$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/025409C8379B11EFBD590A64C4F9AE02.roa File: 025409C8379B11EFBD590A64C4F9AE02.roa (raw, json) Hash identifier: wBtgItjdtVdZKOtE9e7k05I7O2qVYXtNEhKb9Ot8t6k= Subject key identifier: 3C:4F:21:08:31:F6:07:37:10:EE:56:13:B1:A0:BF:B8:53:4C:B4:20 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E4B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/025409C8379B11EFBD590A64C4F9AE02.roa Signing time: Tue 13 May 2025 09:36:36 +0000 ROA not before: Tue 13 May 2025 09:36:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151732 IP address blocks: 157.15.92.0/23 maxlen: 24 160.22.84.0/23 maxlen: 24 165.99.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7755 (0x1e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 13 09:36:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682312a3-9dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3d:c3:d2:a2:ca:7f:32:72:d6:78:4a:a2:bd: 43:2d:aa:85:36:db:ce:2e:f8:bd:38:cc:28:28:c2: ce:e3:81:d9:31:fc:32:be:5c:c8:75:16:38:c5:31: 89:4b:27:6e:b1:1f:67:96:4a:35:44:b2:48:57:51: 72:93:98:16:02:b9:5e:14:71:89:95:14:dc:26:4a: 7a:99:6d:12:dc:dd:56:3c:cd:07:65:ed:70:c1:28: 33:8e:25:50:52:bf:71:57:7e:d1:c5:ac:a4:92:f5: a2:f1:3f:f1:21:06:8e:d9:f9:0b:81:bc:b7:6f:db: 96:8d:80:05:34:88:4f:82:1c:98:88:61:a1:3a:1f: 65:42:b8:f0:75:d7:3f:71:d3:35:07:6d:c1:ed:a4: 3c:9b:9f:17:85:b9:a6:43:90:fe:93:64:7f:a0:90: 9d:18:87:23:18:2a:c3:1b:b4:00:7c:61:51:45:8a: 1b:ad:6d:2e:86:4b:6f:0d:c9:52:1f:4f:85:04:77: 18:92:b4:73:a2:8b:da:ba:67:5c:cd:a3:db:16:16: 0a:a7:7b:bd:fb:50:81:5a:56:e7:a9:92:83:5a:af: ff:ea:9d:59:63:23:9f:a4:c3:09:ca:b0:cc:d1:da: b0:2d:3c:44:a3:6d:d1:a9:c3:ba:b0:27:9c:e5:fc: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:21:08:31:F6:07:37:10:EE:56:13:B1:A0:BF:B8:53:4C:B4:20 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/025409C8379B11EFBD590A64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.92.0/23 160.22.84.0/23 165.99.22.0/23 Signature Algorithm: sha256WithRSAEncryption ca:d3:16:a5:8b:1e:45:68:ea:cc:98:7d:8d:89:db:f5:e3:7e: 1b:9f:1e:28:af:c2:82:88:8c:6b:b3:f2:c9:6d:af:ab:91:31: 06:83:c6:30:23:2e:b2:0b:76:2b:c0:88:a3:cc:05:e8:db:be: e4:b3:34:bd:61:1d:f2:9b:29:60:a1:1c:e3:7f:c7:60:4c:8a: 00:cd:b7:52:ba:a3:ac:b5:1b:29:04:d1:c8:60:b5:5f:f6:42: 6a:67:0e:c8:55:79:bc:e4:22:10:78:38:56:cf:a5:c5:d7:7d: 08:16:ac:9a:f6:e2:74:ff:ef:1a:3f:b5:90:cc:2b:df:1d:1a: 6a:bb:df:83:9a:4b:5e:90:fe:d7:c4:e3:8a:dd:9a:54:3b:6c: 1c:a4:c5:37:9d:ef:73:08:67:ac:e6:4a:08:61:a6:16:a6:55: af:f9:66:8b:40:70:43:00:88:88:74:e4:94:f1:9d:a9:79:b0: 97:d9:87:7b:68:80:36:ed:86:4f:17:63:d2:71:22:a0:4b:bf: 14:4f:0e:d7:10:d1:cc:27:2a:78:5b:d5:99:fc:55:80:0e:ea: 47:59:b9:c4:24:58:63:c4:e3:5b:0d:4a:fc:2d:b6:5f:ab:2e: c9:ca:6e:04:80:41:c6:94:f0:5c:29:6c:18:42:a9:23:a3:46: f5:f6:bd:b9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTEzMDkzNjM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzMTJhMy05ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0j3D0qLKfzJy1nhKor1DLaqFNtvOLvi9OMwoKMLO44HZMfwyvlzIdRY4xTGJ SydusR9nlko1RLJIV1Fyk5gWArleFHGJlRTcJkp6mW0S3N1WPM0HZe1wwSgzjiVQ Ur9xV37RxaykkvWi8T/xIQaO2fkLgby3b9uWjYAFNIhPghyYiGGhOh9lQrjwddc/ cdM1B23B7aQ8m58XhbmmQ5D+k2R/oJCdGIcjGCrDG7QAfGFRRYobrW0uhktvDclS H0+FBHcYkrRzoovaumdczaPbFhYKp3u9+1CBWlbnqZKDWq//6p1ZYyOfpMMJyrDM 0dqwLTxEo23RqcO6sCec5fzG0wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDxPIQgx 9gc3EO5WE7Ggv7hTTLQgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDI1NDA5Qzgz NzlCMTFFRkJENTkwQTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdD1wDBAGgFlQDBAGlYxYwDQYJKoZIhvcNAQELBQADggEB AMrTFqWLHkVo6syYfY2J2/XjfhufHiivwoKIjGuz8sltr6uRMQaDxjAjLrILdivA iKPMBejbvuSzNL1hHfKbKWChHON/x2BMigDNt1K6o6y1GykE0chgtV/2QmpnDshV ebzkIhB4OFbPpcXXfQgWrJr24nT/7xo/tZDMK98dGmq734OaS16Q/tfE44rdmlQ7 bBykxTed73MIZ6zmSghhphamVa/5ZotAcEMAiIh05JTxnal5sJfZh3togDbthk8X Y9JxIqBLvxRPDtcQ0cwnKnhb1Zn8VYAO6kdZucQkWGPE41sNSvwttl+rLsnKbgSA QcaU8FwpbBhCqSOjRvX2vbk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:09 2025 by rpki-client