$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3DA6A4CBDDE11EA9977C550C4F9AE02.roa File: B3DA6A4CBDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: UDYaPZfaFzqWv09BWl9lcEBuMj1+jMrv13NYsufrUTA= Subject key identifier: BD:2F:D0:90:B4:AE:A9:BA:34:D4:5E:75:B6:CB:78:49:11:AD:A3:96 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E36 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3DA6A4CBDDE11EA9977C550C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:44 +0000 ROA not before: Thu 08 May 2025 15:55:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58758 IP address blocks: 158.144.42.0/23 maxlen: 23 158.144.42.0/24 maxlen: 24 158.144.43.0/24 maxlen: 24 158.144.44.0/24 maxlen: 24 158.144.183.0/24 maxlen: 24 158.144.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7734 (0x1e36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd400-9c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:cb:f8:e3:cc:51:95:14:f6:ff:7f:bc:86: 58:98:d2:17:0a:8f:03:93:26:b3:86:46:37:80:80: 8d:b0:18:4c:45:09:1a:99:69:8c:bd:8d:df:c0:ca: d5:aa:d6:9a:8f:5d:88:14:bc:b6:1b:7e:7c:79:03: 45:ca:09:2c:4e:e2:76:ae:22:b9:a1:16:fc:2a:9a: 4c:b7:c7:61:81:78:97:90:97:92:de:fb:21:fb:a4: 73:0e:81:36:df:7f:54:dd:69:5a:c4:67:f2:78:b6: 99:07:98:96:ad:be:53:a4:91:be:61:b6:d4:c1:87: 9e:a5:a0:8f:ba:e6:f9:3e:62:79:11:bd:2d:b1:c4: 5f:e3:90:7d:7a:35:65:32:a8:c1:12:57:b3:05:ed: 22:cd:92:08:8a:2e:1a:a4:43:fc:43:15:c0:51:47: 6d:cf:58:1f:b2:b1:26:69:f7:dd:6e:58:03:26:8e: 93:e7:9c:f3:a6:91:72:c1:ef:c9:24:3b:36:d0:ac: fb:24:ba:f5:79:87:0b:85:d8:26:07:9f:b2:69:bd: 10:90:c3:1c:b3:2d:4d:7a:d6:e2:bf:6b:b3:0f:30: fa:27:66:1e:fb:02:63:33:f5:dd:ba:e5:86:e9:58: f8:34:2c:51:7e:ca:52:39:f9:f9:73:95:84:2f:7b: 94:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:D0:90:B4:AE:A9:BA:34:D4:5E:75:B6:CB:78:49:11:AD:A3:96 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B3DA6A4CBDDE11EA9977C550C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 158.144.42.0-158.144.44.255 158.144.183.0/24 158.144.185.0/24 Signature Algorithm: sha256WithRSAEncryption 07:3c:2e:f3:4e:c2:ac:9e:b6:df:a5:d1:d0:e7:05:36:ba:f8: 5a:d1:ca:e7:f9:3b:fb:59:af:c0:93:81:66:60:9d:8f:1c:ed: 94:4c:1b:22:85:4d:29:7a:8b:32:95:b7:f3:64:b3:44:d2:fe: b5:d7:ba:cb:65:4a:09:68:0e:38:4e:5b:85:aa:06:80:5e:ac: 19:3a:03:08:18:41:5d:9f:6c:e8:2d:8b:fc:2f:8b:5e:7c:ea: 3a:ac:52:46:ca:8d:c1:b9:ca:e6:d1:9a:a7:3b:9a:bb:7b:79: af:e2:2c:a6:04:4a:61:5a:b0:7a:24:96:bf:27:7d:50:80:49: 4f:c2:f1:ae:41:5d:94:97:a4:22:d6:04:17:45:b2:37:df:b6: 95:f0:8f:b0:b7:11:8f:5b:98:6d:9f:38:3b:8c:32:b5:74:7f: 99:f2:33:78:5c:e6:f6:bc:13:77:c1:a2:0d:13:c6:b4:61:23: 6b:39:c4:08:09:d2:c3:57:d1:f9:87:64:a1:0b:f5:1e:56:02: 53:7c:2f:18:ee:4b:c9:e5:c4:21:f4:08:db:c6:b3:8a:a2:51: b7:26:df:7c:78:1f:b2:84:61:28:bb:12:cd:25:fd:52:0f:ff: 16:89:4d:cc:70:b1:91:08:aa:30:b0:f4:82:ab:79:29:dd:48: 80:bb:4b:47 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICHjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDQwMC05Yzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2trL+OPMUZUU9v9/vIZYmNIXCo8DkyazhkY3gICNsBhMRQkamWmMvY3fwMrV qtaaj12IFLy2G358eQNFygksTuJ2riK5oRb8KppMt8dhgXiXkJeS3vsh+6RzDoE2 339U3WlaxGfyeLaZB5iWrb5TpJG+YbbUwYeepaCPuub5PmJ5Eb0tscRf45B9ejVl MqjBElezBe0izZIIii4apEP8QxXAUUdtz1gfsrEmaffdblgDJo6T55zzppFywe/J JDs20Kz7JLr1eYcLhdgmB5+yab0QkMMcsy1Netbiv2uzDzD6J2Ye+wJjM/XduuWG 6Vj4NCxRfspSOfn5c5WEL3uUOwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFL0v0JC0 rqm6NNRedbbLeEkRraOWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjNEQTZBNENC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAZ6QKgMEAJ6QLAMEAJ6QtwMEAJ6QuTANBgkqhkiG9w0B AQsFAAOCAQEABzwu807CrJ6236XR0OcFNrr4WtHK5/k7+1mvwJOBZmCdjxztlEwb IoVNKXqLMpW382SzRNL+tde6y2VKCWgOOE5bhaoGgF6sGToDCBhBXZ9s6C2L/C+L XnzqOqxSRsqNwbnK5tGapzuau3t5r+IspgRKYVqweiSWvyd9UIBJT8LxrkFdlJek ItYEF0WyN9+2lfCPsLcRj1uYbZ84O4wytXR/mfIzeFzm9rwTd8GiDRPGtGEjaznE CAnSw1fR+YdkoQv1HlYCU3wvGO5LyeXEIfQI28aziqJRtybffHgfsoRhKLsSzSX9 Ug//FolNzHCxkQiqMLD0gqt5Kd1IgLtLRw== -----END CERTIFICATE-----Generated at Thu May 15 15:58:33 2025 by rpki-client