$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa File: 0386A52403A911EF851C9E18C4F9AE02.roa (raw, json) Hash identifier: uw0MhTHpVNxg7VbxUW5GNiPEshjahzZhQtLfH8qNhIs= Subject key identifier: 8C:AE:28:09:4A:1D:B3:A6:0D:DB:80:F5:F8:FB:E6:2D:3E:E2:BA:11 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DF7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:48 +0000 ROA not before: Thu 08 May 2025 15:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152582 IP address blocks: 157.20.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7671 (0x1df7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3c7-d420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:a2:87:6a:d5:4e:56:40:a9:70:aa:cc:7d: ed:23:d4:37:a0:36:22:a8:ce:c6:f6:56:9b:6e:e8: 04:e1:6d:57:2d:c2:1a:7d:e5:f9:58:96:78:ab:26: 97:93:fb:4c:ed:4f:45:b9:6d:66:cb:f4:8e:49:35: 42:3f:98:91:07:fc:39:64:3a:a9:d8:f6:97:8b:b5: af:4c:24:28:3b:5a:32:a9:57:1b:cc:12:62:b8:07: 2b:a3:d8:52:eb:32:d4:c9:93:a4:5c:c4:b7:97:cb: d0:c6:57:75:ed:10:88:ed:b3:e8:1b:38:a1:e4:17: da:66:a2:0d:2d:cd:32:ba:80:3b:bd:2c:be:fe:b0: 7f:89:6a:f3:62:fa:0e:3d:8d:e2:1e:24:f6:bc:c5: 32:d8:90:42:21:83:5a:0b:26:67:63:78:fd:40:9b: db:00:32:c0:38:45:d5:b9:41:07:0f:e1:9f:10:02: 21:4c:70:c2:9f:fd:3f:1b:ba:c1:47:44:24:bf:94: ab:b5:5b:a0:0b:fc:d9:40:a7:0b:b0:34:15:9f:a0: 49:ed:31:3a:b7:f7:70:60:fb:f2:8e:1c:83:e7:52: e9:af:79:21:d9:03:27:d5:a6:ec:d5:1d:5b:40:ee: 58:9f:33:fd:98:f3:cb:b1:f1:63:30:76:13:ff:f0: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:28:09:4A:1D:B3:A6:0D:DB:80:F5:F8:FB:E6:2D:3E:E2:BA:11 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.202.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:a9:42:3e:c3:d8:8b:70:b2:09:67:ee:8f:f3:7d:01:9f:be: 2c:93:db:0a:d9:44:59:f1:09:ff:23:f1:24:f4:a5:1e:af:95: 0b:48:e4:9d:f0:f6:92:a6:ff:5f:12:44:40:3d:2e:3a:58:8b: 9b:e0:70:25:c9:b0:ce:a6:96:99:99:1c:61:ad:d3:5d:de:cd: e1:71:9f:45:32:95:71:b8:e6:87:0d:41:d6:4f:b0:ba:8c:31: c5:25:7a:86:ff:64:05:a3:72:6a:d1:f6:1d:66:b7:72:1a:10: 5f:79:86:f9:35:c4:6a:65:a9:f0:88:4a:8c:ea:3f:6f:14:62: 5d:b1:fb:32:c2:7b:00:b1:b7:78:f0:48:58:26:a2:9d:18:e8: 51:c5:bc:8f:93:ff:4f:38:84:1f:44:b4:a1:42:bf:ac:c4:b2: a1:d6:b0:99:62:e1:fc:33:a3:3b:da:0b:7d:7d:02:e2:fa:7d: 54:84:98:aa:2f:80:25:fa:57:2f:c4:7f:0b:10:80:93:d4:16: a5:aa:50:b8:bf:e0:53:f7:9d:a6:d1:98:0e:4b:c2:3d:a4:db: 28:b8:64:0f:0d:43:e9:d4:ad:9c:8c:24:41:9e:be:fe:7d:b6: a7:0e:b8:ed:2b:c8:23:4e:7b:e5:77:fa:51:74:64:eb:f4:f7: d7:cb:8a:4d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNjNy1kNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ryih2rVTlZAqXCqzH3tI9Q3oDYiqM7G9labbugE4W1XLcIafeX5WJZ4qyaX k/tM7U9FuW1my/SOSTVCP5iRB/w5ZDqp2PaXi7WvTCQoO1oyqVcbzBJiuAcro9hS 6zLUyZOkXMS3l8vQxld17RCI7bPoGzih5BfaZqINLc0yuoA7vSy+/rB/iWrzYvoO PY3iHiT2vMUy2JBCIYNaCyZnY3j9QJvbADLAOEXVuUEHD+GfEAIhTHDCn/0/G7rB R0Qkv5SrtVugC/zZQKcLsDQVn6BJ7TE6t/dwYPvyjhyD51Lpr3kh2QMn1abs1R1b QO5YnzP9mPPLsfFjMHYT//DkwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyuKAlK HbOmDduA9fj75i0+4roRMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDM4NkE1MjQw M0E5MTFFRjg1MUM5RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFMowDQYJKoZIhvcNAQELBQADggEBACupQj7D2Itwsgln 7o/zfQGfviyT2wrZRFnxCf8j8ST0pR6vlQtI5J3w9pKm/18SREA9LjpYi5vgcCXJ sM6mlpmZHGGt013ezeFxn0UylXG45ocNQdZPsLqMMcUleob/ZAWjcmrR9h1mt3Ia EF95hvk1xGplqfCISozqP28UYl2x+zLCewCxt3jwSFgmop0Y6FHFvI+T/084hB9E tKFCv6zEsqHWsJli4fwzozvaC319AuL6fVSEmKovgCX6Vy/EfwsQgJPUFqWqULi/ 4FP3nabRmA5Lwj2k2yi4ZA8NQ+nUrZyMJEGevv59tqcOuO0ryCNOe+V3+lF0ZOv0 99fLik0= -----END CERTIFICATE-----Generated at Wed May 14 04:29:10 2025 by rpki-client