$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa File: FA1A080ECBE611EEA1664E7DC4F9AE02.roa (raw, json) Hash identifier: cwz9P+B19DodyZ1uqrJj7e3y0bxTDMSMS0hTm/ZZvI0= Subject key identifier: 7C:09:33:E8:9A:F9:EA:AF:28:67:8F:EB:26:DD:9A:96:4F:67:2A:39 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D9F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:30 +0000 ROA not before: Thu 08 May 2025 15:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151133 IP address blocks: 157.15.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7583 (0x1d9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37a-55f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:6f:a8:f9:39:1e:b6:8e:4f:4c:f3:07:b3: 9d:54:21:13:4f:d8:e1:18:45:89:27:68:2b:fd:43: b9:84:e8:c2:ff:16:b9:3b:8f:6e:0f:7e:75:8d:4b: f6:e8:8c:a1:c9:87:d5:47:ad:ee:68:aa:aa:85:70: 77:dd:43:d0:1a:99:df:86:b6:3f:65:dd:7e:16:59: 1c:f7:61:2c:29:c6:76:ea:c3:83:83:ae:0f:71:5b: 04:17:db:d5:57:0a:19:59:80:62:7d:d5:af:48:fa: 9d:94:b8:fa:af:fc:d2:66:a7:41:60:6b:ac:b8:ae: d4:72:67:01:f8:f4:31:c0:d6:72:ab:57:30:95:6b: 77:38:d2:f4:a4:be:de:fc:43:39:c7:d8:48:f6:0a: 25:c7:6c:f7:df:98:a4:f4:d5:c8:8f:cc:a5:11:d7: 0e:b9:6b:f0:62:12:10:19:cf:12:bd:79:de:55:44: 29:03:33:dd:f1:27:4f:e4:38:46:96:c9:fc:c7:bd: e1:38:f8:3c:ff:11:38:19:3d:d0:5c:c4:bd:d6:8e: 19:f1:30:cc:6d:24:a7:0c:da:38:23:c6:75:fa:bf: c0:87:fc:a2:82:5b:ec:3b:4f:61:77:30:86:df:ee: ba:4e:3d:58:3f:f3:ed:78:86:d8:2a:81:6a:56:6f: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:33:E8:9A:F9:EA:AF:28:67:8F:EB:26:DD:9A:96:4F:67:2A:39 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FA1A080ECBE611EEA1664E7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.176.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d1:25:cd:49:96:06:f3:61:94:9b:11:d3:ee:68:c7:a3:98: e0:84:35:59:b8:60:15:db:94:56:e3:9e:76:b9:82:49:da:fb: 25:1c:14:21:b8:14:ec:99:1d:18:8a:28:e4:57:9e:2d:50:ed: 84:ed:06:bb:2f:9c:ba:8d:32:93:36:ce:cd:eb:72:69:14:69: d8:46:b7:84:d1:75:93:94:71:a2:f6:cc:f6:f1:13:3b:15:40: 1e:d8:9e:0f:b5:28:6e:95:99:38:d1:43:23:9f:85:c6:8b:51: bc:c8:bc:75:31:9e:4a:7b:67:56:43:d8:a6:2f:b5:aa:f6:2f: bf:5e:ac:77:93:5c:83:31:66:61:8a:73:5f:f7:e7:0e:ff:83: 74:f6:45:3e:19:f2:18:84:85:b5:ec:51:00:3a:13:0f:dd:57: 6a:b8:44:75:1f:50:00:36:eb:f2:0b:c0:47:69:01:ea:af:63: 1c:22:76:13:43:4e:a2:0f:c0:a8:b3:ca:bd:03:07:b9:89:a1: 70:15:8a:e2:de:8b:ab:82:dc:f6:46:e4:c1:72:29:4d:ec:78: fb:91:02:0d:be:d4:b9:56:1a:bb:3f:e5:50:46:f4:c6:93:4c: be:5b:76:0f:65:e2:f4:79:ef:c1:a7:0e:62:3f:5d:7d:2f:c7: 82:20:1c:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3YS01NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxydvqPk5HraOT0zzB7OdVCETT9jhGEWJJ2gr/UO5hOjC/xa5O49uD351jUv2 6IyhyYfVR63uaKqqhXB33UPQGpnfhrY/Zd1+Flkc92EsKcZ26sODg64PcVsEF9vV VwoZWYBifdWvSPqdlLj6r/zSZqdBYGusuK7UcmcB+PQxwNZyq1cwlWt3ONL0pL7e /EM5x9hI9golx2z335ik9NXIj8ylEdcOuWvwYhIQGc8SvXneVUQpAzPd8SdP5DhG lsn8x73hOPg8/xE4GT3QXMS91o4Z8TDMbSSnDNo4I8Z1+r/Ah/yiglvsO09hdzCG 3+66Tj1YP/PteIbYKoFqVm8FMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHwJM+ia +eqvKGeP6ybdmpZPZyo5MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkExQTA4MEVD QkU2MTFFRUExNjY0RTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdD7AwDQYJKoZIhvcNAQELBQADggEBAKXRJc1JlgbzYZSb EdPuaMejmOCENVm4YBXblFbjnna5gkna+yUcFCG4FOyZHRiKKORXni1Q7YTtBrsv nLqNMpM2zs3rcmkUadhGt4TRdZOUcaL2zPbxEzsVQB7Yng+1KG6VmTjRQyOfhcaL UbzIvHUxnkp7Z1ZD2KYvtar2L79erHeTXIMxZmGKc1/35w7/g3T2RT4Z8hiEhbXs UQA6Ew/dV2q4RHUfUAA26/ILwEdpAeqvYxwidhNDTqIPwKizyr0DB7mJoXAViuLe i6uC3PZG5MFyKU3sePuRAg2+1LlWGrs/5VBG9MaTTL5bdg9l4vR578GnDmI/XX0v x4IgHAk= -----END CERTIFICATE-----Generated at Sat May 10 21:29:54 2025 by rpki-client