$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa File: 75E58BA20A3911F0B3D0D353C4F9AE02.roa (raw, json) Hash identifier: P6Dh/W1mfPp+D2OcED1NcbO+isuqpmRvOZ0fPl/1H48= Subject key identifier: 18:29:AE:11:84:5B:C5:0E:6A:C3:64:2F:6F:A5:74:F4:C7:69:0F:10 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:32 +0000 ROA not before: Thu 08 May 2025 15:53:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151702 IP address blocks: 157.10.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7586 (0x1da2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37c-9f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:be:b3:01:c0:53:58:1c:f5:c2:a9:37:5d: ca:fa:5f:55:b5:86:e4:dd:ea:e2:31:f4:d7:43:f8: 54:1b:98:fd:b8:12:10:1e:8a:46:8c:1c:51:79:f7: 7a:c3:95:af:9e:3c:07:2e:92:8e:c2:41:d1:4d:17: 4d:87:e6:9c:0b:b0:81:43:ac:ba:dc:cf:47:fd:37: 20:b8:1e:b0:7a:31:1d:25:e5:ac:0b:23:a8:ad:68: 79:a4:f9:fa:2f:32:35:b9:70:4a:a1:df:b9:07:d1: 21:d2:c2:6c:90:e9:d3:bc:7f:a6:28:c6:f7:6c:29: ff:2a:42:a1:3a:23:36:c3:6a:64:52:54:f9:17:e3: 22:98:85:05:13:29:e4:22:cb:98:79:ca:c4:e6:b6: d3:14:6c:70:9f:15:ee:2d:2d:ea:9e:fb:21:fc:e1: cf:ae:4e:b7:21:13:33:1e:d3:81:13:04:ae:88:26: 36:75:bc:ca:1f:38:0a:2f:de:ac:d4:2e:8e:26:01: 1f:81:13:80:12:ff:81:a2:a0:a6:a4:12:25:6a:8c: 2e:ac:8a:b3:e1:ca:91:77:c1:55:26:74:02:02:aa: 11:f7:8f:a1:05:0c:21:9e:a1:f4:e1:59:6c:23:05: 83:f6:a9:90:c6:6f:df:04:da:1f:c0:82:02:1f:0e: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:29:AE:11:84:5B:C5:0E:6A:C3:64:2F:6F:A5:74:F4:C7:69:0F:10 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/75E58BA20A3911F0B3D0D353C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.24.0/23 Signature Algorithm: sha256WithRSAEncryption a0:5c:16:5e:b3:63:3e:ec:57:f5:be:68:5c:4e:1f:ba:aa:a7: 28:54:e2:c8:50:c9:e8:27:b0:ba:cb:6d:29:38:88:c6:e2:01: ba:a8:28:0c:cc:c4:00:bc:98:1c:30:0b:57:ca:8c:e6:cb:68: 95:5b:de:c2:b8:a8:7b:a9:27:41:ef:26:be:ea:72:e3:15:95: dd:ab:f5:76:94:de:b9:d4:34:bb:77:ae:bd:c4:f9:4e:38:41: 36:bb:03:4d:0a:a1:84:43:76:7e:9e:7c:df:d8:97:a6:00:24: 67:92:7d:9b:14:eb:04:75:52:ee:dc:9c:72:4a:9d:70:7d:93: 0c:fb:e2:f2:00:55:12:66:df:bf:dd:af:7a:f6:c2:af:be:fd: 49:81:ad:6c:b0:93:79:93:9b:b5:d9:91:07:77:9f:ef:28:d3: 39:7d:9d:27:5e:f8:2a:89:c5:51:01:93:20:d0:22:09:58:aa: b8:1c:0a:65:44:94:c1:ff:05:74:3f:c4:89:04:c9:b5:94:fb: 8d:01:b7:49:4d:bc:0e:4f:e9:2c:e4:61:81:52:4d:bc:f0:97: da:73:8c:bf:87:59:89:68:1d:54:46:a8:1d:ed:18:3e:18:30: 0e:09:7f:c6:41:32:bb:70:c8:be:05:a0:4f:37:a5:fc:ab:51: b2:0e:af:ee -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3Yy05ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ku+swHAU1gc9cKpN13K+l9VtYbk3eriMfTXQ/hUG5j9uBIQHopGjBxRefd6 w5WvnjwHLpKOwkHRTRdNh+acC7CBQ6y63M9H/TcguB6wejEdJeWsCyOorWh5pPn6 LzI1uXBKod+5B9Eh0sJskOnTvH+mKMb3bCn/KkKhOiM2w2pkUlT5F+MimIUFEynk IsuYecrE5rbTFGxwnxXuLS3qnvsh/OHPrk63IRMzHtOBEwSuiCY2dbzKHzgKL96s 1C6OJgEfgROAEv+BoqCmpBIlaowurIqz4cqRd8FVJnQCAqoR94+hBQwhnqH04Vls IwWD9qmQxm/fBNofwIICHw4udwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBgprhGE W8UOasNkL2+ldPTHaQ8QMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzVFNThCQTIw QTM5MTFGMEIzRDBEMzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdChgwDQYJKoZIhvcNAQELBQADggEBAKBcFl6zYz7sV/W+ aFxOH7qqpyhU4shQyegnsLrLbSk4iMbiAbqoKAzMxAC8mBwwC1fKjObLaJVb3sK4 qHupJ0HvJr7qcuMVld2r9XaU3rnUNLt3rr3E+U44QTa7A00KoYRDdn6efN/Yl6YA JGeSfZsU6wR1Uu7cnHJKnXB9kwz74vIAVRJm37/dr3r2wq++/UmBrWywk3mTm7XZ kQd3n+8o0zl9nSde+CqJxVEBkyDQIglYqrgcCmVElMH/BXQ/xIkEybWU+40Bt0lN vA5P6SzkYYFSTbzwl9pzjL+HWYloHVRGqB3tGD4YMA4Jf8ZBMrtwyL4FoE83pfyr UbIOr+4= -----END CERTIFICATE-----Generated at Tue May 13 12:35:08 2025 by rpki-client