$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/658B1AC8AE4711EE8C130419C4F9AE02.roa File: 658B1AC8AE4711EE8C130419C4F9AE02.roa (raw, json) Hash identifier: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw= Subject key identifier: 0D:40:DB:85:B6:DC:CF:59:4D:86:35:29:EA:D0:41:C9:B7:D3:E6:7D Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Certificate serial: CF Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/658B1AC8AE4711EE8C130419C4F9AE02.roa Signing time: Thu 13 Feb 2025 06:38:18 +0000 ROA not before: Thu 13 Feb 2025 06:38:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 152305 IP address blocks: 157.10.82.0/23 maxlen: 23 157.10.82.0/24 maxlen: 24 157.10.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A Validity Not Before: Feb 13 06:38:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ad935a-ba76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:7d:65:98:f0:d1:28:ae:07:f4:22:1c:5f: e0:cf:84:70:d7:34:d9:af:dc:02:b0:fc:0c:e8:27: e3:5a:b3:5e:bb:5a:2d:38:cb:c9:be:2f:88:ed:fe: 54:8a:48:6a:57:53:b3:7b:45:26:cf:a8:13:19:be: 30:5a:f6:0c:1a:5c:8e:04:d0:d1:29:9b:18:8f:f4: a6:3d:89:9f:3d:a2:03:f3:3e:f9:08:7d:6c:f9:65: 93:1b:b3:61:8d:4e:5e:2e:e1:a2:ba:95:38:34:9b: 04:c3:f4:de:db:d5:d9:cc:56:83:3d:a0:aa:4d:62: ca:cd:5d:a1:8b:0f:38:74:f4:43:f5:95:5e:ca:bd: bb:cb:4f:d1:a8:a1:90:ea:39:03:da:f4:9c:02:1b: cd:b7:e6:66:87:4c:80:d6:32:cf:f2:e4:21:89:f2: 79:90:17:a2:9a:fe:69:5a:ef:7f:e7:bb:b5:09:18: 5b:96:2a:8c:c4:6e:69:92:f0:bd:7e:5d:5d:de:67: 00:1d:2b:0c:f0:31:d0:20:1c:73:5c:c3:dc:f3:45: c4:49:b6:a0:c7:d1:19:07:ca:c9:ee:23:c2:58:bb: 2a:65:68:43:46:aa:ee:9a:7f:f4:94:a5:bc:12:cc: a9:8e:98:41:77:ee:72:78:a3:5b:a9:00:72:06:4f: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:40:DB:85:B6:DC:CF:59:4D:86:35:29:EA:D0:41:C9:B7:D3:E6:7D X509v3 Authority Key Identifier: keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/658B1AC8AE4711EE8C130419C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.82.0/23 Signature Algorithm: sha256WithRSAEncryption 29:8a:c3:52:99:0f:72:15:09:95:b9:47:be:fe:5d:fc:eb:86: 19:84:99:18:e2:e5:ae:24:8e:9f:2b:a7:b0:e8:f2:21:bb:31: 03:24:8e:d0:16:b8:cb:e7:a5:49:a7:ff:03:ba:d1:fe:9b:71: 29:2f:19:96:69:90:bc:2b:79:0d:c7:e5:ce:94:c0:d7:d0:66: 77:7e:b0:b2:2a:74:d9:53:77:cf:e9:cf:f4:92:8f:b5:3f:21: 67:b8:41:d6:cc:1a:b0:f3:64:48:34:d5:79:6e:b0:35:1a:a2: 33:ac:d9:b0:75:1c:43:22:6d:95:7f:cc:f5:74:0f:95:c7:e1: 92:e0:21:16:d6:95:26:08:db:15:29:5a:f8:1b:73:1f:70:49: 7f:1d:33:6d:1a:82:71:6e:9d:97:2a:20:10:4d:d3:3a:aa:cd: d3:71:f0:38:b3:8c:ac:8e:4b:d3:07:a2:40:4d:c9:93:75:35: 7d:76:66:64:1b:a4:a9:54:bd:21:6a:85:70:35:36:01:ef:d6: 46:1d:b1:7a:eb:4c:34:41:93:ae:90:84:30:95:20:9c:0e:c7: 3e:3d:c3:e6:cf:51:7e:9a:b3:74:bd:7f:bc:ec:8f:27:6c:25: 43:b2:5a:e1:c1:0b:17:44:3d:8b:eb:f0:8a:28:50:25:fc:9e: 0d:7c:cb:82 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx NTI4RUNFN0EwHhcNMjUwMjEzMDYzODE4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkOTM1YS1iYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwp9ZZjw0SiuB/QiHF/gz4Rw1zTZr9wCsPwM6CfjWrNeu1otOMvJvi+I7f5U ikhqV1Oze0Umz6gTGb4wWvYMGlyOBNDRKZsYj/SmPYmfPaID8z75CH1s+WWTG7Nh jU5eLuGiupU4NJsEw/Te29XZzFaDPaCqTWLKzV2hiw84dPRD9ZVeyr27y0/RqKGQ 6jkD2vScAhvNt+Zmh0yA1jLP8uQhifJ5kBeimv5pWu9/57u1CRhbliqMxG5pkvC9 fl1d3mcAHSsM8DHQIBxzXMPc80XESbagx9EZB8rJ7iPCWLsqZWhDRqrumn/0lKW8 EsypjphBd+5yeKNbqQByBk/74wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA1A24W2 3M9ZTYY1KerQQcm30+Z9MB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096 bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FGNkEvODM3Q0QzNDZBRTQyMTFFRUJGNjREQTY5QzRGOUFFMDIvNjU4QjFBQzhB RTQ3MTFFRThDMTMwNDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdClIwDQYJKoZIhvcNAQELBQADggEBACmKw1KZD3IVCZW5 R77+XfzrhhmEmRji5a4kjp8rp7Do8iG7MQMkjtAWuMvnpUmn/wO60f6bcSkvGZZp kLwreQ3H5c6UwNfQZnd+sLIqdNlTd8/pz/SSj7U/IWe4QdbMGrDzZEg01XlusDUa ojOs2bB1HEMibZV/zPV0D5XH4ZLgIRbWlSYI2xUpWvgbcx9wSX8dM20agnFunZcq IBBN0zqqzdNx8DizjKyOS9MHokBNyZN1NX12ZmQbpKlUvSFqhXA1NgHv1kYdsXrr TDRBk66QhDCVIJwOxz49w+bPUX6as3S9f7zsjydsJUOyWuHBCxdEPYvr8IooUCX8 ng18y4I= -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:20 2025 by rpki-client