$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa File: D17C6B0E070311EBB4EE7D80C4F9AE02.roa (raw, json) Hash identifier: 4sgZMxL7XOZKDd7tWF4LIQxjl6eISIPB4p94BNnMAqo= Subject key identifier: 4A:81:F7:64:FA:B9:84:51:A4:31:E6:3A:FF:AE:35:B4:3A:FE:21:15 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E2A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa Signing time: Thu 08 May 2025 15:55:34 +0000 ROA not before: Thu 08 May 2025 15:55:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17439 IP address blocks: 142.79.224.0/19 maxlen: 24 157.10.41.0/24 maxlen: 24 159.117.144.0/20 maxlen: 24 168.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7722 (0x1e2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3f5-bb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1c:bd:37:18:b7:fe:a4:7f:03:77:aa:81:ca: 6b:65:9c:21:85:61:7c:07:0d:53:0b:fe:b2:92:66: 1e:76:6d:a0:97:76:8a:80:b7:92:e6:9e:43:49:08: 09:2e:75:05:f3:7c:84:f8:ba:6e:d7:c1:cc:4e:6e: 2e:fe:a8:91:70:d8:86:21:97:46:11:bb:ae:79:f9: 41:c2:9f:e5:e0:23:de:11:ab:0d:3b:43:17:40:5b: 87:a7:8c:f6:53:c6:bc:b3:38:f1:b1:a9:d3:73:bb: b1:16:60:29:e7:f6:fb:ed:a2:13:3c:c2:04:7f:25: 06:41:a8:16:55:a3:2b:ce:92:fe:d9:84:d0:1b:d4: 83:41:59:eb:c6:14:35:9b:ab:a1:86:0a:fd:e9:dc: 93:45:24:76:7b:e0:33:9f:f7:4e:0f:89:56:19:9b: a9:b6:25:76:b0:4f:4f:8d:cd:76:97:d8:3b:88:a3: ff:f0:e1:d5:dc:c6:89:6c:57:ce:95:7a:1e:49:a4: 70:86:92:41:e7:a6:92:4d:f5:82:dc:d8:eb:98:a1: ba:b5:c4:ca:f6:1c:b7:ba:df:8b:79:d1:b7:01:97: d6:4f:38:28:fd:7d:ca:18:2c:67:8c:c3:58:ac:00: c4:dd:81:28:23:af:88:da:84:c9:fa:40:c8:03:75: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:F7:64:FA:B9:84:51:A4:31:E6:3A:FF:AE:35:B4:3A:FE:21:15 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 142.79.224.0/19 157.10.41.0/24 159.117.144.0/20 168.220.224.0/19 Signature Algorithm: sha256WithRSAEncryption a5:27:33:09:45:43:64:25:79:07:05:ee:69:e7:63:f3:23:aa: 38:3f:a7:14:be:9e:2b:84:31:5b:90:3f:d8:d2:3a:7a:5a:0c: 6d:aa:7c:db:73:5f:11:8d:e3:fc:a1:7b:4e:1f:43:f3:6b:1d: 32:f1:f3:00:be:2c:ce:43:e9:f1:d1:35:08:8d:aa:96:c4:c4: 08:0f:8d:c8:e9:9c:75:d4:0f:91:93:99:63:f7:37:8c:c2:62: 2b:05:d3:88:b8:98:f2:d3:08:9e:df:49:ff:60:d5:75:04:c4: cb:a6:a2:9e:c5:67:cc:1b:ea:fc:23:9d:7a:f3:1d:fe:79:b0: 98:3f:57:a0:ce:a9:d5:5e:92:08:40:8c:ed:c9:ab:28:99:0d: 54:be:af:48:45:b9:b2:d0:5e:a6:d1:d3:ee:4b:14:04:52:f4: b3:12:16:bf:c3:d3:f8:39:da:d6:56:f4:b4:80:6f:30:32:1d: 91:a2:8a:c4:39:46:78:64:a2:60:6d:c0:7e:f2:63:3e:1d:dd: 09:0b:01:88:b0:08:b0:66:76:c0:08:59:7e:53:0e:8f:be:03: 5d:07:b9:17:e0:d6:3d:6b:42:62:de:54:cb:76:86:51:3e:96: a6:95:98:ff:43:aa:a3:73:ef:bd:97:3f:be:d3:10:6f:b5:14: ff:26:53:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNmNS1iYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Ry9Nxi3/qR/A3eqgcprZZwhhWF8Bw1TC/6ykmYedm2gl3aKgLeS5p5DSQgJ LnUF83yE+Lpu18HMTm4u/qiRcNiGIZdGEbuueflBwp/l4CPeEasNO0MXQFuHp4z2 U8a8szjxsanTc7uxFmAp5/b77aITPMIEfyUGQagWVaMrzpL+2YTQG9SDQVnrxhQ1 m6uhhgr96dyTRSR2e+Azn/dOD4lWGZuptiV2sE9Pjc12l9g7iKP/8OHV3MaJbFfO lXoeSaRwhpJB56aSTfWC3NjrmKG6tcTK9hy3ut+LedG3AZfWTzgo/X3KGCxnjMNY rADE3YEoI6+I2oTJ+kDIA3U6rQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEqB92T6 uYRRpDHmOv+uNbQ6/iEVMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDE3QzZCMEUw NzAzMTFFQkI0RUU3RDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAWOT+ADBACdCikDBASfdZADBAWo3OAwDQYJKoZIhvcNAQEL BQADggEBAKUnMwlFQ2QleQcF7mnnY/Mjqjg/pxS+niuEMVuQP9jSOnpaDG2qfNtz XxGN4/yhe04fQ/NrHTLx8wC+LM5D6fHRNQiNqpbExAgPjcjpnHXUD5GTmWP3N4zC YisF04i4mPLTCJ7fSf9g1XUExMumop7FZ8wb6vwjnXrzHf55sJg/V6DOqdVekghA jO3JqyiZDVS+r0hFubLQXqbR0+5LFARS9LMSFr/D0/g52tZW9LSAbzAyHZGiisQ5 RnhkomBtwH7yYz4d3QkLAYiwCLBmdsAIWX5TDo++A10HuRfg1j1rQmLeVMt2hlE+ lqaVmP9DqqNz772XP77TEG+1FP8mUy4= -----END CERTIFICATE-----Generated at Mon May 12 12:43:22 2025 by rpki-client