$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: RwlL8RT0W86IaHUW3RKKxevwtdcf+ycPooWTNReXx8Q= Subject key identifier: EA:A5:FA:D0:E0:98:53:F5:35:B7:CA:46:89:C9:FA:48:7F:B4:6F:16 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1D20 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Tue 22 Apr 2025 07:58:35 +0000 ROA not before: Tue 22 Apr 2025 07:58:35 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7456 (0x1d20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Apr 22 07:58:35 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=68074c2a-1c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:81:c9:13:9d:88:6f:e8:d9:a2:c4:ad:4f: 67:bb:bf:82:cd:7b:2c:d9:cf:4d:58:d2:ec:20:7f: 9b:91:b2:ba:e1:36:84:82:2d:92:46:47:0c:38:b6: ab:a0:56:08:84:31:93:f4:2b:ef:64:d7:e9:3e:c9: f0:df:ad:c6:93:41:32:7b:f1:34:f8:74:29:a3:53: 95:a8:88:e1:7c:98:18:6e:df:d6:8d:1d:1b:e1:e1: e4:d3:33:1f:e3:d4:a0:52:58:09:94:a5:2f:fc:97: 50:e2:d8:76:cf:fb:4e:59:08:9f:a8:02:11:30:72: 47:51:0c:8d:a4:5f:7e:64:81:9f:a3:30:ae:75:ba: d3:fb:3e:1d:4c:f6:6d:61:3a:a8:1c:d8:31:d1:5d: e4:33:b0:b3:45:1f:b3:1d:89:78:91:f2:d0:40:39: 08:4a:80:56:17:23:c3:86:36:c8:47:d7:cd:7e:47: 7b:0b:02:3b:29:b9:28:ec:ce:86:47:a9:2c:dd:01: 74:a7:11:4c:4c:dd:25:54:21:73:23:10:99:f6:fd: cf:71:6d:d8:8c:e4:d5:89:a4:e7:d3:5f:b5:d0:45: 2a:b9:98:c6:97:fd:46:54:cd:12:c4:9e:06:db:05: 3c:a2:2a:5a:4f:24:a8:00:b2:ee:d6:d4:7b:8e:7e: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:FA:D0:E0:98:53:F5:35:B7:CA:46:89:C9:FA:48:7F:B4:6F:16 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption c2:db:2f:d3:57:cb:f1:25:2a:3c:b2:dd:39:58:0e:70:c8:5d: bf:7e:ac:4a:08:ab:4d:7a:87:0e:10:5f:97:9c:52:bd:26:0d: 12:a1:ab:46:65:bc:a6:3f:3e:f8:ac:b7:64:63:bb:0a:1d:1c: b0:3c:b0:c1:1c:98:6a:93:0b:de:21:30:b6:c6:09:63:16:24: 85:bf:03:0a:a0:4c:b9:29:83:97:5e:77:f3:6a:d5:ed:28:24: 87:d7:5a:41:ea:3d:dd:f7:a7:f1:5a:56:7a:26:11:f6:68:f1: b1:da:b2:e2:da:c9:4c:1a:12:18:63:44:10:25:4c:9d:9d:17: be:93:47:78:56:04:77:f2:cb:fc:c7:85:84:02:01:0f:b0:86: ca:46:62:8e:db:dd:3f:99:79:74:a6:72:17:0e:27:93:13:01: 83:cc:9e:13:35:70:e2:a8:04:de:0b:c3:e5:04:c9:09:06:b9: 65:6f:5c:0e:02:4c:4f:ed:dc:14:c5:62:73:3d:ad:25:df:2f: 7b:31:44:bd:43:0d:dd:f6:08:c0:3c:c5:84:2d:37:e4:62:33: 43:35:b4:b5:d3:75:63:b2:f9:97:f3:f6:43:e5:23:b4:f2:d0: ea:08:84:39:02:6f:d0:a5:8e:59:18:17:c6:31:0d:62:01:b6: e4:c1:35:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNDIyMDc1ODM1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3NGMyYS0xYzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7P2ByROdiG/o2aLErU9nu7+CzXss2c9NWNLsIH+bkbK64TaEgi2SRkcMOLar oFYIhDGT9CvvZNfpPsnw363Gk0Eye/E0+HQpo1OVqIjhfJgYbt/WjR0b4eHk0zMf 49SgUlgJlKUv/JdQ4th2z/tOWQifqAIRMHJHUQyNpF9+ZIGfozCudbrT+z4dTPZt YTqoHNgx0V3kM7CzRR+zHYl4kfLQQDkISoBWFyPDhjbIR9fNfkd7CwI7Kbko7M6G R6ks3QF0pxFMTN0lVCFzIxCZ9v3PcW3YjOTViaTn01+10EUquZjGl/1GVM0SxJ4G 2wU8oipaTySoALLu1tR7jn7+FQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOql+tDg mFP1NbfKRonJ+kh/tG8WMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFFYwDQYJKoZIhvcNAQELBQADggEBAMLbL9NXy/ElKjyy 3TlYDnDIXb9+rEoIq016hw4QX5ecUr0mDRKhq0ZlvKY/Pvist2RjuwodHLA8sMEc mGqTC94hMLbGCWMWJIW/AwqgTLkpg5ded/Nq1e0oJIfXWkHqPd33p/FaVnomEfZo 8bHasuLayUwaEhhjRBAlTJ2dF76TR3hWBHfyy/zHhYQCAQ+whspGYo7b3T+ZeXSm chcOJ5MTAYPMnhM1cOKoBN4Lw+UEyQkGuWVvXA4CTE/t3BTFYnM9rSXfL3sxRL1D Dd32CMA8xYQtN+RiM0M1tLXTdWOy+Zfz9kPlI7Ty0OoIhDkCb9CljlkYF8YxDWIB tuTBNQg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:43 2025 by rpki-client