$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa File: 9B016306CCAB11EEB89B362DC4F9AE02.roa (raw, json) Hash identifier: AmqeAINRWUiGMNtR+ec19JdKOyfexf6x0qpA5rguboY= Subject key identifier: 65:5C:D4:B4:6C:C3:19:B8:C7:F1:1F:58:7E:99:D0:F3:74:03:AE:F7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DB5 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:48 +0000 ROA not before: Thu 08 May 2025 15:53:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151747 IP address blocks: 157.20.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7605 (0x1db5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd38c-bff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:8d:fc:8f:87:06:e4:05:37:ea:1d:fb:d9: 3f:e6:79:54:7e:e6:ff:44:55:3f:73:94:b8:bc:fe: 15:2d:f3:bb:72:1b:16:d2:bd:93:5d:ef:28:dd:37: 0b:86:8a:ca:b7:7c:6c:75:50:bc:9f:67:2e:b2:75: b0:2c:be:0a:ae:05:85:be:f2:7d:9f:78:00:e5:fb: df:ed:56:da:23:5d:bc:7e:43:ff:3f:24:c7:b5:07: 05:2f:93:02:be:01:02:8c:4b:e7:0a:69:4b:39:24: 6f:fa:2c:df:b3:5f:01:3a:28:60:93:6c:85:c6:8d: bb:40:b1:19:ef:68:b3:92:5f:4f:e9:5d:c0:83:1d: cf:85:a8:f1:7f:ee:61:23:18:a8:84:3c:07:7c:05: 8e:2f:98:a9:74:c6:73:ec:63:cd:55:a2:d0:2d:09: 20:7a:61:49:9f:6e:f6:ad:2d:9b:39:03:82:8f:60: 8c:7f:d3:a9:a7:76:dd:99:1b:b2:c0:57:c1:51:02: 3a:0b:33:77:f5:b0:95:02:4e:47:e9:f1:42:1a:ef: 90:a4:01:93:0a:72:52:42:5b:83:84:d1:45:be:bf: 9a:92:37:9a:45:dd:b3:f4:31:d0:61:f5:b9:62:31: c9:f4:d6:c4:28:d0:15:f6:39:ee:39:ad:34:25:19: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5C:D4:B4:6C:C3:19:B8:C7:F1:1F:58:7E:99:D0:F3:74:03:AE:F7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.28.0/23 Signature Algorithm: sha256WithRSAEncryption a6:ba:74:25:65:02:7e:08:d7:7f:86:fb:e6:ee:da:14:a9:0e: 00:d1:bc:d9:e9:54:3b:65:48:fe:32:45:f8:e8:ec:57:41:12: 18:d3:39:18:0a:dd:f0:c3:a5:01:e8:d4:1f:27:e2:bb:ba:77: bc:33:25:63:65:cc:09:29:5c:4f:5b:95:b6:34:80:01:91:bc: 2f:d5:cc:c4:15:31:2e:9f:71:15:6c:64:ca:2c:5d:73:3c:1d: f9:49:63:fb:63:a6:92:6c:39:94:97:01:56:cc:44:97:6f:71: cc:6b:1b:fd:fe:d6:07:6a:ce:8b:c1:96:9e:aa:4d:27:57:89: 3f:5f:5a:bc:a1:6a:1b:35:74:67:33:b6:1a:74:91:3d:01:79: cb:21:9c:21:8c:ac:81:56:8e:33:4f:73:3f:b7:7a:19:c5:0a: 52:f2:ad:09:d9:d2:64:2b:70:29:2a:fc:4d:70:39:bd:30:a4: 55:89:b0:78:9d:93:f6:7f:c8:57:12:0b:c2:a3:a2:68:76:a8: 34:8a:d0:43:88:bc:7e:e6:95:2d:0b:b8:c4:d2:f4:2b:eb:24: af:45:36:28:b3:15:e7:0b:8d:a1:8b:da:1e:a4:3a:3e:5c:5a: 42:a0:ba:a0:14:fa:2f:e4:7d:fe:74:5b:76:b7:7e:30:81:5c: 4b:73:aa:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4Yy1iZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7CN/I+HBuQFN+od+9k/5nlUfub/RFU/c5S4vP4VLfO7chsW0r2TXe8o3TcL horKt3xsdVC8n2cusnWwLL4KrgWFvvJ9n3gA5fvf7VbaI128fkP/PyTHtQcFL5MC vgECjEvnCmlLOSRv+izfs18BOihgk2yFxo27QLEZ72izkl9P6V3Agx3Phajxf+5h IxiohDwHfAWOL5ipdMZz7GPNVaLQLQkgemFJn272rS2bOQOCj2CMf9Opp3bdmRuy wFfBUQI6CzN39bCVAk5H6fFCGu+QpAGTCnJSQluDhNFFvr+akjeaRd2z9DHQYfW5 YjHJ9NbEKNAV9jnuOa00JRmHZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGVc1LRs wxm4x/EfWH6Z0PN0A673MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUIwMTYzMDZD Q0FCMTFFRUI4OUIzNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFBwwDQYJKoZIhvcNAQELBQADggEBAKa6dCVlAn4I13+G ++bu2hSpDgDRvNnpVDtlSP4yRfjo7FdBEhjTORgK3fDDpQHo1B8n4ru6d7wzJWNl zAkpXE9blbY0gAGRvC/VzMQVMS6fcRVsZMosXXM8HflJY/tjppJsOZSXAVbMRJdv ccxrG/3+1gdqzovBlp6qTSdXiT9fWryhahs1dGczthp0kT0BecshnCGMrIFWjjNP cz+3ehnFClLyrQnZ0mQrcCkq/E1wOb0wpFWJsHidk/Z/yFcSC8Kjomh2qDSK0EOI vH7mlS0LuMTS9CvrJK9FNiizFecLjaGL2h6kOj5cWkKguqAU+i/kff50W3a3fjCB XEtzqiQ= -----END CERTIFICATE-----Generated at Sun May 11 22:42:45 2025 by rpki-client