$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa File: 0511FA70013C11EFB9BC9846C4F9AE02.roa (raw, json) Hash identifier: 11FeKbcazGpi7o69NYJxaUGJRPirR+5Gs1FjrLVB/wo= Subject key identifier: 27:CD:AB:EA:08:BC:F4:72:9C:0A:C2:76:54:09:F6:53:C2:A5:E6:69 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DD4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa Signing time: Thu 08 May 2025 15:54:17 +0000 ROA not before: Thu 08 May 2025 15:54:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152520 IP address blocks: 157.66.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7636 (0x1dd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3a9-ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:b0:1f:20:46:1d:66:49:bc:4a:2f:59:11: a8:b5:4a:05:8d:bd:23:25:de:40:da:80:e4:01:71: a2:63:5f:a3:5f:0e:e0:9b:82:f5:20:20:82:33:4f: f5:b8:66:c4:aa:58:25:bd:64:1f:7e:d1:ee:bd:e6: ef:ec:2d:2b:48:41:c0:d7:dd:77:54:8f:59:2c:09: 46:9b:c3:80:50:9b:6e:90:1f:2e:0f:3b:57:bf:d9: e2:6f:62:f7:29:7e:5c:6e:ed:1d:fa:b2:c3:d9:7b: 12:81:87:ec:a7:a5:03:d9:94:41:5b:45:8e:53:a9: 7e:0c:c5:bb:00:46:76:d0:ef:86:f6:ed:a9:a4:4f: b0:09:81:6a:52:81:45:3d:95:fc:85:12:b0:3e:55: 1d:97:c9:2d:5f:c8:9e:b0:fd:00:8e:a3:44:d5:69: 89:52:79:1d:ba:47:de:cc:50:51:ed:fa:69:c1:81: ea:45:bf:bc:d5:65:94:66:3b:2b:50:bf:55:5e:40: 88:e4:a4:ca:5c:d3:b0:ff:5b:2a:e3:44:f8:af:91: 88:e4:5a:34:0f:9a:9e:db:26:82:b7:23:f4:98:6a: b2:7f:f5:9f:9c:de:da:d3:e8:8a:77:78:4f:9a:ff: 6b:23:d0:90:0c:41:24:75:0c:30:fe:10:69:ad:f8: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CD:AB:EA:08:BC:F4:72:9C:0A:C2:76:54:09:F6:53:C2:A5:E6:69 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:69:a6:89:4d:e4:28:b4:16:db:8d:e5:33:55:b6:13:51:48: 31:9b:16:39:7c:e5:77:c1:ef:57:69:10:d1:49:f7:7a:23:63: c2:48:f8:8c:c7:bd:5c:58:aa:81:ed:79:61:b5:24:63:4d:e5: f3:d1:9c:a9:00:b5:a0:d4:19:ba:3c:4b:4f:a9:60:43:56:df: 62:ee:9d:2f:87:d7:3b:fc:95:19:26:8a:85:4d:09:13:f8:9e: fe:3b:85:c7:68:d3:9a:3d:82:08:25:9d:03:07:5f:9a:85:7a: 04:16:12:ea:47:01:a1:2e:88:63:be:5e:a3:b3:b9:75:f2:16: cf:02:aa:4a:e1:c2:6c:96:6e:c0:dd:8e:79:89:6f:54:b1:a3: f0:ca:a7:a0:cb:27:2d:09:3e:38:43:d3:d6:a1:c4:6c:ea:d2: f3:35:1a:29:ed:0b:eb:60:ee:a2:d2:76:84:20:cc:80:11:3d: 73:a5:09:1f:f2:7f:97:a4:91:26:64:3d:18:30:75:41:74:c9: 48:d6:4a:ca:1f:96:98:3c:68:3b:42:6f:7f:c8:d0:15:25:51: 14:67:93:a7:46:d9:2f:cb:d8:ee:bd:3d:9c:77:74:f0:dd:35: a9:af:90:fd:94:5b:9a:2d:11:54:07:f6:02:c9:97:a0:fe:f2: 0b:d5:17:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNhOS1jYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5awHyBGHWZJvEovWRGotUoFjb0jJd5A2oDkAXGiY1+jXw7gm4L1ICCCM0/1 uGbEqlglvWQfftHuvebv7C0rSEHA1913VI9ZLAlGm8OAUJtukB8uDztXv9nib2L3 KX5cbu0d+rLD2XsSgYfsp6UD2ZRBW0WOU6l+DMW7AEZ20O+G9u2ppE+wCYFqUoFF PZX8hRKwPlUdl8ktX8iesP0AjqNE1WmJUnkdukfezFBR7fppwYHqRb+81WWUZjsr UL9VXkCI5KTKXNOw/1sq40T4r5GI5Fo0D5qe2yaCtyP0mGqyf/WfnN7a0+iKd3hP mv9rI9CQDEEkdQww/hBprfiI9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCfNq+oI vPRynArCdlQJ9lPCpeZpMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDUxMUZBNzAw MTNDMTFFRkI5QkM5ODQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdQnYwDQYJKoZIhvcNAQELBQADggEBAG9ppolN5Ci0FtuN 5TNVthNRSDGbFjl85XfB71dpENFJ93ojY8JI+IzHvVxYqoHteWG1JGNN5fPRnKkA taDUGbo8S0+pYENW32LunS+H1zv8lRkmioVNCRP4nv47hcdo05o9ggglnQMHX5qF egQWEupHAaEuiGO+XqOzuXXyFs8CqkrhwmyWbsDdjnmJb1Sxo/DKp6DLJy0JPjhD 09ahxGzq0vM1GintC+tg7qLSdoQgzIARPXOlCR/yf5ekkSZkPRgwdUF0yUjWSsof lpg8aDtCb3/I0BUlURRnk6dG2S/L2O69PZx3dPDdNamvkP2UW5otEVQH9gLJl6D+ 8gvVF7Q= -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:22 2025 by rpki-client