$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D70CD1CA968E11EFA6054F3DC4F9AE02.roa File: D70CD1CA968E11EFA6054F3DC4F9AE02.roa (raw, json) Hash identifier: z3sKoxCIkezfXFCK+0Yd1CGycNaNezw6mPR+cDn31tA= Subject key identifier: 25:A0:5C:1A:2E:1D:98:7C:52:2B:58:29:4E:54:A3:12:B2:1A:0F:8D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DC2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D70CD1CA968E11EFA6054F3DC4F9AE02.roa Signing time: Thu 08 May 2025 15:54:00 +0000 ROA not before: Thu 08 May 2025 15:54:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152497 IP address blocks: 157.66.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7618 (0x1dc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd397-d0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:cb:ff:69:f4:cd:56:22:d9:13:dc:42:94: f8:88:f6:42:65:b0:57:ca:ed:5e:16:3a:68:19:9c: 0f:42:cc:51:90:82:d6:69:c0:de:15:84:13:58:5e: 30:98:cc:d9:33:b1:ee:a4:e7:52:81:54:8a:5f:51: 45:11:3c:9c:9f:ec:1a:57:68:d9:af:15:56:54:25: b0:60:64:72:52:af:39:96:a2:67:9d:4f:34:37:8f: 42:45:84:19:75:71:92:e8:59:09:33:93:10:e6:b3: 24:94:6e:e8:79:cc:d6:91:6c:1e:e1:30:4d:78:aa: 33:df:00:93:4a:ec:fb:1f:0a:ea:f2:aa:17:cb:ff: 9e:42:a1:5a:e4:3d:16:a7:37:e3:2e:7d:75:e9:90: 1c:75:cb:3f:88:3f:62:5d:d9:5b:b1:12:51:7c:43: 24:a3:0f:e6:1e:d4:ea:d3:65:32:a0:52:02:98:5b: 2f:78:71:0b:72:fb:8d:66:66:b5:4b:f6:52:d5:28: 76:32:6c:09:02:ea:22:38:8d:23:f9:c7:c5:8f:66: 9d:c2:3b:ec:ba:aa:08:13:c9:b1:1e:f3:c4:b7:34: 81:c2:b9:7d:60:a4:71:19:c8:56:44:26:33:da:dd: 13:d6:29:c4:8e:64:59:6e:dd:9d:11:60:fc:a3:b1: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:5C:1A:2E:1D:98:7C:52:2B:58:29:4E:54:A3:12:B2:1A:0F:8D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D70CD1CA968E11EFA6054F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.106.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:3a:bf:22:90:b7:fb:b4:6a:71:89:fe:fb:3a:b4:8b:5c:db: 7c:f4:3f:44:62:3a:a1:74:d5:1e:39:1f:ec:06:1a:39:f2:cd: 2d:fd:8f:74:66:98:22:43:65:77:04:32:b4:cc:13:fa:e1:3d: e9:f1:56:3b:0d:8e:ab:a2:b9:8f:62:28:68:6d:bc:18:17:6b: c3:05:68:77:3c:df:7c:54:ce:9c:7b:9a:8e:35:49:1d:f9:2c: a6:da:31:08:37:a1:b9:4c:f2:10:84:e9:47:14:a1:60:b6:35: be:09:f3:f4:2d:bf:28:2e:6b:da:cd:af:ab:07:7e:f9:3b:e2: f9:a9:a1:47:fe:12:c0:f5:b2:1b:0c:28:5a:00:ae:d6:18:58: df:50:ed:3c:1f:75:93:32:20:81:65:4e:46:46:d9:0c:ec:fa: bb:72:d5:a5:ea:cb:45:f3:df:18:99:8c:f9:d2:8c:5a:88:22: 21:57:91:7b:01:82:43:0f:e6:ef:92:14:a9:c4:56:d2:14:98: 63:fe:de:60:54:9d:97:05:79:2f:27:5e:63:a6:49:65:12:58: 5e:80:c8:5b:be:80:6e:0c:23:ec:07:f6:fb:d5:78:56:1d:83: 00:24:21:e2:f4:6f:65:8c:8a:39:19:e0:d8:a5:0a:b1:7c:b7: 58:ea:e0:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM5Ny1kMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq/L/2n0zVYi2RPcQpT4iPZCZbBXyu1eFjpoGZwPQsxRkILWacDeFYQTWF4w mMzZM7HupOdSgVSKX1FFETycn+waV2jZrxVWVCWwYGRyUq85lqJnnU80N49CRYQZ dXGS6FkJM5MQ5rMklG7oeczWkWwe4TBNeKoz3wCTSuz7Hwrq8qoXy/+eQqFa5D0W pzfjLn116ZAcdcs/iD9iXdlbsRJRfEMkow/mHtTq02UyoFICmFsveHELcvuNZma1 S/ZS1Sh2MmwJAuoiOI0j+cfFj2adwjvsuqoIE8mxHvPEtzSBwrl9YKRxGchWRCYz 2t0T1inEjmRZbt2dEWD8o7H59wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCWgXBou HZh8UitYKU5UoxKyGg+NMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDcwQ0QxQ0E5 NjhFMTFFRkE2MDU0RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQmowDQYJKoZIhvcNAQELBQADggEBAF86vyKQt/u0anGJ /vs6tItc23z0P0RiOqF01R45H+wGGjnyzS39j3RmmCJDZXcEMrTME/rhPenxVjsN jquiuY9iKGhtvBgXa8MFaHc833xUzpx7mo41SR35LKbaMQg3oblM8hCE6UcUoWC2 Nb4J8/Qtvygua9rNr6sHfvk74vmpoUf+EsD1shsMKFoArtYYWN9Q7TwfdZMyIIFl TkZG2Qzs+rty1aXqy0Xz3xiZjPnSjFqIIiFXkXsBgkMP5u+SFKnEVtIUmGP+3mBU nZcFeS8nXmOmSWUSWF6AyFu+gG4MI+wH9vvVeFYdgwAkIeL0b2WMijkZ4NilCrF8 t1jq4Lo= -----END CERTIFICATE-----Generated at Sun May 11 16:53:48 2025 by rpki-client