$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F61309AB13111EEBAA94134C4F9AE02.roa File: 1F61309AB13111EEBAA94134C4F9AE02.roa (raw, json) Hash identifier: 8MmnY+DMI9SHxOPKC9V+LJaeCZnSTAAFsKEkn0S3eNU= Subject key identifier: D4:2E:54:95:8D:F3:CC:C9:6E:18:A1:A0:F7:25:B3:CA:14:A5:47:17 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D7C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F61309AB13111EEBAA94134C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:59 +0000 ROA not before: Thu 08 May 2025 15:52:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140178 IP address blocks: 157.10.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7548 (0x1d7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd35a-e02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:74:04:57:0f:80:f8:25:07:56:c4:d8:d9: e8:a3:11:ee:71:ba:b9:d2:19:66:01:17:21:88:72: 79:b5:6b:73:d2:5a:27:61:24:a3:68:98:c6:f6:27: c7:79:05:08:a5:21:50:4c:e8:51:cd:07:cc:0f:7f: 5e:35:51:cd:7c:0c:f8:47:a1:46:89:95:c6:fe:86: 38:f0:b8:4d:2b:58:b1:9f:43:e6:d9:6f:f6:13:01: c5:b7:99:1c:4a:bf:71:4f:04:db:d6:42:b4:6f:ae: 2e:fc:e9:5c:15:9f:af:69:d1:69:cd:89:f9:f8:20: 57:af:08:7b:f0:30:e7:6f:e3:58:98:12:e0:fe:b5: 12:a0:9b:c0:2e:f5:17:fc:71:ed:15:61:ab:5f:96: 01:ab:51:8e:65:09:fb:db:2e:7a:6e:b5:cc:f4:7c: f7:b2:be:9b:de:78:ce:90:50:dd:f0:54:5b:e9:9c: 73:a6:5c:50:95:64:b0:b1:f2:33:dd:76:a7:f3:3a: d2:be:22:9a:57:57:5b:f4:c3:cf:e9:1e:fa:b2:7e: 1d:40:fd:c3:11:54:19:9f:2a:75:04:0c:98:15:73: 6b:8e:e7:64:5e:b5:09:30:c4:70:65:dc:11:47:05: 9f:93:1e:2f:ed:c1:83:12:51:d1:de:c8:e5:76:6b: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2E:54:95:8D:F3:CC:C9:6E:18:A1:A0:F7:25:B3:CA:14:A5:47:17 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1F61309AB13111EEBAA94134C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.13.0/24 Signature Algorithm: sha256WithRSAEncryption 54:33:52:8f:db:62:bd:05:6e:ad:c1:22:ce:fc:c5:0b:58:79: a5:55:b5:52:1e:0c:3e:ab:38:25:29:d8:b4:81:b0:d0:9a:a9: 06:36:ec:2f:fd:74:fc:3c:87:0d:aa:f3:4e:6a:80:cb:bd:a3: d4:47:80:53:56:9e:da:f8:1f:4a:cd:41:3a:8b:e2:a9:aa:5d: 58:4e:07:ef:e6:5b:42:27:cc:56:53:d3:b9:e1:49:79:88:5b: db:ce:1d:c6:c8:8c:20:93:9e:b5:a3:de:f3:7c:87:bc:4e:d9: a5:8e:e3:15:9c:2c:ff:94:ec:72:9a:b3:1a:01:12:8c:07:b4: d6:db:b0:a5:f5:4b:c7:4f:13:95:af:7c:0a:6d:0a:67:c8:a4: bc:c4:64:ed:4e:6d:7b:4c:77:cd:14:99:07:2b:08:95:54:da: 07:04:33:9a:d8:d2:a8:eb:d0:de:c6:d5:20:26:74:cc:22:02: bc:ca:5d:82:69:c3:e4:26:14:8b:40:76:30:b1:fc:70:ec:f1: 2b:92:80:5c:5c:52:d5:6a:f5:c5:44:3d:f1:6e:21:e3:05:9f: 86:56:cd:56:ff:c7:c1:0b:fb:cb:04:3e:fc:f1:b1:13:ef:e9: 43:c5:43:62:96:7f:dd:e2:46:3d:65:d4:55:c8:a3:8f:e3:32: c9:d5:f3:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM1YS1lMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p10BFcPgPglB1bE2NnooxHucbq50hlmARchiHJ5tWtz0lonYSSjaJjG9ifH eQUIpSFQTOhRzQfMD39eNVHNfAz4R6FGiZXG/oY48LhNK1ixn0Pm2W/2EwHFt5kc Sr9xTwTb1kK0b64u/OlcFZ+vadFpzYn5+CBXrwh78DDnb+NYmBLg/rUSoJvALvUX /HHtFWGrX5YBq1GOZQn72y56brXM9Hz3sr6b3njOkFDd8FRb6ZxzplxQlWSwsfIz 3Xan8zrSviKaV1db9MPP6R76sn4dQP3DEVQZnyp1BAyYFXNrjudkXrUJMMRwZdwR RwWfkx4v7cGDElHR3sjldmt5LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNQuVJWN 88zJbhihoPcls8oUpUcXMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUY2MTMwOUFC MTMxMTFFRUJBQTk0MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCg0wDQYJKoZIhvcNAQELBQADggEBAFQzUo/bYr0Fbq3B Is78xQtYeaVVtVIeDD6rOCUp2LSBsNCaqQY27C/9dPw8hw2q805qgMu9o9RHgFNW ntr4H0rNQTqL4qmqXVhOB+/mW0InzFZT07nhSXmIW9vOHcbIjCCTnrWj3vN8h7xO 2aWO4xWcLP+U7HKasxoBEowHtNbbsKX1S8dPE5WvfAptCmfIpLzEZO1ObXtMd80U mQcrCJVU2gcEM5rY0qjr0N7G1SAmdMwiArzKXYJpw+QmFItAdjCx/HDs8SuSgFxc UtVq9cVEPfFuIeMFn4ZWzVb/x8EL+8sEPvzxsRPv6UPFQ2KWf93iRj1l1FXIo4/j MsnV8yc= -----END CERTIFICATE-----Generated at Tue May 13 11:26:56 2025 by rpki-client