$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa File: 632D1A30B90D11EE8111F338C4F9AE02.roa (raw, json) Hash identifier: TQcqbinF2TyYgIlxaMaz1mX/m3ToEm+m0z7Y2BKh3Zg= Subject key identifier: 84:1D:39:D8:BF:61:73:8E:33:02:C6:1B:2B:AC:1E:FB:BF:E7:A1:52 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DB0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:44 +0000 ROA not before: Thu 08 May 2025 15:53:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151735 IP address blocks: 157.10.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7600 (0x1db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd388-7e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:73:63:83:fe:0c:40:43:78:eb:79:44:8a: f3:12:8a:1e:f9:eb:d0:18:a4:2c:09:0c:59:e5:9d: ed:b6:89:b4:71:0d:6d:27:8c:99:2d:b1:3a:d0:b2: 80:9c:b5:b7:3c:dc:ef:a9:9d:90:81:52:e5:41:ba: e4:a6:bf:f3:13:60:6a:70:95:2b:2f:87:56:98:f9: 62:51:20:72:8b:5f:72:e2:48:71:a9:a3:3d:44:3f: 11:40:cf:b7:45:eb:b6:62:29:6e:ec:11:91:84:68: 64:69:9c:ef:2d:05:30:af:b2:7a:0d:5f:f1:c6:93: 14:97:a1:04:a3:57:2d:9d:02:53:08:79:62:6f:c0: 9b:36:fc:b2:e8:9f:70:19:f6:ae:9e:17:29:d8:b5: 66:2b:fc:3e:31:2e:02:2d:75:ef:ed:b6:ae:6c:ab: 68:82:db:08:4a:f9:7d:4b:ee:ef:37:1f:f9:3e:a1: 15:f7:91:68:f6:9a:9b:eb:d6:68:59:7b:47:ef:29: 3b:65:d6:ea:70:aa:3e:31:d1:2d:c6:d1:99:cc:cc: f6:df:23:d3:6e:cb:76:4f:c2:80:03:14:c2:61:63: 06:69:15:2f:2d:2e:33:4d:d3:e8:9d:eb:26:30:84: cd:02:f9:fa:cf:29:6f:92:21:94:92:23:96:6d:e7: 34:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1D:39:D8:BF:61:73:8E:33:02:C6:1B:2B:AC:1E:FB:BF:E7:A1:52 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/632D1A30B90D11EE8111F338C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.240.0/23 Signature Algorithm: sha256WithRSAEncryption 58:59:29:1c:24:56:06:7f:4d:e5:0f:cf:74:20:eb:db:88:74: 51:7e:30:3b:3e:98:63:20:a1:44:c9:45:d6:46:c1:11:1c:11: 08:bc:f9:9e:c1:68:ce:8d:40:14:0e:d8:26:ac:d6:a9:20:c8: ff:11:ba:fd:f8:52:03:e0:52:4a:3c:8e:6c:b1:92:28:56:45: 22:5b:8e:6e:44:7b:16:ba:d5:ec:c3:ad:df:07:f9:25:90:22: e3:ec:e0:80:b8:f2:98:42:32:97:45:87:64:5a:b0:01:07:6c: 7a:0a:e5:a9:22:10:46:80:e2:f6:2d:93:31:28:e0:b5:3d:23: 36:bc:0b:0e:7b:6f:1d:60:fd:ee:e8:86:6c:9b:dd:93:e0:3a: 6a:1e:32:c5:b4:2f:cb:5a:ff:c2:8c:6d:12:68:10:66:b2:34: 44:08:68:e5:ef:79:54:8f:21:b9:6b:9a:42:83:18:3f:49:75: 94:60:67:15:63:9d:e6:f6:2c:4f:08:e1:6c:6e:3f:16:8b:af: 7b:a1:71:3c:56:cb:47:eb:97:de:3b:8e:86:24:73:ce:5b:e0: 44:66:89:e7:d8:d6:71:3e:9f:69:01:30:b3:34:3e:ea:30:2d: 47:07:6d:d7:45:c0:ff:45:de:af:b2:8e:5d:c1:a7:54:81:ac: db:2b:c9:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4OC03ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkxzY4P+DEBDeOt5RIrzEooe+evQGKQsCQxZ5Z3ttom0cQ1tJ4yZLbE60LKA nLW3PNzvqZ2QgVLlQbrkpr/zE2BqcJUrL4dWmPliUSByi19y4khxqaM9RD8RQM+3 Reu2Yilu7BGRhGhkaZzvLQUwr7J6DV/xxpMUl6EEo1ctnQJTCHlib8CbNvyy6J9w Gfaunhcp2LVmK/w+MS4CLXXv7baubKtogtsISvl9S+7vNx/5PqEV95Fo9pqb69Zo WXtH7yk7ZdbqcKo+MdEtxtGZzMz23yPTbst2T8KAAxTCYWMGaRUvLS4zTdPonesm MITNAvn6zylvkiGUkiOWbec0PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIQdOdi/ YXOOMwLGGyusHvu/56FSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjMyRDFBMzBC OTBEMTFFRTgxMTFGMzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCvAwDQYJKoZIhvcNAQELBQADggEBAFhZKRwkVgZ/TeUP z3Qg69uIdFF+MDs+mGMgoUTJRdZGwREcEQi8+Z7BaM6NQBQO2Cas1qkgyP8Ruv34 UgPgUko8jmyxkihWRSJbjm5Eexa61ezDrd8H+SWQIuPs4IC48phCMpdFh2RasAEH bHoK5akiEEaA4vYtkzEo4LU9Iza8Cw57bx1g/e7ohmyb3ZPgOmoeMsW0L8ta/8KM bRJoEGayNEQIaOXveVSPIblrmkKDGD9JdZRgZxVjneb2LE8I4WxuPxaLr3uhcTxW y0frl947joYkc85b4ERmiefY1nE+n2kBMLM0PuowLUcHbddFwP9F3q+yjl3Bp1SB rNsryas= -----END CERTIFICATE-----Generated at Sat May 10 23:53:56 2025 by rpki-client