$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa File: 98E195B8006911EF9D4A377FC4F9AE02.roa (raw, json) Hash identifier: +1e0BThG9p25gNC+t/hFA9NaAgvFAAqmZpLHr3UQZUs= Subject key identifier: E2:33:53:B9:66:87:74:3B:13:45:EB:C1:9D:58:04:6E:2B:34:05:5F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DC4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa Signing time: Thu 08 May 2025 15:54:02 +0000 ROA not before: Thu 08 May 2025 15:54:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152499 IP address blocks: 157.66.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7620 (0x1dc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd39a-6b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:28:09:17:6e:09:4e:b9:6c:84:e5:84:24: 60:4b:f9:6a:1d:d2:f5:7b:ad:e5:30:36:44:8f:45: 99:c0:0a:82:7b:e4:ef:18:05:e6:d7:b8:e7:29:b2: 1f:1a:2f:3e:45:0c:e1:1c:b6:d3:90:46:15:f1:bf: e2:44:e0:1e:a1:5d:5d:6a:fa:9a:85:42:66:be:62: c3:a2:36:75:5f:94:50:61:f2:cd:3b:d3:6a:25:40: 68:1d:2e:15:1c:2f:65:f1:45:3f:64:fd:72:0d:1f: d5:5c:c2:b7:8b:ff:ec:c8:fe:68:6a:20:d2:f5:c9: 4e:d4:76:76:31:67:22:c7:20:ca:00:aa:8e:14:1d: 39:9c:13:99:ef:cd:7a:aa:6d:ea:45:43:59:ec:c0: 77:98:b0:ee:a6:94:4e:9f:89:77:b8:d2:05:34:0b: 7e:1e:83:fb:be:40:5b:26:47:bf:e4:a8:8f:04:d4: 17:0b:8f:35:e2:c0:35:a0:4a:1d:44:a7:0c:1b:a7: e6:36:ae:8c:b1:70:73:5d:a5:b0:e8:57:a8:3c:7b: bd:8f:6f:15:20:3a:bb:63:82:a2:b0:1c:51:82:af: 09:33:06:98:8b:d1:68:b0:8c:f3:32:33:0e:9f:2f: 1e:b7:fc:bd:55:da:59:19:d3:42:4a:e6:0c:57:14: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:33:53:B9:66:87:74:3B:13:45:EB:C1:9D:58:04:6E:2B:34:05:5F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/98E195B8006911EF9D4A377FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.146.0/23 Signature Algorithm: sha256WithRSAEncryption 44:c8:72:48:61:38:4c:7d:f6:7a:09:52:fe:0e:ba:b6:a6:35: 43:f3:d5:31:8c:84:10:d8:48:e7:fc:06:a5:47:c1:6f:fc:d0: a3:8d:67:51:86:02:5b:6f:67:e2:6a:9e:a6:ed:11:7d:72:36: 63:ac:5b:29:60:bc:d8:a8:ec:1b:3e:2e:42:87:fb:b2:4e:1d: 9b:76:cd:2b:d1:44:83:92:62:6b:bd:a5:27:0e:84:70:af:2b: e0:4a:88:ac:49:ae:5e:21:e6:35:e1:c0:2d:f1:0f:68:0d:f4: ae:b9:93:e5:77:6f:56:9a:4e:ba:cf:c8:1d:1f:9c:0f:d5:94: d6:c9:a6:73:c3:4d:12:fc:97:09:6e:4a:b0:80:54:25:fc:dd: 6d:9a:25:e0:75:dc:c2:19:71:f2:de:5a:0f:f1:bc:9f:b5:9b: a4:4b:69:e4:91:d5:15:3d:d8:7d:90:c9:61:9f:2d:fa:0e:47: a2:e5:27:cb:4f:f5:62:f7:69:b9:b1:23:08:66:58:f3:f7:5b: 85:99:da:cc:b1:ee:8a:2b:2c:e2:37:8f:5c:18:74:ac:fe:8e: bd:ef:3b:87:54:6e:03:05:8b:07:c8:1c:8c:13:64:5e:9a:30: b9:86:b0:6e:10:44:04:06:84:6a:05:6c:1b:5d:6a:02:cc:c3: 48:ea:92:03 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM5YS02YjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudwoCRduCU65bITlhCRgS/lqHdL1e63lMDZEj0WZwAqCe+TvGAXm17jnKbIf Gi8+RQzhHLbTkEYV8b/iROAeoV1davqahUJmvmLDojZ1X5RQYfLNO9NqJUBoHS4V HC9l8UU/ZP1yDR/VXMK3i//syP5oaiDS9clO1HZ2MWcixyDKAKqOFB05nBOZ7816 qm3qRUNZ7MB3mLDuppROn4l3uNIFNAt+HoP7vkBbJke/5KiPBNQXC4814sA1oEod RKcMG6fmNq6MsXBzXaWw6FeoPHu9j28VIDq7Y4KisBxRgq8JMwaYi9FosIzzMjMO ny8et/y9VdpZGdNCSuYMVxR5XwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOIzU7lm h3Q7E0XrwZ1YBG4rNAVfMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOThFMTk1Qjgw MDY5MTFFRjlENEEzNzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQpIwDQYJKoZIhvcNAQELBQADggEBAETIckhhOEx99noJ Uv4OuramNUPz1TGMhBDYSOf8BqVHwW/80KONZ1GGAltvZ+JqnqbtEX1yNmOsWylg vNio7Bs+LkKH+7JOHZt2zSvRRIOSYmu9pScOhHCvK+BKiKxJrl4h5jXhwC3xD2gN 9K65k+V3b1aaTrrPyB0fnA/VlNbJpnPDTRL8lwluSrCAVCX83W2aJeB13MIZcfLe Wg/xvJ+1m6RLaeSR1RU92H2QyWGfLfoOR6LlJ8tP9WL3abmxIwhmWPP3W4WZ2syx 7oorLOI3j1wYdKz+jr3vO4dUbgMFiwfIHIwTZF6aMLmGsG4QRAQGhGoFbBtdagLM w0jqkgM= -----END CERTIFICATE-----Generated at Tue May 13 08:13:05 2025 by rpki-client