$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa File: 67421A14E1D811EE8E6B407CC4F9AE02.roa (raw, json) Hash identifier: HKMhCEugTCJlDyuqj+InZm/QMr/jYDwGjLx2VVhRl3w= Subject key identifier: 95:72:D9:A1:81:A3:38:58:17:44:38:D0:CB:4B:2A:66:92:8E:FB:45 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DF6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa Signing time: Thu 08 May 2025 15:54:46 +0000 ROA not before: Thu 08 May 2025 15:54:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152581 IP address blocks: 157.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7670 (0x1df6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd3c6-1eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:6d:d1:f0:e9:92:98:33:97:51:94:c3:6b: cf:0b:22:27:f9:fe:0d:1d:2b:56:c4:7f:09:b9:d2: 24:5b:11:0a:43:32:7c:75:52:7e:38:66:19:fe:d4: 4c:c9:6d:6b:40:36:c8:1d:ec:19:7b:93:8c:98:51: 24:97:15:a5:b6:e2:6d:b7:79:4b:1a:95:e0:ba:cf: 15:1a:7b:34:d5:1e:4c:b5:07:8c:0b:fb:0b:35:08: e1:f2:be:9a:2a:e4:64:20:03:fb:da:f0:72:31:38: 88:9d:ce:a9:aa:8e:f8:28:5d:a4:3e:41:67:81:15: 3e:6a:71:8e:11:ad:2e:84:a2:71:97:32:4b:83:6c: 15:54:5b:a4:9f:f6:b9:5b:d1:57:e3:1e:74:39:3a: ce:a6:1e:13:cd:86:12:65:d6:f6:2b:1e:68:1f:00: 5e:dd:ca:5c:02:05:5e:ca:5c:9c:90:c6:0c:8b:fd: f1:4d:f8:f7:8c:32:e1:c4:35:28:cb:bd:07:45:11: 39:c1:ff:02:d7:0a:f0:9d:8a:2e:03:b4:9a:10:26: de:82:9d:70:34:d4:12:c0:33:89:34:d9:83:36:cc: 65:08:fe:bc:72:31:e5:73:12:1e:e5:1a:ee:75:15: ca:fe:d0:6b:df:88:09:66:95:89:e7:9b:95:48:94: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:72:D9:A1:81:A3:38:58:17:44:38:D0:CB:4B:2A:66:92:8E:FB:45 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.186.0/23 Signature Algorithm: sha256WithRSAEncryption ab:84:31:34:ee:42:d0:3d:6b:86:fb:ab:7e:0b:a1:00:ef:de: 35:02:07:03:c0:10:7d:d6:ea:c9:4c:a4:1f:2d:2a:4d:13:e5: f1:96:30:9e:fd:fb:b5:ab:41:22:dd:cc:2f:20:28:1e:a1:d9: b9:c0:d3:a5:3d:58:42:12:af:f4:77:2a:d8:e7:50:b2:64:34: e0:b1:d7:a4:dc:be:56:4c:3f:48:a3:a7:d4:fd:58:9b:ce:16: 7e:bb:88:68:47:04:1b:65:b3:0a:01:31:6e:bc:02:6e:94:75: 66:59:47:12:bd:de:c1:2c:fb:67:3b:40:57:bb:28:01:cb:e0: cd:e9:45:ab:30:af:be:cd:72:d4:27:34:2c:aa:e7:d2:54:bc: 24:fd:6e:cd:70:f7:c5:37:ba:84:85:b0:77:36:ef:42:1c:ec: 79:fb:9d:bb:31:e3:96:d4:57:ae:a8:71:8a:08:1f:5b:0a:9c: 4b:06:46:be:61:b6:3b:a7:fc:fa:9c:ca:bc:06:33:cf:08:0a: 3e:7b:ea:b2:8d:44:24:28:b6:db:40:a7:42:90:35:30:60:3b: 1a:83:43:cd:eb:d6:9c:7b:8e:af:dc:a0:ac:0e:cc:f7:fe:9c: c0:37:73:84:e8:47:f7:66:8b:d5:78:c9:2b:a5:c5:31:b3:38: 7a:28:f6:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDNjNi0xZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsApt0fDpkpgzl1GUw2vPCyIn+f4NHStWxH8JudIkWxEKQzJ8dVJ+OGYZ/tRM yW1rQDbIHewZe5OMmFEklxWltuJtt3lLGpXgus8VGns01R5MtQeMC/sLNQjh8r6a KuRkIAP72vByMTiInc6pqo74KF2kPkFngRU+anGOEa0uhKJxlzJLg2wVVFukn/a5 W9FX4x50OTrOph4TzYYSZdb2Kx5oHwBe3cpcAgVeylyckMYMi/3xTfj3jDLhxDUo y70HRRE5wf8C1wrwnYouA7SaECbegp1wNNQSwDOJNNmDNsxlCP68cjHlcxIe5Rru dRXK/tBr34gJZpWJ55uVSJRCWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJVy2aGB ozhYF0Q40MtLKmaSjvtFMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjc0MjFBMTRF MUQ4MTFFRThFNkI0MDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFLowDQYJKoZIhvcNAQELBQADggEBAKuEMTTuQtA9a4b7 q34LoQDv3jUCBwPAEH3W6slMpB8tKk0T5fGWMJ79+7WrQSLdzC8gKB6h2bnA06U9 WEISr/R3KtjnULJkNOCx16TcvlZMP0ijp9T9WJvOFn67iGhHBBtlswoBMW68Am6U dWZZRxK93sEs+2c7QFe7KAHL4M3pRaswr77NctQnNCyq59JUvCT9bs1w98U3uoSF sHc270Ic7Hn7nbsx45bUV66ocYoIH1sKnEsGRr5htjun/PqcyrwGM88ICj576rKN RCQotttAp0KQNTBgOxqDQ83r1px7jq/coKwOzPf+nMA3c4ToR/dmi9V4ySulxTGz OHoo9no= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:57 2025 by rpki-client