$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: ysYS2krqUHd/2zJ7lRjRm4vnPd5MFsqM6ZK1Puh4Gqk= Subject key identifier: 4A:A5:41:ED:A3:4A:CD:40:BF:1C:9F:77:0E:66:1D:69:23:CA:04:47 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D6D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Thu 08 May 2025 15:52:47 +0000 ROA not before: Thu 08 May 2025 15:52:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7533 (0x1d6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd34f-6004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:84:32:99:9a:c7:2f:88:ed:e9:42:41:af: 76:bc:c0:ea:a6:32:95:4f:f4:6a:e3:49:ee:26:bf: bf:1c:43:c5:a1:8b:a6:01:1d:9c:a6:cd:e9:11:34: 8e:0c:99:34:dc:9e:cd:d6:a5:f7:cb:19:e3:4e:6a: ea:6b:74:80:9a:95:29:9a:86:4a:3b:3b:10:03:18: 95:b4:3b:eb:a7:2e:a9:c3:a3:5f:81:28:89:97:18: 44:26:a9:09:73:2b:e9:9b:f0:57:f5:e5:e5:50:bb: 82:81:04:8c:2a:a5:9b:e6:1a:f9:56:39:cd:dc:2a: 08:46:d2:4c:ca:8b:91:57:fc:de:a5:5b:a6:b5:3b: 16:74:91:2c:5d:f8:09:9c:03:fb:66:1d:e5:c5:a1: b5:07:5c:95:05:44:5a:96:d2:8c:a4:34:9b:59:1b: ef:f7:1b:5d:dd:d3:c7:af:74:11:2e:1a:90:10:16: 8a:65:07:64:64:0b:de:23:aa:04:08:bb:86:a7:64: 39:0b:8e:cb:a3:3c:8c:2b:81:92:13:26:91:4a:fc: e8:fb:52:4c:b9:44:55:a0:2e:3d:63:8a:4b:eb:42: d2:8c:98:49:9f:b0:ed:8d:b7:93:9d:dc:6e:f2:6f: f3:c3:ee:be:ff:7e:c7:45:af:c7:60:a5:7e:24:67: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A5:41:ED:A3:4A:CD:40:BF:1C:9F:77:0E:66:1D:69:23:CA:04:47 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption ae:1c:4d:a9:c6:64:08:e4:5c:c6:6f:6d:3d:4a:a1:cf:1d:4d: 0f:fa:38:36:68:70:2c:6c:f6:5b:7f:ef:23:29:11:59:b9:0b: 39:19:ec:1f:53:3f:f9:87:55:ef:99:fb:07:46:79:68:a8:46: 31:e3:5c:46:e8:86:29:01:20:0e:2f:0b:1f:ef:c2:7e:7c:fd: 6a:1f:95:ec:1f:9d:ff:fc:6d:ba:2b:49:03:86:d1:8c:5e:3a: d3:4f:dc:12:d6:37:62:17:bc:75:8d:43:2e:e9:ec:7a:09:a8: 10:b6:96:c1:e0:45:64:91:f7:e4:c4:99:0f:70:56:42:76:6c: c9:0e:9c:6f:f8:7f:67:42:f1:6e:28:4b:21:95:32:cc:1f:45: 94:a8:06:57:2c:c6:a1:a2:aa:43:0e:8c:d2:e8:79:87:d0:2d: 55:ba:56:9e:2a:0e:98:11:87:62:dd:ff:69:e0:37:7a:c3:74: f3:64:a6:b9:a0:56:09:a7:7d:77:a0:f7:e6:c6:c5:6c:ac:ae: 75:8f:4b:33:6f:1b:7c:b2:c1:3b:38:5f:b9:3d:da:bc:a4:bb: a5:20:ad:97:f3:5b:fb:43:9f:99:6f:7d:8a:fa:fa:7a:f3:5b: 8e:52:60:21:91:71:4f:8c:f1:01:e8:ba:e3:b2:dc:5a:2d:41: 63:5f:f6:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM0Zi02MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobuEMpmaxy+I7elCQa92vMDqpjKVT/Rq40nuJr+/HEPFoYumAR2cps3pETSO DJk03J7N1qX3yxnjTmrqa3SAmpUpmoZKOzsQAxiVtDvrpy6pw6NfgSiJlxhEJqkJ cyvpm/BX9eXlULuCgQSMKqWb5hr5VjnN3CoIRtJMyouRV/zepVumtTsWdJEsXfgJ nAP7Zh3lxaG1B1yVBURaltKMpDSbWRvv9xtd3dPHr3QRLhqQEBaKZQdkZAveI6oE CLuGp2Q5C47LozyMK4GSEyaRSvzo+1JMuURVoC49Y4pL60LSjJhJn7DtjbeTndxu 8m/zw+6+/37HRa/HYKV+JGdzqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEqlQe2j Ss1Avxyfdw5mHWkjygRHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFFYwDQYJKoZIhvcNAQELBQADggEBAK4cTanGZAjkXMZv bT1Koc8dTQ/6ODZocCxs9lt/7yMpEVm5CzkZ7B9TP/mHVe+Z+wdGeWioRjHjXEbo hikBIA4vCx/vwn58/Woflewfnf/8bborSQOG0YxeOtNP3BLWN2IXvHWNQy7p7HoJ qBC2lsHgRWSR9+TEmQ9wVkJ2bMkOnG/4f2dC8W4oSyGVMswfRZSoBlcsxqGiqkMO jNLoeYfQLVW6Vp4qDpgRh2Ld/2ngN3rDdPNkprmgVgmnfXeg9+bGxWysrnWPSzNv G3yywTs4X7k92ryku6UgrZfzW/tDn5lvfYr6+nrzW45SYCGRcU+M8QHouuOy3Fot QWNf9qs= -----END CERTIFICATE-----Generated at Tue May 13 05:05:38 2025 by rpki-client