$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa File: 42BF9F626C2111EF8AAEC852C4F9AE02.roa (raw, json) Hash identifier: OPvlqN/1zQW6T1IQCoSJ60lVD08IIgxHPu3Q84iqV2Y= Subject key identifier: 91:AC:FD:D6:A2:23:55:EE:B4:E2:0F:5D:56:FC:9D:C6:11:E7:A1:77 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DCF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:13 +0000 ROA not before: Thu 08 May 2025 15:54:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152515 IP address blocks: 157.66.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7631 (0x1dcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3a5-1ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:1e:9b:cd:0b:41:50:5e:18:49:c5:8d:8f: ae:6b:b6:9c:9c:2f:38:8c:fa:27:04:b5:c0:83:dd: d1:a3:06:dc:31:ba:d6:87:65:ca:75:f6:28:b6:db: 56:0b:8d:56:48:8a:93:02:a4:8d:91:f5:33:0c:79: 05:81:fd:1d:60:52:02:a1:49:10:9c:a4:5c:fa:da: 59:1d:2a:1b:0f:03:07:65:16:ed:e2:14:2f:5e:1f: 2f:7d:e5:cb:e6:e5:72:dd:67:70:ec:75:9f:e1:6e: f3:85:35:6c:a4:6f:26:fa:36:f6:09:45:e5:e0:30: 9e:25:14:b7:95:2d:bb:17:69:03:95:b1:65:15:17: 0c:9e:dc:67:45:d9:c8:20:49:cd:49:14:f5:f0:a9: 51:e3:59:9b:b1:07:eb:93:a9:c1:7c:58:60:12:7e: 52:97:aa:44:e8:c1:54:fe:49:12:ba:ac:34:03:a7: 2b:ae:28:c1:8b:e1:a4:e5:c7:58:98:17:67:d7:96: f9:a8:9a:83:3e:3f:90:f8:cf:f1:85:a0:02:3d:9c: ce:f5:5e:10:fd:6a:01:b3:4f:5e:d4:65:60:34:cd: 2c:6a:13:c8:5a:32:18:2b:40:31:de:31:c2:41:55: c0:d8:14:ef:cf:a3:94:b5:08:d8:a2:21:be:51:fd: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AC:FD:D6:A2:23:55:EE:B4:E2:0F:5D:56:FC:9D:C6:11:E7:A1:77 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/42BF9F626C2111EF8AAEC852C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.30.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:c4:d2:b6:01:64:52:af:69:7e:8c:bd:2b:87:da:7e:cf:a7: 45:f3:3f:e5:e1:53:6a:68:28:30:35:59:e8:3e:c4:c4:63:2e: 8c:99:63:63:79:f0:b1:c2:85:15:49:04:0a:75:dc:3a:8d:40: 8e:c7:29:b0:fc:b4:bc:aa:3c:51:e5:44:b3:84:68:63:8a:77: b0:da:ca:9e:bf:29:cf:41:91:36:af:1e:7c:f2:90:3c:b7:ed: b6:3f:3f:ec:29:eb:9d:93:f1:99:20:6b:bb:76:26:89:69:89: 93:ed:cc:de:fb:95:fb:72:95:f1:42:5f:0f:23:02:5b:d9:a8: ea:00:d9:46:8b:64:88:96:62:bf:24:00:f2:47:64:2c:d5:0a: 28:9b:20:99:4b:09:42:1e:72:c2:0f:fc:9a:4e:09:ef:b2:4c: d2:bf:92:82:f5:ed:1c:5b:22:44:ca:b5:b1:20:55:bf:0f:48: 78:41:84:1c:14:e6:31:d0:e7:f6:eb:b2:6d:26:ce:00:bc:51: 31:c5:e1:51:27:42:fe:36:39:4d:13:5b:91:86:24:cc:d9:ac: 50:bb:16:12:d8:6d:54:ed:95:fd:7d:aa:c4:3f:49:e2:45:6b: d0:f9:db:fe:00:f0:94:36:a8:16:7a:4c:35:a3:34:57:a1:db: 78:8d:21:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhNS0xYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhsem80LQVBeGEnFjY+ua7acnC84jPonBLXAg93RowbcMbrWh2XKdfYotttW C41WSIqTAqSNkfUzDHkFgf0dYFICoUkQnKRc+tpZHSobDwMHZRbt4hQvXh8vfeXL 5uVy3Wdw7HWf4W7zhTVspG8m+jb2CUXl4DCeJRS3lS27F2kDlbFlFRcMntxnRdnI IEnNSRT18KlR41mbsQfrk6nBfFhgEn5Sl6pE6MFU/kkSuqw0A6crrijBi+Gk5cdY mBdn15b5qJqDPj+Q+M/xhaACPZzO9V4Q/WoBs09e1GVgNM0sahPIWjIYK0Ax3jHC QVXA2BTvz6OUtQjYoiG+Uf27PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJGs/dai I1XutOIPXVb8ncYR56F3MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDJCRjlGNjI2 QzIxMTFFRjhBQUVDODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQh4wDQYJKoZIhvcNAQELBQADggEBAAzE0rYBZFKvaX6M vSuH2n7Pp0XzP+XhU2poKDA1Weg+xMRjLoyZY2N58LHChRVJBAp13DqNQI7HKbD8 tLyqPFHlRLOEaGOKd7Dayp6/Kc9BkTavHnzykDy37bY/P+wp652T8Zkga7t2Jolp iZPtzN77lftylfFCXw8jAlvZqOoA2UaLZIiWYr8kAPJHZCzVCiibIJlLCUIecsIP /JpOCe+yTNK/koL17RxbIkTKtbEgVb8PSHhBhBwU5jHQ5/brsm0mzgC8UTHF4VEn Qv42OU0TW5GGJMzZrFC7FhLYbVTtlf19qsQ/SeJFa9D52/4A8JQ2qBZ6TDWjNFeh 23iNIaU= -----END CERTIFICATE-----Generated at Sun May 11 00:21:10 2025 by rpki-client