$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa File: C3F70542169111EF9B147C3AC4F9AE02.roa (raw, json) Hash identifier: GFFCSEzZhqu78VO7iMNzX+cpsiruPidc616QpwvFXAg= Subject key identifier: 7F:CD:79:F6:3F:09:81:DB:08:30:81:D6:7B:C7:6B:9A:4D:B3:AD:5F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DF1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa Signing time: Thu 08 May 2025 15:54:42 +0000 ROA not before: Thu 08 May 2025 15:54:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152571 IP address blocks: 157.66.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7665 (0x1df1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3c2-d7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:7d:0e:e0:81:ba:3e:40:64:ec:0b:1a:57: 2d:6a:77:ea:76:d0:7c:ec:5f:39:12:c3:3f:67:35: f9:1b:f4:52:26:b8:2f:d9:da:db:68:24:a4:c8:93: 7d:f8:88:ee:c6:43:bb:3d:20:3b:76:43:56:8e:00: b9:4f:d2:a7:bb:b8:da:ba:59:71:24:71:8c:a7:63: 8b:1a:ac:e0:77:4d:6c:33:1a:35:5d:36:cf:ea:84: 92:73:4a:1c:06:f9:bc:6c:e4:7b:52:21:ba:9f:9a: 4a:8c:3e:1c:fa:4e:9a:3c:7e:f7:69:06:ad:e9:47: 9e:17:75:9a:dc:fc:62:6c:f2:11:76:d7:6c:d9:eb: d7:a0:09:ff:14:71:e7:4b:e3:01:b7:ff:4f:39:2c: cf:63:45:91:4d:a2:b0:5c:65:7a:8f:06:32:06:ad: cf:4d:ba:7f:ba:9a:b0:e5:d3:8b:84:8a:aa:f8:20: f9:dd:03:bd:d4:ab:dd:06:15:e3:34:25:fe:f5:e1: 21:f1:9d:0c:80:07:ef:c8:50:68:ef:24:11:11:48: c2:b0:05:ef:e5:78:ac:57:a3:f9:17:86:fd:64:7d: 7b:c6:da:92:40:e1:36:40:62:b9:18:00:c1:f0:69: 97:4e:79:81:54:4a:d7:fe:4f:04:93:90:90:64:9f: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CD:79:F6:3F:09:81:DB:08:30:81:D6:7B:C7:6B:9A:4D:B3:AD:5F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3F70542169111EF9B147C3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.150.0/23 Signature Algorithm: sha256WithRSAEncryption c3:99:51:68:7f:be:02:fb:81:6b:1f:58:ac:bd:b7:74:d4:b8: a3:e8:d7:64:8c:f5:e5:fa:90:41:81:8a:df:db:b8:19:2d:89: a2:85:a5:51:89:2f:ae:39:72:e7:19:11:45:c8:9c:79:7b:2e: e0:93:f1:03:74:e8:a2:a8:73:84:4d:23:bf:09:b2:b9:90:8a: 8a:a8:c1:fd:7f:e7:a4:00:72:5e:00:16:77:6e:2b:b6:86:83: 82:b9:b7:16:99:e3:0b:1a:1e:38:0a:3a:1b:fe:69:10:af:53: 71:49:89:03:23:dd:88:93:b8:dd:4a:fa:31:d8:8f:2f:c9:fd: 60:e1:53:ef:6f:39:c6:c9:1b:1d:7d:fa:18:0e:32:fd:60:4b: 4c:18:73:62:cd:aa:b4:c3:fa:73:2d:c6:af:59:4a:ce:d3:4c: b5:61:8f:cc:d8:27:29:36:5c:d9:b5:e4:9d:47:26:08:df:dd: 51:3d:30:37:8c:f6:9a:38:ad:85:44:a9:14:9a:34:b6:c3:ce: af:3e:e7:20:2a:23:d3:c4:f1:e3:72:50:9b:0c:b1:87:1f:e0: d5:3b:af:9d:34:89:5a:27:98:82:f4:f0:77:4f:99:20:a6:28: a9:6a:fa:f3:fc:96:69:f2:4e:1f:ee:2a:a9:69:29:14:7d:0f: 17:63:f3:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNjMi1kN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDh9DuCBuj5AZOwLGlctanfqdtB87F85EsM/ZzX5G/RSJrgv2drbaCSkyJN9 +IjuxkO7PSA7dkNWjgC5T9Knu7jaullxJHGMp2OLGqzgd01sMxo1XTbP6oSSc0oc Bvm8bOR7UiG6n5pKjD4c+k6aPH73aQat6UeeF3Wa3PxibPIRdtds2evXoAn/FHHn S+MBt/9POSzPY0WRTaKwXGV6jwYyBq3PTbp/upqw5dOLhIqq+CD53QO91KvdBhXj NCX+9eEh8Z0MgAfvyFBo7yQREUjCsAXv5XisV6P5F4b9ZH17xtqSQOE2QGK5GADB 8GmXTnmBVErX/k8Ek5CQZJ/ZNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFH/NefY/ CYHbCDCB1nvHa5pNs61fMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzNGNzA1NDIx NjkxMTFFRjlCMTQ3QzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQpYwDQYJKoZIhvcNAQELBQADggEBAMOZUWh/vgL7gWsf WKy9t3TUuKPo12SM9eX6kEGBit/buBktiaKFpVGJL645cucZEUXInHl7LuCT8QN0 6KKoc4RNI78JsrmQioqowf1/56QAcl4AFnduK7aGg4K5txaZ4wsaHjgKOhv+aRCv U3FJiQMj3YiTuN1K+jHYjy/J/WDhU+9vOcbJGx19+hgOMv1gS0wYc2LNqrTD+nMt xq9ZSs7TTLVhj8zYJyk2XNm15J1HJgjf3VE9MDeM9po4rYVEqRSaNLbDzq8+5yAq I9PE8eNyUJsMsYcf4NU7r500iVonmIL08HdPmSCmKKlq+vP8lmnyTh/uKqlpKRR9 Dxdj894= -----END CERTIFICATE-----Generated at Sun May 11 22:34:08 2025 by rpki-client