$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa File: DA0B108CDD5E11EFA66C7457C4F9AE02.roa (raw, json) Hash identifier: w8CsWCnRD+dUhN05+DZsEB2I8c7nJF2no+GOCLn4qXQ= Subject key identifier: 12:3E:92:DB:EB:B0:25:50:45:3E:C4:14:7D:E7:CE:2B:39:F2:19:07 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DD1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:15 +0000 ROA not before: Thu 08 May 2025 15:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152517 IP address blocks: 157.20.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7633 (0x1dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3a7-ced9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:83:29:79:d4:d4:03:8d:d0:de:de:a2:11: 3a:73:2e:ac:9a:f6:c7:4d:2f:b6:3e:1f:73:94:ec: 22:70:9b:d2:01:af:cc:3d:a1:86:11:a7:f1:2c:a6: 28:5d:a2:21:6c:70:a7:13:42:bb:b9:79:bd:3c:b9: a8:b4:66:f6:11:b0:49:b5:3b:12:e1:53:ad:46:b2: 01:be:ba:11:cd:79:57:3a:b7:92:9d:6f:78:3c:53: 0a:4a:a4:76:c3:9e:a6:b4:d0:b8:59:39:2c:af:1f: cd:43:2a:bc:f2:e9:b9:dd:47:b3:69:49:7d:f9:d4: 97:34:a2:77:82:0f:ff:68:17:80:5c:b4:61:3b:92: 70:99:f1:8d:31:cc:8a:33:15:de:0f:23:4d:09:e4: 77:35:eb:4d:c0:4a:a6:99:a6:9f:4b:aa:6f:2b:f4: f6:14:15:df:39:ae:26:06:41:18:4d:92:08:ac:21: 7c:a6:15:c2:b2:88:28:f0:54:e8:3f:27:14:d3:15: ff:b5:f1:34:10:df:7f:33:48:ba:31:43:2a:dd:30: 49:b5:e2:e2:c4:11:98:50:47:cd:a6:17:86:c4:5c: 53:e8:06:aa:9d:2c:b8:87:81:d8:e3:62:7d:ba:41: ba:b0:5b:37:ba:bc:c8:53:08:54:3b:98:89:bb:d5: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:92:DB:EB:B0:25:50:45:3E:C4:14:7D:E7:CE:2B:39:F2:19:07 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.196.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:c4:ee:41:a0:1c:26:ea:9c:6a:76:5a:1f:f7:5d:d2:22:d3: eb:3d:9b:6e:79:fa:57:66:16:f5:74:15:82:90:d0:b7:92:ba: ba:3f:d8:1a:ab:74:9c:54:be:89:b0:42:2f:22:d3:0c:6f:36: 84:21:4a:8e:69:c2:99:a6:ef:7b:d6:25:4b:22:86:b2:d2:74: e7:94:50:b5:01:dc:2e:7c:6e:2a:03:76:db:82:d2:17:3e:fa: 58:6b:7a:9c:a0:04:8b:81:ea:cf:a9:49:38:a0:2e:97:8f:8e: 04:a6:ac:61:f2:02:bb:82:e2:43:6d:5f:3e:9b:db:ca:66:de: fb:9e:ed:cc:42:e7:04:55:dd:55:76:e5:e5:35:03:ed:19:0c: 69:bb:88:3a:85:5c:3f:56:17:10:93:98:51:b0:d8:24:c2:ed: 4b:57:fe:8d:02:7a:06:c2:e5:2d:cf:f1:f6:15:3a:85:5c:f7: 5d:fd:b5:20:be:b7:92:82:65:fe:84:b2:ea:18:a6:1a:94:40: b5:ed:71:86:11:78:f3:89:bd:be:35:d2:5d:13:1d:1c:d3:e0: ed:e4:01:87:74:77:e7:cd:4b:ce:4c:cf:be:d0:fa:61:2c:3c: b1:06:28:72:c7:f7:4a:6d:03:98:f5:f5:18:77:5a:56:19:dd: 2a:7f:57:b6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhNy1jZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOODKXnU1AON0N7eohE6cy6smvbHTS+2Ph9zlOwicJvSAa/MPaGGEafxLKYo XaIhbHCnE0K7uXm9PLmotGb2EbBJtTsS4VOtRrIBvroRzXlXOreSnW94PFMKSqR2 w56mtNC4WTksrx/NQyq88um53UezaUl9+dSXNKJ3gg//aBeAXLRhO5JwmfGNMcyK MxXeDyNNCeR3NetNwEqmmaafS6pvK/T2FBXfOa4mBkEYTZIIrCF8phXCsogo8FTo PycU0xX/tfE0EN9/M0i6MUMq3TBJteLixBGYUEfNpheGxFxT6AaqnSy4h4HY42J9 ukG6sFs3urzIUwhUO5iJu9VoUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBI+ktvr sCVQRT7EFH3nzis58hkHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREEwQjEwOENE RDVFMTFFRkE2NkM3NDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFMQwDQYJKoZIhvcNAQELBQADggEBAAvE7kGgHCbqnGp2 Wh/3XdIi0+s9m255+ldmFvV0FYKQ0LeSuro/2BqrdJxUvomwQi8i0wxvNoQhSo5p wpmm73vWJUsihrLSdOeUULUB3C58bioDdtuC0hc++lhrepygBIuB6s+pSTigLpeP jgSmrGHyAruC4kNtXz6b28pm3vue7cxC5wRV3VV25eU1A+0ZDGm7iDqFXD9WFxCT mFGw2CTC7UtX/o0CegbC5S3P8fYVOoVc9139tSC+t5KCZf6EsuoYphqUQLXtcYYR ePOJvb410l0THRzT4O3kAYd0d+fNS85Mz77Q+mEsPLEGKHLH90ptA5j19Rh3WlYZ 3Sp/V7Y= -----END CERTIFICATE-----Generated at Sun May 11 00:17:07 2025 by rpki-client