$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa File: 318E4414FE4D11EFBFE66B1AC4F9AE02.roa (raw, json) Hash identifier: bnz/Gz2cIiz69/78S45wyomzGwSQuid2xoDm6Wpn25U= Subject key identifier: DA:02:3A:39:33:A2:4C:2E:6D:AC:77:28:A1:FE:C4:98:13:8C:10:B7 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: CE Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa Signing time: Fri 21 Mar 2025 05:11:34 +0000 ROA not before: Fri 21 Mar 2025 05:11:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138032 IP address blocks: 157.20.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Mar 21 05:11:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dcf506-4891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:ab:71:a5:02:f0:23:50:ae:83:a4:2d:dc: 0a:4d:ed:f7:f4:e2:9c:b7:0e:91:e8:0e:e4:c1:2d: 5d:1b:c2:08:60:e8:8b:af:4b:63:71:8d:cf:b2:4e: d2:9e:93:15:cb:36:8a:11:63:95:48:58:4a:c6:8f: b8:9b:60:f8:07:e0:46:34:4e:3c:87:9e:17:99:d5: 53:9b:20:92:5c:87:47:93:c8:39:fc:50:03:7e:39: 8f:62:b6:44:a8:c6:d3:70:cc:55:65:64:51:37:e9: 34:29:f2:76:40:42:12:bc:9c:83:a5:51:49:81:e8: c9:21:1e:d2:54:79:f2:a4:c4:36:fe:40:4d:49:4d: 1b:5c:b4:05:99:c9:36:62:04:00:cb:93:8c:18:f3: 7e:06:0f:b6:73:7d:5f:47:22:d8:6d:c9:55:8a:95: 26:31:ea:18:49:cd:c3:eb:6d:a4:d6:52:4b:b8:4a: a0:c9:a6:be:9c:91:52:13:09:2c:df:78:83:47:87: 29:15:79:3e:27:dd:6f:d2:ec:cb:67:91:fb:03:37: 69:7e:5f:b0:d7:b2:ee:f2:42:83:10:e5:d1:2d:24: bc:36:fd:d9:e0:86:cd:02:a0:28:cb:d0:39:df:3b: 33:97:64:90:9d:ab:92:97:5c:b1:98:ac:e3:15:21: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:02:3A:39:33:A2:4C:2E:6D:AC:77:28:A1:FE:C4:98:13:8C:10:B7 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/318E4414FE4D11EFBFE66B1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.75.0/24 Signature Algorithm: sha256WithRSAEncryption 50:48:08:9e:f1:64:37:36:9c:f8:e9:8c:ff:b7:fc:61:7a:76: 42:a6:3a:8b:0a:81:3b:5c:35:ed:4e:a3:c6:0e:86:49:c3:02: 1b:dd:75:d7:1f:25:21:ce:cf:01:6f:14:f0:f8:fe:de:d6:4c: 47:89:cb:66:3a:63:27:06:b3:3b:93:7e:09:20:e8:2e:61:d2: b3:e3:cb:8c:1f:7e:4b:28:8e:f7:f3:74:5f:5c:a5:73:a8:cc: cb:1a:5c:78:92:91:7d:57:aa:09:ce:eb:8f:25:28:d9:93:b4: 6b:a6:49:67:c3:30:17:eb:77:60:98:4c:83:c3:e5:e1:5f:55: 18:01:6b:dc:2b:0f:11:b8:50:5c:5e:6c:0f:d9:7c:c7:ff:ee: a9:bb:f0:d8:e6:b0:a4:c0:71:3a:22:cd:ed:3c:9a:3f:66:0d: 76:13:0f:58:be:b1:b6:b3:e3:66:b1:11:df:59:88:6f:fa:6d: c2:cb:91:82:b0:53:55:99:ea:e4:fe:34:ad:f8:3a:4f:42:d9: 12:f0:50:92:19:ee:d9:f4:b8:14:3a:aa:77:e0:b4:65:48:89: 21:8b:90:94:75:ab:ee:be:bd:2a:ae:d7:a1:54:69:80:cf:ff: 0c:45:bd:aa:cd:c0:a9:52:4a:96:74:79:44:de:3f:41:8b:db: 42:9b:c4:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwMzIxMDUxMTM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjZjUwNi00ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYSrcaUC8CNQroOkLdwKTe339OKctw6R6A7kwS1dG8IIYOiLr0tjcY3Psk7S npMVyzaKEWOVSFhKxo+4m2D4B+BGNE48h54XmdVTmyCSXIdHk8g5/FADfjmPYrZE qMbTcMxVZWRRN+k0KfJ2QEISvJyDpVFJgejJIR7SVHnypMQ2/kBNSU0bXLQFmck2 YgQAy5OMGPN+Bg+2c31fRyLYbclVipUmMeoYSc3D622k1lJLuEqgyaa+nJFSEwks 33iDR4cpFXk+J91v0uzLZ5H7Azdpfl+w17Lu8kKDEOXRLSS8Nv3Z4IbNAqAoy9A5 3zszl2SQnauSl1yxmKzjFSFhBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNoCOjkz okwubax3KKH+xJgTjBC3MB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlCNkYvMkFENUY2RDhEMDlDMTFFRTgwQUI4RDdFQzRGOUFFMDIvMzE4RTQ0MTRG RTREMTFFRkJGRTY2QjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFEswDQYJKoZIhvcNAQELBQADggEBAFBICJ7xZDc2nPjp jP+3/GF6dkKmOosKgTtcNe1Oo8YOhknDAhvdddcfJSHOzwFvFPD4/t7WTEeJy2Y6 YycGszuTfgkg6C5h0rPjy4wffksojvfzdF9cpXOozMsaXHiSkX1XqgnO648lKNmT tGumSWfDMBfrd2CYTIPD5eFfVRgBa9wrDxG4UFxebA/ZfMf/7qm78NjmsKTAcToi ze08mj9mDXYTD1i+sbaz42axEd9ZiG/6bcLLkYKwU1WZ6uT+NK34Ok9C2RLwUJIZ 7tn0uBQ6qnfgtGVIiSGLkJR1q+6+vSqu16FUaYDP/wxFvarNwKlSSpZ0eUTeP0GL 20KbxK4= -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:17 2025 by rpki-client