$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa File: 63BC93F4F8C311EE9B11851BC4F9AE02.roa (raw, json) Hash identifier: SMkO4pyzl8t+QW04f8W+f4WcerGz2XF3mI1xWbxo+Ac= Subject key identifier: 57:DB:0C:31:FB:40:53:05:6B:D4:8D:A5:64:AB:60:20:9A:0B:D1:16 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D98 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:24 +0000 ROA not before: Thu 08 May 2025 15:53:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150581 IP address blocks: 157.66.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7576 (0x1d98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd374-62c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:3c:42:a9:ba:b0:8d:49:97:5c:60:8c:7c: 11:73:f8:c9:69:dc:35:40:e4:41:81:29:20:93:d8: 03:ba:64:25:ef:9c:a9:10:0c:1c:f4:17:94:10:df: 4b:22:30:7e:c1:4d:5f:07:d5:e0:39:e7:87:bb:05: e3:28:4b:1e:8f:0b:d7:12:a8:dd:f1:f1:e1:3a:91: 5b:09:c3:36:66:41:eb:b9:97:e1:24:1c:a1:82:9c: 64:f7:5c:fc:06:a4:80:d4:b4:8e:0a:7c:19:3f:87: 20:fa:69:7b:df:0d:b4:80:9e:94:c4:67:bb:fe:45: e1:3d:5c:3c:d0:bf:85:9a:fa:7b:17:3c:5d:63:6e: 1f:c6:46:44:34:f1:cb:e8:0a:00:42:36:39:a3:99: a1:fe:ce:65:42:99:64:62:8b:dd:86:ae:f5:ab:8c: e5:db:83:69:c7:79:56:13:af:2f:aa:6a:97:da:9f: 99:62:16:69:46:56:c6:d8:17:2a:4d:9d:b4:1f:a0: b1:87:1a:b5:68:73:41:03:25:18:c5:06:9f:d2:6a: b1:fb:f8:6b:ef:7f:1c:30:8a:b0:ab:3d:41:fd:d0: 92:f9:9e:45:6c:be:c8:c6:00:37:51:c2:ac:63:cc: be:f8:67:d2:24:11:d3:6e:c0:69:8f:06:c1:9c:97: bc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DB:0C:31:FB:40:53:05:6B:D4:8D:A5:64:AB:60:20:9A:0B:D1:16 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/63BC93F4F8C311EE9B11851BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.78.0/23 Signature Algorithm: sha256WithRSAEncryption 87:d3:bc:27:3c:7d:69:a0:22:6a:fd:84:cb:91:6b:fa:e5:d9: 72:d3:4f:34:93:e8:2a:7f:8d:3c:47:f1:14:69:6b:5c:e7:94: 86:f7:ba:aa:ba:d1:82:19:06:46:5a:93:9b:3b:4e:d8:46:d9: 8e:ff:ff:95:b3:1e:2d:ac:c1:3e:ff:91:9d:02:81:fe:d2:32: b0:64:de:17:2d:72:26:1c:94:37:45:7a:4a:32:9c:c5:58:04: fb:00:9e:3d:1f:17:5b:44:22:74:f5:1f:cb:48:7d:9b:88:27: 79:bb:51:11:0a:15:aa:05:82:30:fa:6d:f2:26:ef:e3:22:7f: 6c:84:5b:6a:91:bd:dc:e4:4b:fd:0a:fb:03:fb:c3:af:14:03: 2f:0a:7b:79:a5:48:3b:a9:d8:e8:ba:ea:a0:e0:99:88:10:a3: 20:d4:f7:fc:65:f1:53:e1:58:5e:67:6a:af:95:b8:42:37:9d: 80:52:93:1b:6a:66:b3:fd:1f:6b:f1:a7:94:39:d2:95:62:ae: 99:39:8c:93:79:92:1c:fd:dd:c1:5f:30:32:dd:81:2c:dd:e3: d7:b1:0c:28:0e:6c:c0:aa:47:b0:70:8f:f9:fb:fa:26:25:85: 12:48:e8:99:ba:0f:71:45:55:9d:c2:fe:93:51:95:10:a8:f0: ed:6e:82:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3NC02MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrA8Qqm6sI1Jl1xgjHwRc/jJadw1QORBgSkgk9gDumQl75ypEAwc9BeUEN9L IjB+wU1fB9XgOeeHuwXjKEsejwvXEqjd8fHhOpFbCcM2ZkHruZfhJByhgpxk91z8 BqSA1LSOCnwZP4cg+ml73w20gJ6UxGe7/kXhPVw80L+Fmvp7FzxdY24fxkZENPHL 6AoAQjY5o5mh/s5lQplkYovdhq71q4zl24Npx3lWE68vqmqX2p+ZYhZpRlbG2Bcq TZ20H6Cxhxq1aHNBAyUYxQaf0mqx+/hr738cMIqwqz1B/dCS+Z5FbL7IxgA3UcKs Y8y++GfSJBHTbsBpjwbBnJe8iwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFfbDDH7 QFMFa9SNpWSrYCCaC9EWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjNCQzkzRjRG OEMzMTFFRTlCMTE4NTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQk4wDQYJKoZIhvcNAQELBQADggEBAIfTvCc8fWmgImr9 hMuRa/rl2XLTTzST6Cp/jTxH8RRpa1znlIb3uqq60YIZBkZak5s7TthG2Y7//5Wz Hi2swT7/kZ0Cgf7SMrBk3hctciYclDdFekoynMVYBPsAnj0fF1tEInT1H8tIfZuI J3m7UREKFaoFgjD6bfIm7+Mif2yEW2qRvdzkS/0K+wP7w68UAy8Ke3mlSDup2Oi6 6qDgmYgQoyDU9/xl8VPhWF5naq+VuEI3nYBSkxtqZrP9H2vxp5Q50pVirpk5jJN5 khz93cFfMDLdgSzd49exDCgObMCqR7Bwj/n7+iYlhRJI6Jm6D3FFVZ3C/pNRlRCo 8O1ugkk= -----END CERTIFICATE-----Generated at Wed May 14 04:41:09 2025 by rpki-client