$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E76A785EB0E511EE89CA4229C4F9AE02.roa File: E76A785EB0E511EE89CA4229C4F9AE02.roa (raw, json) Hash identifier: Fnm9OjU2UOQFElmwuQK4W4KwO/b98vX/wNXQUhft90M= Subject key identifier: 90:D7:0A:EB:DF:C0:6F:9F:3C:0C:DF:85:41:E1:78:FF:A5:A0:C1:C6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA5 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E76A785EB0E511EE89CA4229C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:35 +0000 ROA not before: Thu 08 May 2025 15:53:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151706 IP address blocks: 157.10.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7589 (0x1da5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37e-e011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:8b:c1:fd:3a:af:f0:17:74:30:88:92:3f: 19:cb:33:6e:f9:7a:fe:93:d0:d3:89:f9:cb:c1:4d: e4:fe:9d:33:c4:7d:e4:07:cf:69:2b:95:8b:fb:eb: 07:92:d9:cb:a8:a9:72:78:4b:19:eb:58:66:ca:2a: 26:cc:c9:55:72:91:37:8f:bb:80:a9:2f:b1:ee:aa: 87:92:60:6a:84:41:74:40:80:c5:2e:6f:9c:07:b3: f5:1c:c5:1f:bd:e0:82:74:b5:31:e6:5d:ba:dc:08: b3:dc:10:34:1d:5f:6c:13:8b:53:88:03:b5:1f:ec: df:04:08:2d:94:a6:5e:aa:c8:ab:37:36:e5:d0:a8: 8a:c5:80:b7:2f:28:e0:4c:0d:87:10:c4:e2:4b:67: 44:0c:05:ac:1b:6c:d9:16:e1:c3:18:6c:c9:cd:13: 05:5c:da:f9:db:be:6e:4e:e6:2c:96:41:c1:5d:93: b4:56:46:2a:0a:5f:84:81:09:ff:e0:12:f3:d4:27: f5:f2:32:59:0c:a2:38:06:3d:35:2c:9e:b6:f3:5a: 99:27:eb:40:c4:cc:e1:98:cb:14:ba:bd:7f:47:57: 03:04:cc:b9:d5:45:d5:59:9e:3b:92:30:86:31:f2: 25:2f:dd:4a:5f:e2:da:1d:c1:8d:3f:8b:d2:cc:e9: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D7:0A:EB:DF:C0:6F:9F:3C:0C:DF:85:41:E1:78:FF:A5:A0:C1:C6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E76A785EB0E511EE89CA4229C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.168.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:e5:5f:81:5c:08:2f:f3:44:f6:25:6c:c9:59:78:28:46:f7: e1:f4:1a:46:60:08:dc:8e:b4:d4:64:8c:45:cd:28:ae:d0:bf: e1:8c:21:f2:2a:4a:5b:85:50:d7:8b:f5:f6:99:c6:47:4d:d0: aa:e5:1a:f2:d4:82:13:67:46:6c:e7:03:8a:de:b1:91:00:9d: cd:fd:2b:d6:7e:69:f9:99:8d:04:39:e2:14:44:ea:ba:8c:8a: 90:9f:1a:7a:ac:22:73:1b:32:58:ba:c8:7e:36:c4:27:a0:1b: c3:bc:a8:d5:4b:42:07:88:15:6c:44:20:5a:dd:65:c0:a9:30: 0f:1e:92:37:f5:0a:a6:e1:44:80:1d:fb:85:a9:8a:d8:a6:28: 7d:df:1f:31:39:87:fc:19:96:6b:52:00:22:cd:3c:a7:94:81: f7:95:f8:09:4e:19:37:59:6f:5f:fc:65:1c:c1:e3:f5:ab:87: e4:c6:2d:bc:15:08:54:20:f2:b5:42:48:f0:aa:df:44:8a:f3: 48:a2:c2:62:da:c3:10:bc:0c:15:09:e6:1e:0a:0a:e1:92:8f: 77:f0:2d:95:34:ed:2a:95:0f:a9:5d:fd:15:69:07:07:15:fa: d9:7c:23:30:64:29:35:a6:28:b5:38:ce:f6:b0:b1:51:71:35: 52:c6:d3:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3ZS1lMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr2Lwf06r/AXdDCIkj8ZyzNu+Xr+k9DTifnLwU3k/p0zxH3kB89pK5WL++sH ktnLqKlyeEsZ61hmyiomzMlVcpE3j7uAqS+x7qqHkmBqhEF0QIDFLm+cB7P1HMUf veCCdLUx5l263Aiz3BA0HV9sE4tTiAO1H+zfBAgtlKZeqsirNzbl0KiKxYC3Lyjg TA2HEMTiS2dEDAWsG2zZFuHDGGzJzRMFXNr5275uTuYslkHBXZO0VkYqCl+EgQn/ 4BLz1Cf18jJZDKI4Bj01LJ6281qZJ+tAxMzhmMsUur1/R1cDBMy51UXVWZ47kjCG MfIlL91KX+LaHcGNP4vSzOnj6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJDXCuvf wG+fPAzfhUHheP+loMHGMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTc2QTc4NUVC MEU1MTFFRTg5Q0E0MjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCqgwDQYJKoZIhvcNAQELBQADggEBAB/lX4FcCC/zRPYl bMlZeChG9+H0GkZgCNyOtNRkjEXNKK7Qv+GMIfIqSluFUNeL9faZxkdN0KrlGvLU ghNnRmznA4resZEAnc39K9Z+afmZjQQ54hRE6rqMipCfGnqsInMbMli6yH42xCeg G8O8qNVLQgeIFWxEIFrdZcCpMA8ekjf1CqbhRIAd+4WpitimKH3fHzE5h/wZlmtS ACLNPKeUgfeV+AlOGTdZb1/8ZRzB4/Wrh+TGLbwVCFQg8rVCSPCq30SK80iiwmLa wxC8DBUJ5h4KCuGSj3fwLZU07SqVD6ld/RVpBwcV+tl8IzBkKTWmKLU4zvawsVFx NVLG0+M= -----END CERTIFICATE-----Generated at Sun May 11 13:50:02 2025 by rpki-client