$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa File: 0CF90768BDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: hc4UW9Fmx9yHbfCHrUiDzvbL37+E2NTJWSucEENXAAc= Subject key identifier: D0:D2:16:99:71:CE:54:4D:67:79:E4:D1:C5:65:7A:F3:00:D6:B8:24 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E3A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:48 +0000 ROA not before: Thu 08 May 2025 15:55:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9430 IP address blocks: 157.15.159.0/24 maxlen: 24 164.164.123.0/24 maxlen: 24 164.164.124.0/24 maxlen: 24 164.164.126.0/24 maxlen: 24 164.164.127.0/24 maxlen: 24 164.164.184.0/24 maxlen: 24 164.164.187.0/24 maxlen: 24 164.164.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7738 (0x1e3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd403-f51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:7c:ba:e0:ed:2c:17:50:16:8b:e5:fe:cc: 60:b7:65:89:51:f3:5e:0b:ea:f3:9b:a7:b0:c9:10: 58:fa:95:7a:f7:88:1d:e7:96:c6:b4:55:77:99:04: 1e:cf:8e:b1:2e:c5:61:87:37:77:a7:89:90:53:6b: 70:48:30:40:45:d0:cb:03:72:92:d1:29:a5:9a:17: 66:c5:ba:fa:90:6e:57:c8:c1:e2:0a:63:b6:f7:e5: ab:c9:8a:f0:88:84:66:8f:a8:29:e7:05:81:8e:18: c9:2c:ce:4f:6f:27:49:fd:6d:53:83:70:51:89:33: 0a:f8:4c:06:f6:dc:c5:03:29:1d:90:20:a2:e0:59: dc:c2:5b:5a:0b:b8:21:07:2c:18:2c:6c:c6:f5:c3: 63:3a:72:94:fc:fa:9d:c0:1c:bc:6c:ff:93:5f:3b: 9f:88:5a:c9:bc:3d:7a:55:69:01:9c:4e:bf:98:d1: d1:0d:2c:01:99:08:c4:09:46:a3:66:99:21:63:13: 02:6d:ab:f5:de:cc:c8:4d:b5:33:db:19:22:06:a8: 57:c1:7a:a3:9a:8c:a8:02:b3:c5:69:10:4b:de:5f: 39:d6:2a:24:75:6e:aa:25:02:0e:82:1b:4c:97:9e: 4a:f6:3b:d5:98:83:38:a3:29:af:d8:f7:4c:b4:4e: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:16:99:71:CE:54:4D:67:79:E4:D1:C5:65:7A:F3:00:D6:B8:24 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.159.0/24 164.164.123.0-164.164.124.255 164.164.126.0/23 164.164.184.0/24 164.164.187.0/24 164.164.192.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0f:79:f8:4d:f8:e2:b3:a9:2d:46:44:89:57:81:60:9d:b1: d9:58:fb:20:e5:cd:b7:1c:cb:31:60:9b:81:fa:49:2d:81:01: 76:8b:69:76:a9:e7:f9:8e:df:7c:0e:38:f7:8a:ab:ae:7e:62: eb:a7:05:29:7f:6a:6c:1a:7c:f0:39:a4:85:52:d9:e2:6f:6e: 38:8a:9f:64:15:e5:23:84:c9:af:13:26:7a:4a:c8:15:e2:92: d9:2a:b4:80:d6:39:0a:bd:67:b0:46:fc:7f:d9:7e:f1:f6:13: 00:09:3d:cd:18:8b:37:ff:84:4c:89:6f:d6:09:32:d5:6a:5f: d1:46:a0:46:07:c8:37:94:45:a0:1f:36:1d:ac:4a:b9:e1:a5: d2:94:b8:ed:54:d6:79:fc:90:cf:a4:5f:db:91:6b:d0:b5:82: 97:5d:58:1a:12:1b:38:ba:fb:26:94:fa:b0:f9:30:bb:48:27: d5:73:ae:0c:9d:92:74:63:37:81:a2:ab:32:94:bc:b3:ab:e7: 79:a1:a9:c5:34:b4:2f:65:f7:c2:46:88:60:6a:6a:50:bf:16: cf:f8:d3:02:36:72:2f:cb:a4:e6:8e:a4:2c:0d:68:0b:56:04: 6e:9a:8f:40:21:79:1a:a7:af:64:cb:c7:ee:b1:d6:f8:41:ce: 47:57:ad:32 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICHjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDQwMy1mNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/18uuDtLBdQFovl/sxgt2WJUfNeC+rzm6ewyRBY+pV694gd55bGtFV3mQQe z46xLsVhhzd3p4mQU2twSDBARdDLA3KS0Smlmhdmxbr6kG5XyMHiCmO29+WryYrw iIRmj6gp5wWBjhjJLM5PbydJ/W1Tg3BRiTMK+EwG9tzFAykdkCCi4FncwltaC7gh BywYLGzG9cNjOnKU/PqdwBy8bP+TXzufiFrJvD16VWkBnE6/mNHRDSwBmQjECUaj ZpkhYxMCbav13szITbUz2xkiBqhXwXqjmoyoArPFaRBL3l851iokdW6qJQIOghtM l55K9jvVmIM4oymv2PdMtE4yuQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNDSFplx zlRNZ3nk0cVlevMA1rgkMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMENGOTA3NjhC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBACdD58wDAMEAKSkewMEAKSkfAMEAaSkfgMEAKSkuAMEAKSk uwMEAKSkwDANBgkqhkiG9w0BAQsFAAOCAQEAbQ95+E344rOpLUZEiVeBYJ2x2Vj7 IOXNtxzLMWCbgfpJLYEBdotpdqnn+Y7ffA4494qrrn5i66cFKX9qbBp88DmkhVLZ 4m9uOIqfZBXlI4TJrxMmekrIFeKS2Sq0gNY5Cr1nsEb8f9l+8fYTAAk9zRiLN/+E TIlv1gky1Wpf0UagRgfIN5RFoB82HaxKueGl0pS47VTWefyQz6Rf25Fr0LWCl11Y GhIbOLr7JpT6sPkwu0gn1XOuDJ2SdGM3gaKrMpS8s6vneaGpxTS0L2X3wkaIYGpq UL8Wz/jTAjZyL8uk5o6kLA1oC1YEbpqPQCF5GqevZMvH7rHW+EHOR1etMg== -----END CERTIFICATE-----Generated at Wed May 14 01:21:18 2025 by rpki-client