$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa File: 3D8177A4AB5211EEAC610B2CC4F9AE02.roa (raw, json) Hash identifier: 0yxuGBirP36bzIip1KLIgRLPKtHGypUfWsyEmq53E58= Subject key identifier: 89:8F:43:D1:6F:67:49:F5:B4:E6:75:42:F6:03:E1:BB:51:BE:B7:36 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DB4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:47 +0000 ROA not before: Thu 08 May 2025 15:53:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151743 IP address blocks: 157.10.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7604 (0x1db4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd38b-3b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:d0:3d:c6:87:92:99:f2:e5:63:ff:c4:27: eb:97:e2:d9:74:d9:5c:8c:b6:c4:64:75:c8:b7:cb: 7e:e8:6f:c6:65:51:0f:f0:24:da:8a:5a:c6:46:0c: 67:c5:67:83:83:d5:e2:25:85:56:ca:fe:aa:74:8f: e3:d1:35:fa:c4:ac:76:5d:02:c3:2e:63:b6:fb:b8: 16:69:eb:99:e4:52:f5:9a:32:66:37:99:fc:d4:f2: 31:8d:d4:d6:38:0b:3d:96:c7:02:fe:71:08:6e:9b: c0:06:2b:df:18:8e:6d:f9:48:ea:8f:17:3e:a2:63: 26:99:94:62:42:5a:64:37:d7:54:ee:39:99:f9:2d: 41:56:e3:23:12:4f:62:23:16:b7:34:ed:1f:c2:e4: b8:3b:ca:cb:a5:00:e7:d9:09:e3:53:14:db:e8:73: 9e:0b:f6:12:86:8f:10:2a:70:76:a4:84:a1:f2:f5: f1:cd:0b:90:ad:9a:61:25:6b:95:7a:b2:2a:9a:3e: b1:0b:b1:a8:ae:86:10:45:b4:40:03:7c:e1:a6:7a: 4b:5f:9d:e5:c3:ed:de:65:a7:1d:67:44:a2:67:41: 9b:5e:90:10:e2:8c:f4:58:34:86:02:42:3d:1c:1b: 8b:1c:c3:bf:52:17:62:b6:28:38:c1:ba:3d:7b:f8: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8F:43:D1:6F:67:49:F5:B4:E6:75:42:F6:03:E1:BB:51:BE:B7:36 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.62.0/24 Signature Algorithm: sha256WithRSAEncryption 17:83:3e:1d:2f:9c:97:3a:4c:53:b1:14:b0:2e:4c:64:c6:27: 8c:3a:d4:64:0f:c5:2b:d7:f9:37:c5:ad:c7:7e:a1:8d:e6:51: cf:24:46:b1:2d:43:65:e0:06:8c:b9:cd:71:5b:dc:10:da:3f: d2:1e:15:b5:ef:3a:28:93:4d:16:ce:e0:c4:90:35:3e:25:f8: 4e:15:2a:08:7b:52:33:bf:50:d8:1b:a2:26:90:e2:ef:38:82: 39:55:8b:92:68:9a:11:8a:60:df:0f:f6:20:40:ef:86:ed:57: 0f:6f:c6:93:71:c6:27:bf:d3:15:11:04:0f:08:26:85:38:50: be:c9:ae:33:14:96:45:97:31:f2:dd:c4:70:9e:42:52:84:d2: 97:25:df:89:9e:7d:d7:f1:93:93:33:ae:fe:92:35:33:7c:3b: 62:fe:09:b3:5f:2b:4e:03:e2:3d:9f:84:26:71:f4:5e:2d:87: 33:d7:b9:f8:ec:83:3b:11:4f:6f:c0:65:f1:78:cc:32:40:ce: 58:3c:75:9f:1e:70:96:c0:0e:68:0b:65:fc:e5:d1:48:63:a4: ad:08:4a:d8:6a:0d:a5:04:a5:fb:20:31:d5:73:32:61:45:43: c6:84:29:49:49:0f:08:2c:c8:b4:7e:37:3f:95:41:9f:49:71: ad:a4:2f:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4Yi0zYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolvQPcaHkpny5WP/xCfrl+LZdNlcjLbEZHXIt8t+6G/GZVEP8CTailrGRgxn xWeDg9XiJYVWyv6qdI/j0TX6xKx2XQLDLmO2+7gWaeuZ5FL1mjJmN5n81PIxjdTW OAs9lscC/nEIbpvABivfGI5t+Ujqjxc+omMmmZRiQlpkN9dU7jmZ+S1BVuMjEk9i Ixa3NO0fwuS4O8rLpQDn2QnjUxTb6HOeC/YSho8QKnB2pISh8vXxzQuQrZphJWuV erIqmj6xC7GoroYQRbRAA3zhpnpLX53lw+3eZacdZ0SiZ0GbXpAQ4oz0WDSGAkI9 HBuLHMO/Uhditig4wbo9e/jmtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFImPQ9Fv Z0n1tOZ1QvYD4btRvrc2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0Q4MTc3QTRB QjUyMTFFRUFDNjEwQjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCj4wDQYJKoZIhvcNAQELBQADggEBABeDPh0vnJc6TFOx FLAuTGTGJ4w61GQPxSvX+TfFrcd+oY3mUc8kRrEtQ2XgBoy5zXFb3BDaP9IeFbXv OiiTTRbO4MSQNT4l+E4VKgh7UjO/UNgboiaQ4u84gjlVi5JomhGKYN8P9iBA74bt Vw9vxpNxxie/0xURBA8IJoU4UL7JrjMUlkWXMfLdxHCeQlKE0pcl34mefdfxk5Mz rv6SNTN8O2L+CbNfK04D4j2fhCZx9F4thzPXufjsgzsRT2/AZfF4zDJAzlg8dZ8e cJbADmgLZfzl0UhjpK0ISthqDaUEpfsgMdVzMmFFQ8aEKUlJDwgsyLR+Nz+VQZ9J ca2kLwo= -----END CERTIFICATE-----Generated at Tue May 13 11:15:50 2025 by rpki-client