$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa File: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (raw, json) Hash identifier: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0= Subject key identifier: CB:58:DF:D1:1A:92:7D:4D:A3:A2:33:1E:F9:CA:C5:F6:D9:F2:0D:8F Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Certificate serial: 0107 Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa Signing time: Mon 02 Jun 2025 17:05:26 +0000 ROA not before: Mon 02 Jun 2025 17:05:26 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152296 IP address blocks: 157.10.30.0/24 maxlen: 24 157.10.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC Validity Not Before: Jun 2 17:05:26 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=683dd9d6-6703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:9f:00:65:3a:9f:b2:53:21:6f:f5:fa:9b: 1a:e3:7b:21:8c:25:26:fc:99:f4:fd:32:c3:aa:bb: 7b:d8:e7:ae:dc:71:bd:60:2e:08:65:8c:11:ad:56: b4:46:be:7a:d0:8a:37:55:04:be:de:a1:03:c2:5b: f6:39:0d:a3:22:71:fe:9a:a6:3b:54:9f:99:3b:d8: 46:07:42:71:f7:e6:57:54:ab:47:fb:4a:fa:5b:e9: 8d:9b:2b:d5:18:50:e3:ed:f5:36:48:db:93:44:00: 58:b9:01:08:fe:cb:02:4c:cc:0c:a5:e9:12:d3:18: 1b:54:5a:f1:d0:26:94:82:c7:98:f6:73:72:9d:89: da:60:b0:30:40:10:0b:c4:c1:0f:41:89:76:b7:05: 78:76:09:ca:49:dc:23:96:d5:f1:5b:cb:a4:8c:22: 12:f5:5d:eb:20:af:1a:31:25:b5:9d:68:b8:a2:d7: 94:17:ba:a4:4b:9f:cc:a5:cc:4c:b2:e3:09:fc:ba: 3c:84:32:56:fa:5b:f5:06:8b:c7:ec:96:9f:5e:ad: b5:61:9b:56:46:0b:76:d7:ff:61:70:51:e7:39:21: de:5e:37:4c:83:53:9f:ef:c7:15:20:de:d4:15:6e: 15:f1:43:93:a3:62:2d:0f:c2:e0:9e:5d:d5:2e:d5: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:58:DF:D1:1A:92:7D:4D:A3:A2:33:1E:F9:CA:C5:F6:D9:F2:0D:8F X509v3 Authority Key Identifier: keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.30.0/23 Signature Algorithm: sha256WithRSAEncryption 65:8b:f2:9d:70:e0:4e:5e:90:84:93:2c:76:40:28:df:61:45: cd:ed:b9:57:77:d1:25:8a:0f:87:08:bd:37:4c:ca:19:29:d5: 30:09:a3:92:5a:f5:64:82:41:fa:fe:35:bd:b6:a7:35:3d:24: 8e:e2:d5:71:c6:17:25:a7:84:65:08:5c:18:d0:0f:e1:9b:12: ab:7e:34:ce:98:91:bd:45:f1:69:d5:bf:5c:07:27:36:a8:49: 61:60:c3:3e:3d:81:b8:f4:1b:27:d1:5d:aa:cd:96:fe:81:04: bb:3f:fa:6a:9a:67:da:b8:3e:4c:72:eb:6b:cf:e1:af:35:69: da:b3:aa:49:01:3d:24:a3:2e:f1:1f:fc:b9:18:4d:8e:f6:dc: 6e:ab:1d:a6:2e:bd:b0:a0:35:f6:18:a2:a2:bb:a9:5f:31:14: 71:ff:c5:f7:64:99:b5:33:5f:9f:7b:6c:c0:b8:cb:d7:cd:65: 8b:3f:a4:77:8e:fb:a1:32:ed:ac:23:a9:3f:13:cb:bb:6b:cb: ab:89:39:37:53:a6:97:77:f9:50:98:23:92:c9:8f:c7:b5:84: 07:6f:c4:b9:2b:4b:d6:00:f2:2d:82:20:2f:df:ae:a9:6f:6f: 6c:5a:b8:63:01:29:d1:f9:e8:c3:e0:a6:c1:c5:2c:3b:25:b4: 99:e4:8e:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1 QjFEMUI3Q0MwHhcNMjUwNjAyMTcwNTI2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkZDlkNi02NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGKfAGU6n7JTIW/1+psa43shjCUm/Jn0/TLDqrt72Oeu3HG9YC4IZYwRrVa0 Rr560Io3VQS+3qEDwlv2OQ2jInH+mqY7VJ+ZO9hGB0Jx9+ZXVKtH+0r6W+mNmyvV GFDj7fU2SNuTRABYuQEI/ssCTMwMpekS0xgbVFrx0CaUgseY9nNynYnaYLAwQBAL xMEPQYl2twV4dgnKSdwjltXxW8ukjCIS9V3rIK8aMSW1nWi4oteUF7qkS5/MpcxM suMJ/Lo8hDJW+lv1BovH7JafXq21YZtWRgt21/9hcFHnOSHeXjdMg1Of78cVIN7U FW4V8UOTo2ItD8Lgnl3VLtXSkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMtY39Ea kn1No6IzHvnKxfbZ8g2PMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4MUIvQkM1Q0VBQjZDQThBMTFFRUIwNTZFNjFGQzRGOUFFMDIvOURENTZDMkEz RkQzMTFGMDhBNzZCNjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCh4wDQYJKoZIhvcNAQELBQADggEBAGWL8p1w4E5ekIST LHZAKN9hRc3tuVd30SWKD4cIvTdMyhkp1TAJo5Ja9WSCQfr+Nb22pzU9JI7i1XHG FyWnhGUIXBjQD+GbEqt+NM6Ykb1F8WnVv1wHJzaoSWFgwz49gbj0GyfRXarNlv6B BLs/+mqaZ9q4Pkxy62vP4a81adqzqkkBPSSjLvEf/LkYTY723G6rHaYuvbCgNfYY oqK7qV8xFHH/xfdkmbUzX597bMC4y9fNZYs/pHeO+6Ey7awjqT8Ty7try6uJOTdT ppd3+VCYI5LJj8e1hAdvxLkrS9YA8i2CIC/frqlvb2xauGMBKdH56MPgpsHFLDsl tJnkjgA= -----END CERTIFICATE-----Generated at Tue Jun 17 23:08:12 2025 by rpki-client