$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa File: FFB4C24ADC4411EE9199B15EC4F9AE02.roa (raw, json) Hash identifier: lMluHRBUSSQ85OfMibwJC/d2gL4B/ReDoJ8n154IxQY= Subject key identifier: A5:2F:FF:89:A5:DC:A0:27:A2:C6:08:F1:C8:EF:CE:8A:12:BE:9A:45 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DBA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:53 +0000 ROA not before: Thu 08 May 2025 15:53:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152485 IP address blocks: 157.20.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7610 (0x1dba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd391-ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:42:41:aa:d9:2c:73:e3:00:54:1f:c1:a0:ff: 67:99:e1:6a:e7:31:0d:5b:b4:51:b7:f6:65:f6:aa: ca:dc:a9:b8:e7:4a:3f:bc:5e:46:0f:4b:23:c9:50: bd:d5:5c:18:cb:bc:5d:b6:e6:6f:ca:c7:33:a0:fe: d1:e6:f3:4d:ba:27:99:49:09:1c:14:ab:60:8c:9a: 93:ca:6e:2c:a9:af:6b:51:3d:dc:37:a9:69:30:81: 17:2f:df:f7:4a:b2:63:60:de:83:37:c7:9c:3e:44: af:de:3a:1b:2e:ff:36:b4:c4:e9:9d:93:7e:53:cf: 2b:22:83:f8:18:07:f0:ad:48:53:ca:63:bf:fc:c3: 01:41:3b:9b:79:4e:02:b9:a6:1f:f8:3a:7e:88:4e: 63:54:6b:e2:5a:5d:94:1c:ca:19:43:8b:ac:3b:68: 92:d9:06:91:01:bf:d7:af:f1:5a:15:50:14:1a:31: 9d:dd:87:2c:88:a0:47:8c:e9:63:67:b1:dd:db:fc: 7a:a3:4f:09:55:32:43:ea:ac:a8:67:80:c7:a6:db: 04:3f:86:c8:6f:9a:46:2f:19:f8:97:f2:0e:0d:40: f3:fe:62:c8:6f:9d:82:cb:5e:f3:37:07:7c:ad:c3: 05:4a:e6:05:0b:3b:01:f2:1b:2f:b6:b0:b8:7a:14: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2F:FF:89:A5:DC:A0:27:A2:C6:08:F1:C8:EF:CE:8A:12:BE:9A:45 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFB4C24ADC4411EE9199B15EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.182.0/23 Signature Algorithm: sha256WithRSAEncryption 97:a2:3f:04:ce:60:99:82:35:d8:a1:3a:57:3a:e5:16:f2:e4: 3d:7d:da:85:9e:aa:54:fa:be:f8:05:a2:b4:e2:9b:54:3a:99: 6a:dc:4d:95:fa:ac:6f:ab:ec:7e:4a:5f:3a:28:68:52:c1:95: 92:80:d0:a1:e8:52:ee:8d:fc:31:20:9c:25:9a:44:78:63:2d: bc:89:60:80:4b:0f:dd:f9:d1:8c:22:93:b3:61:50:64:f7:0b: 36:21:87:b1:ed:f9:8c:ec:81:18:52:5b:fe:83:95:50:d6:03: c9:69:6b:53:4a:5d:46:bf:a0:10:61:e7:fe:66:82:fc:ac:07: 10:7c:3f:8e:9e:86:ca:6d:45:cb:ac:a5:2f:f1:2b:ae:ea:37: 11:87:3e:bf:29:d9:49:6b:bd:02:0e:2f:c0:f1:ee:bc:7c:5d: 9e:cc:a7:e4:b7:4f:68:f9:ab:29:17:f7:3c:0e:fe:84:b7:fb: 9e:ea:de:ff:95:a1:ee:65:75:e3:ff:33:16:c2:57:ca:f3:50: 48:aa:cd:c7:93:57:bc:69:d3:f6:0a:71:49:be:df:f6:d9:b6: d7:db:45:fb:6d:6f:2d:7a:59:ec:5c:9b:e5:bd:5c:a8:93:08: d1:45:b7:06:81:cc:df:fd:d2:e9:19:aa:30:ba:38:95:5b:26: a6:48:76:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzUzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM5MS1mZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEJBqtksc+MAVB/BoP9nmeFq5zENW7RRt/Zl9qrK3Km450o/vF5GD0sjyVC9 1VwYy7xdtuZvysczoP7R5vNNuieZSQkcFKtgjJqTym4sqa9rUT3cN6lpMIEXL9/3 SrJjYN6DN8ecPkSv3jobLv82tMTpnZN+U88rIoP4GAfwrUhTymO//MMBQTubeU4C uaYf+Dp+iE5jVGviWl2UHMoZQ4usO2iS2QaRAb/Xr/FaFVAUGjGd3YcsiKBHjOlj Z7Hd2/x6o08JVTJD6qyoZ4DHptsEP4bIb5pGLxn4l/IODUDz/mLIb52Cy17zNwd8 rcMFSuYFCzsB8hsvtrC4ehShawIDAQABo4IClTCCApEwHQYDVR0OBBYEFKUv/4ml 3KAnosYI8cjvzooSvppFMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkZCNEMyNEFE QzQ0MTFFRTkxOTlCMTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFLYwDQYJKoZIhvcNAQELBQADggEBAJeiPwTOYJmCNdih Olc65Rby5D192oWeqlT6vvgForTim1Q6mWrcTZX6rG+r7H5KXzooaFLBlZKA0KHo Uu6N/DEgnCWaRHhjLbyJYIBLD9350Ywik7NhUGT3CzYhh7Ht+YzsgRhSW/6DlVDW A8lpa1NKXUa/oBBh5/5mgvysBxB8P46ehsptRcuspS/xK67qNxGHPr8p2UlrvQIO L8Dx7rx8XZ7Mp+S3T2j5qykX9zwO/oS3+57q3v+Voe5ldeP/MxbCV8rzUEiqzceT V7xp0/YKcUm+3/bZttfbRfttby16Wexcm+W9XKiTCNFFtwaBzN/90ukZqjC6OJVb JqZIdgk= -----END CERTIFICATE-----Generated at Sun May 11 03:06:10 2025 by rpki-client