$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa File: 2F70B33CABAC11EEBA0E8D79C4F9AE02.roa (raw, json) Hash identifier: a8AeWTq6T2nsGRt/WqIo6KmryT7Z5j/PV1OAGpDJhC4= Subject key identifier: 82:35:DB:32:CD:BE:31:00:9B:F4:40:C8:B8:5E:99:65:01:47:72:51 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:32 +0000 ROA not before: Thu 08 May 2025 15:53:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151701 IP address blocks: 157.10.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7585 (0x1da1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37b-81dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c1:fb:cc:b7:d2:f8:25:af:b2:74:4f:7e:b3: e2:90:3c:8a:6e:b2:da:0a:cc:aa:8b:63:7c:b5:26: f8:61:00:8f:70:80:34:3e:d0:85:38:5f:75:9e:37: b2:93:f3:c0:53:73:c4:34:1c:b1:78:09:88:e7:01: d8:56:6b:43:1d:4a:80:cb:6b:98:99:38:87:2a:0b: 29:62:fa:cc:93:76:c9:db:2a:64:07:d2:b7:72:42: f5:7c:7a:5e:eb:53:8b:6f:ec:86:70:34:ff:23:74: 5c:40:e7:3f:d1:47:25:e1:a6:fa:73:88:08:59:f1: b0:b9:41:a4:2a:b3:d3:58:6f:39:8f:bc:49:87:82: 44:ec:c6:0a:26:c3:25:58:ff:eb:3e:f9:84:0b:f1: 34:cb:aa:e9:ff:50:72:b8:b0:3e:f7:2b:bf:2d:5e: e6:c8:12:8d:cc:74:3a:fa:c6:f5:df:b3:7d:05:74: 9b:dc:cd:55:0a:10:08:3c:9d:f0:cd:4b:7e:2c:40: bf:2f:63:0a:13:f3:d4:26:85:04:f8:1a:c2:3c:0a: cd:fa:fe:c5:f5:41:16:fa:1b:ca:34:46:b7:6f:2e: fd:29:58:1a:f2:75:67:6e:8c:2a:9c:73:28:1b:55: 93:ed:51:8e:e5:fb:e5:3b:02:b0:a1:a1:5a:e0:18: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:35:DB:32:CD:BE:31:00:9B:F4:40:C8:B8:5E:99:65:01:47:72:51 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.22.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:1d:46:4a:c0:30:b3:4d:2e:f2:cc:38:ab:ea:9a:7f:ba:17: e5:23:a4:d3:f7:8b:e4:3a:94:66:7e:f1:16:ab:90:f0:f5:9d: 09:52:35:5a:32:0f:42:40:1c:1c:03:51:4f:86:2a:ff:33:d2: 14:34:e3:86:2c:a2:7f:02:70:11:ec:0c:19:78:c2:a0:af:ba: 3a:a3:95:cb:10:47:8e:ba:ea:a6:b8:ff:3a:23:8f:d5:58:4f: 25:37:53:c2:dd:5f:80:fa:47:64:81:63:d9:f3:be:e7:3b:ce: 58:9a:ee:7a:9d:90:01:f6:34:76:df:3b:78:1d:87:7d:40:e4: ca:7b:d7:1d:15:0e:20:cb:b4:a6:c7:e8:c2:6f:51:06:d7:41: c4:75:9b:58:2a:65:da:47:ce:79:08:eb:ae:33:21:50:f7:3d: f1:06:33:fc:ca:6d:0b:cc:87:22:8c:6a:e9:34:86:ec:83:57: ad:7a:d9:6c:8f:52:f6:5f:30:98:a2:ca:a2:cd:2b:12:5a:27: 84:24:2d:b4:86:7a:f5:5a:e0:09:33:30:32:62:55:f1:a2:96: e9:b8:34:8b:ad:f2:f4:af:f5:3c:92:b2:49:95:b5:76:46:70: 41:c0:fd:d8:4a:3f:5d:09:49:a2:d4:81:77:3b:4f:a7:12:7d: ef:b2:46:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3Yi04MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sH7zLfS+CWvsnRPfrPikDyKbrLaCsyqi2N8tSb4YQCPcIA0PtCFOF91njey k/PAU3PENByxeAmI5wHYVmtDHUqAy2uYmTiHKgspYvrMk3bJ2ypkB9K3ckL1fHpe 61OLb+yGcDT/I3RcQOc/0Ucl4ab6c4gIWfGwuUGkKrPTWG85j7xJh4JE7MYKJsMl WP/rPvmEC/E0y6rp/1ByuLA+9yu/LV7myBKNzHQ6+sb137N9BXSb3M1VChAIPJ3w zUt+LEC/L2MKE/PUJoUE+BrCPArN+v7F9UEW+hvKNEa3by79KVga8nVnbowqnHMo G1WT7VGO5fvlOwKwoaFa4BiP+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFII12zLN vjEAm/RAyLhemWUBR3JRMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkY3MEIzM0NB QkFDMTFFRUJBMEU4RDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdChYwDQYJKoZIhvcNAQELBQADggEBAF4dRkrAMLNNLvLM OKvqmn+6F+UjpNP3i+Q6lGZ+8RarkPD1nQlSNVoyD0JAHBwDUU+GKv8z0hQ044Ys on8CcBHsDBl4wqCvujqjlcsQR4666qa4/zojj9VYTyU3U8LdX4D6R2SBY9nzvuc7 zlia7nqdkAH2NHbfO3gdh31A5Mp71x0VDiDLtKbH6MJvUQbXQcR1m1gqZdpHznkI 664zIVD3PfEGM/zKbQvMhyKMauk0huyDV6162WyPUvZfMJiiyqLNKxJaJ4QkLbSG evVa4AkzMDJiVfGilum4NIut8vSv9TySskmVtXZGcEHA/dhKP10JSaLUgXc7T6cS fe+yRoQ= -----END CERTIFICATE-----Generated at Sun May 11 00:43:57 2025 by rpki-client