$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CFAC55CE2B311EFA9179E14C4F9AE02.roa File: 9CFAC55CE2B311EFA9179E14C4F9AE02.roa (raw, json) Hash identifier: f3QpiareERlTNt4km5xipGzTiwcCKLwtT8I6geXaU+4= Subject key identifier: D4:00:1E:DF:0A:13:50:18:CD:99:6F:03:DB:D4:12:59:83:01:E5:84 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1CBA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CFAC55CE2B311EFA9179E14C4F9AE02.roa Signing time: Mon 10 Feb 2025 07:50:33 +0000 ROA not before: Mon 10 Feb 2025 07:50:33 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135760 IP address blocks: 157.66.108.0/23 maxlen: 23 157.66.108.0/24 maxlen: 24 160.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7354 (0x1cba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Feb 10 07:50:33 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67a9afc9-cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:d2:ba:37:a7:62:ad:e7:9c:b9:2e:64:29: 0d:f0:09:cd:75:1d:42:53:55:b5:7d:4a:53:0a:b7: 24:1c:31:2d:f3:16:2d:f0:8e:3d:b5:fe:9a:f2:1f: 92:28:68:b9:c5:f3:06:3a:23:82:e3:f3:61:01:2c: 15:58:06:03:8b:3c:2c:cf:e6:12:70:47:5f:ba:ba: 1f:cf:05:b2:05:89:a6:80:7a:a1:7f:46:44:da:a4: 4e:bc:87:31:3f:04:43:3c:18:74:f4:10:a5:98:6d: 92:b8:79:a3:ee:70:10:29:08:57:84:50:52:42:7f: e0:21:50:bb:cc:cd:6a:fb:35:ca:8a:6b:e4:f0:aa: b9:13:31:22:cf:f7:21:8f:4b:16:f5:87:a6:08:b1: 06:d0:dc:84:53:e7:6a:f1:9e:b7:3b:c7:99:7c:a7: f7:9b:fe:f0:cb:e4:d9:e7:49:eb:aa:e2:21:7c:17: ab:c3:0e:51:01:53:f2:14:95:f3:7e:4e:32:15:29: 0d:aa:31:3a:b0:c3:5b:45:d0:56:0f:71:38:14:57: 4d:e2:42:7b:3a:a4:b0:50:17:c3:91:75:d1:ad:fb: ad:e9:62:0d:ca:f7:42:70:47:22:4e:ad:e1:4c:43: 7b:68:28:d6:2d:92:2c:6b:cf:3a:2d:12:b4:b2:56: 80:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:00:1E:DF:0A:13:50:18:CD:99:6F:03:DB:D4:12:59:83:01:E5:84 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CFAC55CE2B311EFA9179E14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.108.0/23 160.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:98:25:e9:48:a6:49:d3:51:72:67:9f:1b:b3:89:be:79:c0: e3:e1:45:c8:aa:12:0a:f1:09:31:60:7f:dd:ea:b5:16:9b:71: 41:11:4a:fb:d1:36:04:e6:07:04:2a:8f:c3:f3:ba:70:95:3b: 98:8a:f8:0e:ab:ff:6c:a0:79:37:57:cf:3f:f6:25:65:3d:44: 7c:2e:1b:a9:22:ac:d1:73:a9:c1:e9:e8:a2:37:b7:76:a2:85: f4:de:fa:15:c5:c5:6c:6f:8f:56:ec:6b:3b:02:c5:fc:44:da: c7:0e:62:c6:45:5e:17:4d:4f:d8:ab:6a:6b:2e:64:7a:d0:52: 11:e0:85:f6:97:d9:e9:38:f9:f7:98:3f:48:20:af:61:4a:c8: ca:a8:ef:80:81:32:27:cd:45:84:2a:74:eb:7e:97:09:c1:82: f5:42:1a:4f:ef:20:27:1f:e3:7a:29:c2:46:49:14:0b:b8:e4: 3a:01:d9:10:82:54:78:d6:77:f8:7d:b8:da:dc:fd:6f:98:bb: 0b:4b:24:ae:cf:fd:28:c6:e6:28:e6:f9:da:28:b7:d6:f0:54: c5:d5:6c:65:9c:c1:b4:e8:fd:a5:f6:02:51:61:a8:0d:c8:b2: d2:e7:71:4c:11:e8:87:9a:cb:07:c9:72:48:af:c4:d9:e4:5e: e4:44:9e:2b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwMjEwMDc1MDMzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E5YWZjOS1jZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8drSujenYq3nnLkuZCkN8AnNdR1CU1W1fUpTCrckHDEt8xYt8I49tf6a8h+S KGi5xfMGOiOC4/NhASwVWAYDizwsz+YScEdfurofzwWyBYmmgHqhf0ZE2qROvIcx PwRDPBh09BClmG2SuHmj7nAQKQhXhFBSQn/gIVC7zM1q+zXKimvk8Kq5EzEiz/ch j0sW9YemCLEG0NyEU+dq8Z63O8eZfKf3m/7wy+TZ50nrquIhfBerww5RAVPyFJXz fk4yFSkNqjE6sMNbRdBWD3E4FFdN4kJ7OqSwUBfDkXXRrfut6WINyvdCcEciTq3h TEN7aCjWLZIsa886LRK0slaAbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNQAHt8K E1AYzZlvA9vUElmDAeWEMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUNGQUM1NUNF MkIzMTFFRkE5MTc5RTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGdQmwDBACgFoMwDQYJKoZIhvcNAQELBQADggEBAJqYJelI pknTUXJnnxuzib55wOPhRciqEgrxCTFgf93qtRabcUERSvvRNgTmBwQqj8PzunCV O5iK+A6r/2ygeTdXzz/2JWU9RHwuG6kirNFzqcHp6KI3t3aihfTe+hXFxWxvj1bs azsCxfxE2scOYsZFXhdNT9iramsuZHrQUhHghfaX2ek4+feYP0ggr2FKyMqo74CB MifNRYQqdOt+lwnBgvVCGk/vICcf43opwkZJFAu45DoB2RCCVHjWd/h9uNrc/W+Y uwtLJK7P/SjG5ijm+doot9bwVMXVbGWcwbTo/aX2AlFhqA3IstLncUwR6IeaywfJ ckivxNnkXuREnis= -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:57 2025 by rpki-client