$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa File: 217537E8B64B11F0ACEA6E59C4F9AE02.roa (raw, json) Hash identifier: M+mnaJeVGMpD32zyvhXdK7xUKyIgoHj5zWTZuGvV2Tw= Subject key identifier: A2:04:B6:90:35:B8:6D:E7:09:49:19:9A:AA:5E:77:22:1F:E1:17:AC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1FD0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa Signing time: Fri 31 Oct 2025 11:17:05 +0000 ROA not before: Fri 31 Oct 2025 11:17:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149589 IP address blocks: 157.66.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8144 (0x1fd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 31 11:17:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69049ab1-ae5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:70:d9:83:a3:00:8d:3e:26:ea:8a:3b:bc: b6:89:ba:e0:d0:42:6e:67:18:e2:73:ab:c6:6e:a8: 21:c5:ce:9f:d1:e7:6a:b3:3a:8a:37:59:a8:a3:c2: 0a:a7:8a:7d:b7:da:69:80:5e:32:1b:c4:38:42:18: 81:67:ad:82:3e:4a:60:87:fd:e9:3c:c5:1a:63:6d: 2c:7e:2d:8f:13:be:8e:2a:08:42:79:20:3f:79:02: b5:0f:20:0e:d6:1b:cf:80:22:3d:58:e2:f0:ae:ff: ec:48:24:9b:74:62:69:ae:fa:13:03:f9:c7:49:4a: 3d:09:36:79:21:2d:7b:b1:30:5f:9c:5f:eb:fa:a1: b9:4f:9e:c6:82:72:ce:55:59:0b:69:91:e1:83:7e: f9:0f:15:53:49:bd:c2:98:3f:7b:7e:86:23:d5:ed: 56:68:91:2c:e7:60:2c:6d:51:c8:b2:0c:90:81:3f: 4e:2e:af:ba:8a:f8:7c:0d:4b:c7:42:0e:ce:79:b1: b8:fe:62:67:10:b8:b1:9b:12:a3:7a:66:0e:f0:72: 8b:6f:76:a0:1b:fe:ed:e9:1f:f3:db:33:52:18:8d: c2:94:05:05:ed:b9:d8:ec:24:a2:ff:25:ab:c8:e8: 59:fc:1f:f4:d3:e0:ed:ce:09:e0:ac:d7:a8:e0:6a: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:B6:90:35:B8:6D:E7:09:49:19:9A:AA:5E:77:22:1F:E1:17:AC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/217537E8B64B11F0ACEA6E59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.45.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:5c:d9:c3:c2:fa:2b:61:cc:91:54:80:15:83:ab:77:b9:6e: d6:d0:a4:d5:82:7b:2f:7d:f6:32:dc:e1:02:56:48:81:19:bd: 7b:8b:a7:a4:68:0d:a5:4e:25:eb:13:4a:c7:5e:4f:18:45:9e: 59:2a:5c:7d:a5:11:52:89:14:a5:de:8e:58:a6:cc:fc:2a:af: 3e:88:3d:d9:2a:5c:7d:ce:20:cf:76:55:9f:61:73:a4:d9:56: 34:bb:25:18:13:74:50:3c:99:e5:39:c0:a8:9f:d4:eb:55:07: 8e:82:85:db:a7:7f:d5:b6:f4:f2:f1:c9:0d:fa:0c:29:5a:9d: 18:21:84:fd:fc:3a:c8:79:55:4f:39:a9:f0:62:24:a4:70:cd: d8:7e:6c:2a:c0:38:0e:36:9b:fd:b0:60:8f:bb:7b:86:b3:67: 0c:34:0f:82:d8:1e:f6:51:f0:90:22:35:87:c8:c4:ee:1c:64: b0:d1:e6:98:e6:c1:67:1f:f9:9c:1c:eb:bd:00:59:11:4d:7a: cf:2c:4f:e3:31:50:be:68:ea:40:9a:b2:2e:b5:dc:cd:a4:59: 7c:9d:84:06:41:16:5f:db:1b:ca:dc:e7:22:88:00:91:97:0c: c5:21:6a:17:66:ca:6f:36:3f:13:22:ab:ac:0b:da:3d:68:9e: 00:59:43:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMDMxMTExNzA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0OWFiMS1hZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIJw2YOjAI0+JuqKO7y2ibrg0EJuZxjic6vGbqghxc6f0edqszqKN1moo8IK p4p9t9ppgF4yG8Q4QhiBZ62CPkpgh/3pPMUaY20sfi2PE76OKghCeSA/eQK1DyAO 1hvPgCI9WOLwrv/sSCSbdGJprvoTA/nHSUo9CTZ5IS17sTBfnF/r+qG5T57GgnLO VVkLaZHhg375DxVTSb3CmD97foYj1e1WaJEs52AsbVHIsgyQgT9OLq+6ivh8DUvH Qg7OebG4/mJnELixmxKjemYO8HKLb3agG/7t6R/z2zNSGI3ClAUF7bnY7CSi/yWr yOhZ/B/00+DtzgngrNeo4GoQkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKIEtpA1 uG3nCUkZmqpedyIf4ResMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjE3NTM3RThC NjRCMTFGMEFDRUE2RTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdQi0wDQYJKoZIhvcNAQELBQADggEBAC1c2cPC+ithzJFU gBWDq3e5btbQpNWCey999jLc4QJWSIEZvXuLp6RoDaVOJesTSsdeTxhFnlkqXH2l EVKJFKXejlimzPwqrz6IPdkqXH3OIM92VZ9hc6TZVjS7JRgTdFA8meU5wKif1OtV B46Chdunf9W29PLxyQ36DClanRghhP38Osh5VU85qfBiJKRwzdh+bCrAOA42m/2w YI+7e4azZww0D4LYHvZR8JAiNYfIxO4cZLDR5pjmwWcf+Zwc670AWRFNes8sT+Mx UL5o6kCasi613M2kWXydhAZBFl/bG8rc5yKIAJGXDMUhahdmym82PxMiq6wL2j1o ngBZQ8U= -----END CERTIFICATE-----Generated at Tue Nov 4 22:13:25 2025 by rpki-client