$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa File: 78E70772B90E11EE95522F7FC4F9AE02.roa (raw, json) Hash identifier: rgTaBNsJILLnqGZQ3JxhAMK+w8nVxJWuuhRCOOSRhKw= Subject key identifier: E1:24:C9:29:5D:92:16:B7:88:B7:1F:18:65:80:14:80:44:1D:F0:46 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:36 +0000 ROA not before: Thu 08 May 2025 15:53:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151718 IP address blocks: 157.10.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7590 (0x1da6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd380-5a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:3f:aa:54:ae:9b:d0:3c:15:ba:d7:e1:05: 66:65:a7:ce:e7:dc:12:de:8b:39:45:7b:09:78:07: a3:a3:d4:75:2c:07:2b:50:1f:6f:6d:11:47:5f:66: 9e:f0:3d:d6:6d:1c:ba:6a:83:a1:bd:ef:11:58:4e: a9:fe:35:5b:2b:c0:32:97:9d:73:e6:4a:10:b5:82: d0:11:16:b5:90:f8:4a:8c:59:84:ba:0c:68:5e:c6: f2:e3:b3:5d:f7:a5:0a:c4:ac:bd:bf:e5:ec:ce:bf: f0:25:65:f5:b6:65:ab:73:71:57:ff:5b:4b:23:64: 61:38:b7:20:d7:ce:e5:e9:ce:55:dc:40:34:b2:2c: 8b:48:cf:87:48:09:60:c8:ff:ef:8a:a8:af:06:56: 95:22:22:dd:59:15:5a:74:5c:21:45:6c:1b:ae:9d: ff:47:3a:8d:75:ab:76:16:0c:ba:46:d1:35:5b:ee: 56:95:72:27:b7:21:c9:1f:b7:9b:79:f3:71:a5:df: 21:7e:25:73:b9:7d:b5:9c:ae:70:0e:5e:6c:ff:80: 8b:23:d4:e1:e4:d6:db:83:04:92:98:66:8e:86:27: b6:5b:f7:34:34:5d:ab:96:35:42:be:2e:51:94:64: f2:0c:fc:3f:0e:bf:49:8b:92:15:6a:5c:8f:c3:1e: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:C9:29:5D:92:16:B7:88:B7:1F:18:65:80:14:80:44:1D:F0:46 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.56.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:c3:d1:5d:d4:48:82:58:80:1f:a7:eb:a8:3d:74:38:69:0c: 98:2c:b2:da:d6:c7:7a:23:d5:43:cd:9e:36:63:d0:62:7b:69: 2e:91:fa:61:a0:b0:bf:c6:ef:8f:6f:99:08:a1:2f:7d:87:78: 9f:28:8e:4c:3e:7e:5c:4f:07:59:55:97:cd:c5:70:36:ee:69: fa:ff:23:b9:26:d7:67:ea:8a:6b:f2:c1:d1:f6:c2:8e:9d:92: 8b:61:7c:6a:d3:ff:22:08:8a:f9:0a:7a:e1:b4:4b:33:67:ec: 24:60:5b:c9:12:61:c9:42:c8:e0:5c:e4:b3:b9:96:18:af:79: 5c:11:d8:b1:e6:8a:3d:c5:31:11:1e:b7:78:98:72:8e:7e:4f: 2a:95:b7:0a:4b:11:7c:5d:0c:d1:37:d0:c2:9d:6d:de:64:6a: 6b:c9:64:1e:8f:57:1c:f5:ac:c5:9b:98:fc:c0:95:f0:0f:5c: 70:5c:fe:fc:b8:4f:ab:5a:84:68:0b:7d:f4:0f:be:7e:1e:81: ec:c5:64:2d:1e:cf:12:44:98:f6:35:c2:bd:6b:ce:e0:39:4e: 6b:56:4d:5f:f6:d9:db:89:04:25:3c:61:f9:d9:e5:ce:60:0f: a5:f3:d2:40:e7:7e:c8:1d:6b:ed:f3:8e:ad:2a:d9:d7:b8:35: 9d:f0:08:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4MC01YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUs/qlSum9A8FbrX4QVmZafO59wS3os5RXsJeAejo9R1LAcrUB9vbRFHX2ae 8D3WbRy6aoOhve8RWE6p/jVbK8Ayl51z5koQtYLQERa1kPhKjFmEugxoXsby47Nd 96UKxKy9v+Xszr/wJWX1tmWrc3FX/1tLI2RhOLcg187l6c5V3EA0siyLSM+HSAlg yP/viqivBlaVIiLdWRVadFwhRWwbrp3/RzqNdat2Fgy6RtE1W+5WlXIntyHJH7eb efNxpd8hfiVzuX21nK5wDl5s/4CLI9Th5NbbgwSSmGaOhie2W/c0NF2rljVCvi5R lGTyDPw/Dr9Ji5IValyPwx6qLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOEkySld kha3iLcfGGWAFIBEHfBGMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzhFNzA3NzJC OTBFMTFFRTk1NTIyRjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCjgwDQYJKoZIhvcNAQELBQADggEBAJrD0V3USIJYgB+n 66g9dDhpDJgsstrWx3oj1UPNnjZj0GJ7aS6R+mGgsL/G749vmQihL32HeJ8ojkw+ flxPB1lVl83FcDbuafr/I7km12fqimvywdH2wo6dkothfGrT/yIIivkKeuG0SzNn 7CRgW8kSYclCyOBc5LO5lhiveVwR2LHmij3FMREet3iYco5+TyqVtwpLEXxdDNE3 0MKdbd5kamvJZB6PVxz1rMWbmPzAlfAPXHBc/vy4T6tahGgLffQPvn4egezFZC0e zxJEmPY1wr1rzuA5TmtWTV/22duJBCU8YfnZ5c5gD6Xz0kDnfsgda+3zjq0q2de4 NZ3wCAg= -----END CERTIFICATE-----Generated at Tue May 13 11:11:31 2025 by rpki-client