$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa File: 02FDC7D2ADFE11EE8512934EC4F9AE02.roa (raw, json) Hash identifier: x47FmEuWAfI6KlRarm4SsHOvbrLvfxsBaXui0uxGeOM= Subject key identifier: C4:A5:6B:F6:51:87:04:74:09:42:2E:0F:07:08:93:6D:11:F6:D3:FE Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:33 +0000 ROA not before: Thu 08 May 2025 15:53:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151703 IP address blocks: 157.10.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7587 (0x1da3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd37d-6972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:bf:1f:92:57:03:0d:c2:b9:27:27:da:ad: 77:1a:3c:79:5b:4b:74:e3:65:2b:ec:25:85:40:70: 66:89:bc:db:63:45:99:0a:df:59:b2:cd:8c:03:7c: 3a:e1:8d:25:8e:d6:e1:ad:2a:4e:c1:68:93:4f:38: 56:8f:ba:d8:81:ec:e9:cf:55:19:33:95:30:59:ca: 37:60:ab:7f:e2:01:85:9b:b5:da:89:a4:a9:9d:fc: 9d:31:23:46:45:fb:85:d9:fd:5a:07:de:23:b9:26: a3:e1:f5:2b:90:d0:ed:3c:31:65:0e:67:4a:10:6d: b9:7c:82:9a:d1:c2:1a:3a:9b:16:e3:2b:af:e5:9e: 31:65:47:0f:1b:ab:2a:ac:65:98:0e:be:7f:9a:02: bc:23:de:c4:92:bc:24:2f:a1:67:db:4e:ec:56:e6: 27:c8:24:87:2f:e2:43:a2:3b:9e:5c:a1:ae:ad:87: eb:7b:9f:54:cb:84:7d:fa:39:a2:dd:f2:d1:a3:75: b2:eb:29:47:32:d6:5f:a3:9d:d2:06:0f:cc:df:71: d7:3a:fc:30:a6:18:9c:ea:1c:83:fe:12:aa:ea:8d: 0a:ea:b3:1b:e6:e3:68:a3:e7:dd:a8:75:d0:69:14: 19:be:00:d9:0a:99:a9:e8:af:bf:97:0b:83:a7:6f: 27:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A5:6B:F6:51:87:04:74:09:42:2E:0F:07:08:93:6D:11:F6:D3:FE X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.58.0/23 Signature Algorithm: sha256WithRSAEncryption cd:23:44:d2:cd:5b:fe:4b:9e:f9:2c:7a:25:8b:df:00:90:fa: 7f:65:df:a4:2d:23:81:a9:f2:d3:1f:8b:ac:0a:63:e5:f3:df: 93:96:2e:6c:f5:f6:5f:8e:05:7c:4a:01:20:52:a8:f8:61:5a: 0c:6d:3a:3a:d6:e4:32:f7:dd:f2:66:20:81:9c:dd:cb:5e:e2: 97:6d:90:4f:41:c6:52:15:c3:15:4a:e7:b6:9d:38:49:1a:68: 99:d7:b9:16:06:bf:99:60:c9:43:3e:87:49:f7:05:24:af:78: a1:85:1d:53:fc:30:c9:52:22:7f:9a:9c:fa:ac:fe:8d:e9:56: 61:55:f8:90:43:20:54:83:0a:6b:95:f1:9c:f6:dd:49:e2:5c: 54:67:de:ec:98:21:90:50:2e:33:1b:8e:8b:69:a3:4c:cb:bd: 2f:74:82:66:13:98:d9:ce:f8:67:1f:54:e9:45:65:d0:38:2e: 17:15:16:8d:89:f6:de:c2:17:ec:32:d5:cb:f2:02:ae:fa:95: 0b:4b:99:2e:d3:3d:16:82:85:cc:b4:f3:fe:32:5c:7f:8c:89: a3:42:4a:43:9d:97:d6:85:7f:86:83:f9:35:d1:dc:c0:92:79: ad:5c:f1:bf:81:15:49:09:00:8c:bd:9a:c6:a4:a4:67:68:fd: 4c:e1:2f:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM3ZC02OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2i/H5JXAw3CuScn2q13Gjx5W0t042Ur7CWFQHBmibzbY0WZCt9Zss2MA3w6 4Y0ljtbhrSpOwWiTTzhWj7rYgezpz1UZM5UwWco3YKt/4gGFm7XaiaSpnfydMSNG RfuF2f1aB94juSaj4fUrkNDtPDFlDmdKEG25fIKa0cIaOpsW4yuv5Z4xZUcPG6sq rGWYDr5/mgK8I97EkrwkL6Fn207sVuYnyCSHL+JDojueXKGurYfre59Uy4R9+jmi 3fLRo3Wy6ylHMtZfo53SBg/M33HXOvwwphic6hyD/hKq6o0K6rMb5uNoo+fdqHXQ aRQZvgDZCpmp6K+/lwuDp28npwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMSla/ZR hwR0CUIuDwcIk20R9tP+MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDJGREM3RDJB REZFMTFFRTg1MTI5MzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCjowDQYJKoZIhvcNAQELBQADggEBAM0jRNLNW/5Lnvks eiWL3wCQ+n9l36QtI4Gp8tMfi6wKY+Xz35OWLmz19l+OBXxKASBSqPhhWgxtOjrW 5DL33fJmIIGc3cte4pdtkE9BxlIVwxVK57adOEkaaJnXuRYGv5lgyUM+h0n3BSSv eKGFHVP8MMlSIn+anPqs/o3pVmFV+JBDIFSDCmuV8Zz23UniXFRn3uyYIZBQLjMb jotpo0zLvS90gmYTmNnO+GcfVOlFZdA4LhcVFo2J9t7CF+wy1cvyAq76lQtLmS7T PRaChcy08/4yXH+MiaNCSkOdl9aFf4aD+TXR3MCSea1c8b+BFUkJAIy9msakpGdo /UzhL34= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:22 2025 by rpki-client