFXiTBuoWPjSX5xeWghWrnC mLbp92/uXjmphNxr2IT57YktNeoSYqEKCGN2qbdTzulQkEiXB4CV0+R4W1KilpXL o5I2ncjvf4jctgWkYVDnWI/ObjJGOkryLDx7hUR6qKNWUm5W+3/i6lI//rBuHPVo z68KzkndSCLZld8X6wlZKrLGroPh5iqMzarM0vbPRtc5h9fiTJnJLo2LPYyNO04P fW15Uw== -----END CERTIFICATE-----Generated at Thu Jun 5 19:55:34 2025 by rpki-client