$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa File: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (raw, json) Hash identifier: 78U/w57PvT+FVEdRzkbgRL49bNVYISozUZOyQlDFcE4= Subject key identifier: 75:F0:6E:48:19:FF:03:57:C3:14:17:86:FA:CB:A2:8B:20:F8:07:B2 Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: D7 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa Signing time: Tue 25 Mar 2025 05:11:37 +0000 ROA not before: Tue 25 Mar 2025 05:11:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136784 IP address blocks: 157.15.242.0/23 maxlen: 23 157.15.242.0/24 maxlen: 24 157.15.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Mar 25 05:11:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e23b09-821e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:39:43:fd:7b:05:ee:c6:fb:e7:50:5e:54: 6f:99:bb:24:03:ee:d1:4f:9c:6a:19:01:b2:e9:ec: ad:8d:d8:70:63:26:2e:00:32:9b:8b:83:18:55:33: 91:d6:81:c4:45:19:80:4c:a2:b9:ec:f4:80:dc:74: 44:88:cb:b3:5e:3b:f3:8f:3c:f8:00:c9:6f:af:8b: be:f8:0a:99:49:cb:30:3d:b9:20:7b:a4:41:8b:bf: 5d:c8:3e:1e:9e:dc:0c:d1:e4:e6:86:92:e6:8c:25: f5:a3:1c:7e:12:bd:c3:41:3c:5f:83:96:b1:37:e8: 65:76:e7:4f:97:43:f8:63:9d:29:a3:f6:1f:57:f4: 1f:4c:c8:4d:52:82:5e:cd:5a:40:d8:ce:e0:c8:8d: 04:e9:48:fe:02:6c:9a:cd:45:61:f9:95:89:3e:a8: 29:79:87:f8:73:52:8d:0a:69:4e:11:e5:ea:d3:97: 44:d6:c3:1f:94:7a:1d:ca:69:83:b1:07:4f:1a:e5: b0:32:1c:5d:b5:03:32:f7:59:e0:98:0d:ae:9e:4c: 42:ad:d3:f5:8c:ac:e9:2d:9b:c7:c6:c5:4b:1b:e9: ca:45:95:0a:90:c3:a3:75:92:6f:13:d7:e8:da:18: 8b:52:29:15:27:d2:2f:89:4e:9a:84:f3:32:2c:26: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F0:6E:48:19:FF:03:57:C3:14:17:86:FA:CB:A2:8B:20:F8:07:B2 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.242.0/23 Signature Algorithm: sha256WithRSAEncryption b8:a5:37:b2:3a:9f:8f:f4:af:bc:40:41:2a:78:99:fb:8d:42: dd:07:48:16:1f:65:1f:e6:a7:8e:50:9a:7c:25:ad:10:2d:0f: aa:18:37:80:b7:7d:cf:13:50:01:d9:2a:99:d0:1e:27:cd:35: 32:80:1e:8d:dc:13:e8:6e:37:97:a1:f5:7d:08:c9:4f:94:21: 33:5a:4e:f8:14:a3:53:42:8c:d4:40:43:aa:05:d5:d4:7d:fc: e4:b8:78:73:7e:08:f9:d9:13:71:30:f0:5f:3c:8c:12:12:b3: d7:23:b0:bc:d7:2a:04:2b:a8:58:f7:54:e3:6c:a5:02:31:f2: 41:56:8e:1e:0d:d1:eb:d9:fe:58:65:45:38:b8:a3:ba:fe:b1: 6b:a1:8a:33:7d:57:ea:d7:8a:fb:89:35:7a:f4:2c:24:5b:f1: 8b:7c:ba:3b:f9:fd:9a:e1:d7:3b:25:8e:5b:eb:59:03:da:58: 97:36:35:ef:e0:c6:1a:27:4e:5b:3a:dc:79:03:08:41:5b:8e: 4a:8b:8c:4b:57:c8:7a:e7:a6:2a:af:82:57:42:57:cd:89:a6: 1c:9e:15:ca:ca:ae:c9:a3:a0:ca:5c:2e:55:bd:84:55:ec:51: d7:3c:0b:30:e3:8e:1d:7e:a0:dd:2d:77:13:36:a4:ad:0e:da: 03:33:8f:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjUwMzI1MDUxMTM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UyM2IwOS04MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh05Q/17Be7G++dQXlRvmbskA+7RT5xqGQGy6eytjdhwYyYuADKbi4MYVTOR 1oHERRmATKK57PSA3HREiMuzXjvzjzz4AMlvr4u++AqZScswPbkge6RBi79dyD4e ntwM0eTmhpLmjCX1oxx+Er3DQTxfg5axN+hldudPl0P4Y50po/YfV/QfTMhNUoJe zVpA2M7gyI0E6Uj+AmyazUVh+ZWJPqgpeYf4c1KNCmlOEeXq05dE1sMflHodymmD sQdPGuWwMhxdtQMy91ngmA2unkxCrdP1jKzpLZvHxsVLG+nKRZUKkMOjdZJvE9fo 2hiLUikVJ9IviU6ahPMyLCahcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHXwbkgZ /wNXwxQXhvrLoosg+AeyMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFBMzAvNEI3QTE4NkFDQUYyMTFFRUFDREIyRTFFQzRGOUFFMDIvQzNDQ0FERDJD QUYyMTFFRUJBNThFODFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdD/IwDQYJKoZIhvcNAQELBQADggEBALilN7I6n4/0r7xA QSp4mfuNQt0HSBYfZR/mp45QmnwlrRAtD6oYN4C3fc8TUAHZKpnQHifNNTKAHo3c E+huN5eh9X0IyU+UITNaTvgUo1NCjNRAQ6oF1dR9/OS4eHN+CPnZE3Ew8F88jBIS s9cjsLzXKgQrqFj3VONspQIx8kFWjh4N0evZ/lhlRTi4o7r+sWuhijN9V+rXivuJ NXr0LCRb8Yt8ujv5/Zrh1zsljlvrWQPaWJc2Ne/gxhonTls63HkDCEFbjkqLjEtX yHrnpiqvgldCV82JphyeFcrKrsmjoMpcLlW9hFXsUdc8CzDjjh1+oN0tdxM2pK0O 2gMzj+0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:58 2025 by rpki-client