$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa File: 8913FB20AF7011EE9AFFFA7EC4F9AE02.roa (raw, json) Hash identifier: kjtWwa07Hqv6pEMTlDSoKbT954VqL5GTS8J9OrV/vgQ= Subject key identifier: 0A:DC:BF:0B:B0:AE:EF:AE:D8:B1:33:7E:D0:67:63:56:0A:35:03:B3 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA8 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:37 +0000 ROA not before: Thu 08 May 2025 15:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151722 IP address blocks: 157.10.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7592 (0x1da8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd381-2241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:c5:66:e9:fb:5c:3d:df:fe:72:13:7e:ca: 5c:3c:79:13:98:69:b4:cc:30:cc:f4:77:ad:e0:38: 12:ab:cd:4f:81:83:fd:59:88:ad:1d:6f:85:21:0c: 64:04:5a:bc:e2:ac:85:72:2a:af:da:5f:c4:ef:04: 6f:a9:1e:4e:4a:e5:30:4d:14:7e:1a:85:8c:1b:04: de:79:5f:f3:e2:e4:bf:f5:e3:7f:cd:a3:1f:07:6c: 06:f3:ed:db:b6:8b:b7:5c:bb:a8:d9:10:56:84:30: 4d:42:ba:b4:37:14:c7:af:5b:2f:bd:ee:3f:ff:3a: e4:1b:ac:fd:7f:e0:6e:8f:7e:9d:13:47:84:8a:4a: ea:e8:9e:59:02:69:ac:2c:6b:03:3f:23:10:57:a5: ed:b3:c1:bc:b3:94:d7:7d:02:96:f7:0d:8f:ab:61: b7:6f:67:33:6f:c2:c6:ec:f1:ab:52:8f:fd:f1:ed: 3c:f7:b9:26:41:17:7b:87:ee:c0:83:e9:ac:da:0b: 57:0d:c7:39:fe:31:93:85:c4:6b:0a:a9:5c:5a:ba: 21:06:7a:fb:ed:5a:77:e5:92:cb:84:16:1e:05:40: ad:38:b0:6e:36:d1:05:25:79:c3:81:a8:be:c8:cd: 57:f7:72:e7:31:13:bb:13:ad:9b:ab:db:63:8c:cc: 4b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:BF:0B:B0:AE:EF:AE:D8:B1:33:7E:D0:67:63:56:0A:35:03:B3 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8913FB20AF7011EE9AFFFA7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.12.0/24 Signature Algorithm: sha256WithRSAEncryption 31:de:ca:ff:33:6b:38:84:4e:8c:66:04:59:7b:cd:79:29:1b: fe:a2:8a:5c:63:86:d4:e1:89:62:b4:2c:98:5a:29:3b:08:25: a5:66:5a:40:02:2f:fa:8f:f0:42:b7:b1:7d:ed:64:0e:7d:3f: bf:11:80:20:4e:ba:3d:a1:72:49:3d:1e:8c:40:01:4c:63:ac: 46:31:1b:6b:73:72:c8:14:45:9b:5c:45:ed:3e:1f:c1:cf:c9: b1:c0:90:ba:18:a0:0b:bc:50:94:43:90:0f:c0:87:17:18:44: 30:45:3e:63:94:fd:8e:75:88:06:b3:c4:a2:00:85:24:4d:f5: 85:10:a2:8c:93:4b:0a:5f:78:c1:0f:e0:96:03:86:50:f0:0a: c6:1c:d0:3b:63:b2:e8:a9:23:ab:4b:00:ae:13:fe:43:52:b2: 86:6b:7b:69:6f:75:c3:bd:76:c1:34:80:79:14:75:a3:24:ff: c2:89:30:d9:c8:ca:27:f1:d1:c2:3e:08:01:0c:44:3c:6b:8a: 2f:aa:51:98:7b:b7:0a:22:16:1c:e0:86:48:ec:6f:cb:40:f6: ef:fe:9c:da:31:e9:11:96:34:00:29:85:c0:b2:fa:fd:a0:4f: 76:fd:6e:47:ae:61:19:d1:84:90:1b:79:1d:63:93:5e:db:f3: d3:dc:71:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4MS0yMjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkjFZun7XD3f/nITfspcPHkTmGm0zDDM9Het4DgSq81PgYP9WYitHW+FIQxk BFq84qyFciqv2l/E7wRvqR5OSuUwTRR+GoWMGwTeeV/z4uS/9eN/zaMfB2wG8+3b tou3XLuo2RBWhDBNQrq0NxTHr1svve4//zrkG6z9f+Buj36dE0eEikrq6J5ZAmms LGsDPyMQV6Xts8G8s5TXfQKW9w2Pq2G3b2czb8LG7PGrUo/98e0897kmQRd7h+7A g+ms2gtXDcc5/jGThcRrCqlcWrohBnr77Vp35ZLLhBYeBUCtOLBuNtEFJXnDgai+ yM1X93LnMRO7E62bq9tjjMxLfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFArcvwuw ru+u2LEzftBnY1YKNQOzMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODkxM0ZCMjBB RjcwMTFFRTlBRkZGQTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdCgwwDQYJKoZIhvcNAQELBQADggEBADHeyv8zaziEToxm BFl7zXkpG/6iilxjhtThiWK0LJhaKTsIJaVmWkACL/qP8EK3sX3tZA59P78RgCBO uj2hckk9HoxAAUxjrEYxG2tzcsgURZtcRe0+H8HPybHAkLoYoAu8UJRDkA/AhxcY RDBFPmOU/Y51iAazxKIAhSRN9YUQooyTSwpfeMEP4JYDhlDwCsYc0DtjsuipI6tL AK4T/kNSsoZre2lvdcO9dsE0gHkUdaMk/8KJMNnIyifx0cI+CAEMRDxrii+qUZh7 twoiFhzghkjsb8tA9u/+nNox6RGWNAAphcCy+v2gT3b9bkeuYRnRhJAbeR1jk17b 89PccQw= -----END CERTIFICATE-----Generated at Sun May 11 04:08:35 2025 by rpki-client