$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa File: 3B55F656F0E111EE8ECF4F49C4F9AE02.roa (raw, json) Hash identifier: Aiy8O00aHfQ0DNPZV9YKeOfcNqQj6//PzrDaHR5dVq4= Subject key identifier: 9D:B3:96:01:1A:24:A7:00:D4:64:AF:33:F3:18:6A:EB:55:D1:FE:1E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D8B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:13 +0000 ROA not before: Thu 08 May 2025 15:53:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142534 IP address blocks: 157.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7563 (0x1d8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd369-5af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:6c:21:b3:e9:f7:25:31:40:5a:ef:96:cd: 6b:fb:9a:a2:ec:89:b0:f6:8b:a4:ee:77:2b:0a:b6: 49:a7:f1:a4:14:1a:8b:7c:c7:41:a9:61:dd:f9:20: 98:3a:b2:7c:17:e9:1c:38:ce:db:5e:2f:d8:69:d2: e6:e4:9e:c4:c1:35:60:2d:21:15:f6:4b:e7:cf:cc: 37:ca:ce:df:95:b3:59:aa:85:a9:82:39:9b:ee:57: 1e:74:39:4f:87:56:6b:d7:d7:8b:21:4c:ff:3e:52: b9:78:bd:43:93:f2:1a:d8:61:5d:3b:40:22:83:94: f9:20:a7:24:28:4e:77:af:28:8e:b0:f6:5d:58:6e: d6:63:49:ce:f5:29:48:be:e5:66:e4:18:ad:2a:5d: ec:97:34:cd:7c:13:cd:d6:71:61:44:73:61:c6:1b: 4d:bd:98:28:c2:dc:6d:30:05:bc:2c:59:a0:2d:74: 21:de:40:96:5a:78:3b:02:25:6f:25:bd:53:c9:23: 42:3f:4c:bd:4e:20:aa:d8:3f:e1:4c:d2:b6:d9:ce: c6:45:0a:76:20:9c:63:d4:6b:36:26:ba:61:4b:3a: 0b:47:ce:f3:b1:43:8d:89:69:e9:19:90:14:a2:9a: 5e:5e:39:ed:13:af:cf:88:b8:64:be:4e:df:0a:15: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B3:96:01:1A:24:A7:00:D4:64:AF:33:F3:18:6A:EB:55:D1:FE:1E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3B55F656F0E111EE8ECF4F49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.186.0/23 Signature Algorithm: sha256WithRSAEncryption 68:45:e5:f8:b2:98:8b:11:9c:88:b5:89:bb:06:79:0c:c3:b5: 4f:81:ab:06:91:42:ea:b7:f8:ed:92:d2:76:6a:c5:36:75:85: 51:ed:a6:b9:9f:19:eb:a5:60:83:6a:d9:ed:6c:b1:93:70:0d: 96:5b:7d:86:6b:88:8f:05:eb:d2:5c:03:87:0f:57:3f:ee:7a: e9:20:c6:65:88:bc:ff:6e:55:be:f4:37:c1:c3:a2:db:b1:a9: 72:bd:e1:f3:8e:d3:7e:b7:94:8e:13:b7:8c:d1:40:42:1a:0c: ad:fb:d9:ee:ac:33:2f:fe:0a:a4:99:16:72:9a:a7:34:67:d3: 02:72:ce:ff:0f:0f:35:3f:6b:22:86:37:e1:2a:31:f5:fd:77: 71:b4:91:86:37:c8:b5:00:00:bb:34:88:f9:f2:2b:5c:d9:d6: ad:32:1e:9f:0e:64:a7:93:bb:e7:1a:4d:d1:33:72:af:0a:7d: 7c:e0:21:7b:f9:65:28:00:fd:07:61:fc:fa:05:ea:02:ef:fe: 3e:b4:f0:52:50:6e:18:fa:5e:73:29:85:d8:3b:11:af:23:2c: 23:39:37:03:cb:82:3e:b0:1d:0b:76:27:2d:4a:56:e2:6f:b9: 99:8d:30:da:6b:12:94:1b:8c:44:e3:dd:08:93:3a:e0:b0:00: 2e:04:08:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM2OS01YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmJsIbPp9yUxQFrvls1r+5qi7Imw9ouk7ncrCrZJp/GkFBqLfMdBqWHd+SCY OrJ8F+kcOM7bXi/YadLm5J7EwTVgLSEV9kvnz8w3ys7flbNZqoWpgjmb7lcedDlP h1Zr19eLIUz/PlK5eL1Dk/Ia2GFdO0Aig5T5IKckKE53ryiOsPZdWG7WY0nO9SlI vuVm5BitKl3slzTNfBPN1nFhRHNhxhtNvZgowtxtMAW8LFmgLXQh3kCWWng7AiVv Jb1TySNCP0y9TiCq2D/hTNK22c7GRQp2IJxj1Gs2JrphSzoLR87zsUONiWnpGZAU oppeXjntE6/PiLhkvk7fChXPBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ2zlgEa JKcA1GSvM/MYautV0f4eMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0I1NUY2NTZG MEUxMTFFRThFQ0Y0RjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFLowDQYJKoZIhvcNAQELBQADggEBAGhF5fiymIsRnIi1 ibsGeQzDtU+BqwaRQuq3+O2S0nZqxTZ1hVHtprmfGeulYINq2e1ssZNwDZZbfYZr iI8F69JcA4cPVz/ueukgxmWIvP9uVb70N8HDotuxqXK94fOO0363lI4Tt4zRQEIa DK372e6sMy/+CqSZFnKapzRn0wJyzv8PDzU/ayKGN+EqMfX9d3G0kYY3yLUAALs0 iPnyK1zZ1q0yHp8OZKeTu+caTdEzcq8KfXzgIXv5ZSgA/Qdh/PoF6gLv/j608FJQ bhj6XnMphdg7Ea8jLCM5NwPLgj6wHQt2Jy1KVuJvuZmNMNprEpQbjETj3QiTOuCw AC4ECPw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:05 2025 by rpki-client