$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa File: ABA87AC0C58311EEBC410F36C4F9AE02.roa (raw, json) Hash identifier: RdirFNsXIxsmngwnDZFz30gqbppZJNVrnfSGbIHZWNs= Subject key identifier: 7B:AC:E4:5D:D2:65:CF:DC:3B:6D:59:26:C0:2A:28:32:A0:C1:3C:14 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EB6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa Signing time: Thu 19 Jun 2025 06:41:49 +0000 ROA not before: Thu 19 Jun 2025 06:41:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138771 IP address blocks: 157.15.146.0/24 maxlen: 24 157.15.147.0/24 maxlen: 24 165.99.84.0/24 maxlen: 24 165.99.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7862 (0x1eb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 19 06:41:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6853b12d-0d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:d4:16:27:c3:1d:9f:4e:63:8c:42:6f:42: d1:13:88:d5:b4:46:34:70:fa:fb:4f:da:1e:fc:72: f1:c6:e4:71:f6:b5:13:96:15:2e:e0:40:6c:76:5c: 57:59:08:99:7f:97:7f:d2:da:bb:86:22:b4:fa:a6: 44:cb:39:43:7d:7f:79:7e:b6:61:ff:58:a1:11:8f: a6:15:71:6f:a7:ce:72:4f:54:ec:8e:27:4c:32:1b: d7:56:f9:31:ac:01:05:a5:e1:1b:cd:76:45:a2:96: 67:32:5c:63:7d:82:eb:69:e9:0e:34:b1:61:c0:6c: 48:8a:d3:cd:11:42:4c:43:92:8c:a1:24:85:1b:59: 2d:d6:ba:04:77:f0:62:1a:69:39:be:ff:0e:e4:a9: 9b:78:bc:90:c3:7a:39:f8:84:81:8d:39:20:48:1a: 4c:0a:d0:ce:92:9e:ac:87:db:37:67:cf:3b:cf:fa: 36:af:68:66:a2:c0:3d:14:69:90:bf:ba:c6:92:9d: 39:47:77:24:00:db:32:10:e9:61:aa:4e:cc:a3:8e: e6:f9:b7:07:f3:30:ed:7f:01:55:48:e7:cc:0b:9f: 3e:01:75:17:bf:98:c2:77:3a:32:4a:5c:f2:92:cc: 83:7a:11:36:5c:fc:f2:64:f6:b6:a5:1c:4f:c5:17: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:E4:5D:D2:65:CF:DC:3B:6D:59:26:C0:2A:28:32:A0:C1:3C:14 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ABA87AC0C58311EEBC410F36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.146.0/23 165.99.84.0/23 Signature Algorithm: sha256WithRSAEncryption 28:29:32:2e:66:77:04:23:7d:6b:98:07:52:21:36:a6:f9:74: f4:45:df:87:a5:6b:25:f7:4e:eb:c4:3a:0a:cc:97:fe:23:f2: 75:69:af:b6:90:0c:8c:bf:f1:08:80:80:0a:73:10:31:09:9d: c7:12:ff:a3:c7:35:6e:01:12:c0:79:b1:e6:12:c7:78:ea:eb: 7c:1e:ff:84:28:76:c7:d0:05:bb:0b:40:18:b4:3c:37:1d:23: 28:11:92:96:92:e7:a1:1c:94:80:df:98:b1:c3:fe:bd:a5:e3: fa:d4:11:83:6b:fe:cc:30:83:eb:2a:75:84:f3:6e:f9:87:7a: ab:f5:b7:91:1a:45:44:26:0e:2c:88:0b:98:50:84:0d:43:7e: d9:70:77:f8:00:bf:5f:7f:a7:57:98:2e:f9:95:21:83:32:4b: 1e:99:59:c8:4e:2a:78:8f:fa:24:d2:49:33:71:a8:7b:85:c8: 28:c5:69:52:6b:9e:da:7b:bc:cb:cf:8a:0f:25:2b:56:2d:c1: c5:ef:1a:aa:34:19:9d:74:f4:14:8e:fc:d4:24:db:d0:99:3c: 23:1d:0c:4b:84:e6:e7:9b:9d:da:00:da:18:2f:e7:57:54:80: 1e:ab:88:1e:fb:47:13:33:df:d0:75:1e:be:24:79:ef:82:b1: 5a:b6:91:98 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjE5MDY0MTQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzYjEyZC0wZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TnUFifDHZ9OY4xCb0LRE4jVtEY0cPr7T9oe/HLxxuRx9rUTlhUu4EBsdlxX WQiZf5d/0tq7hiK0+qZEyzlDfX95frZh/1ihEY+mFXFvp85yT1TsjidMMhvXVvkx rAEFpeEbzXZFopZnMlxjfYLraekONLFhwGxIitPNEUJMQ5KMoSSFG1kt1roEd/Bi Gmk5vv8O5KmbeLyQw3o5+ISBjTkgSBpMCtDOkp6sh9s3Z887z/o2r2hmosA9FGmQ v7rGkp05R3ckANsyEOlhqk7Mo47m+bcH8zDtfwFVSOfMC58+AXUXv5jCdzoySlzy ksyDehE2XPzyZPa2pRxPxRc6/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHus5F3S Zc/cO21ZJsAqKDKgwTwUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUJBODdBQzBD NTgzMTFFRUJDNDEwRjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGdD5IDBAGlY1QwDQYJKoZIhvcNAQELBQADggEBACgpMi5m dwQjfWuYB1IhNqb5dPRF34elayX3TuvEOgrMl/4j8nVpr7aQDIy/8QiAgApzEDEJ nccS/6PHNW4BEsB5seYSx3jq63we/4QodsfQBbsLQBi0PDcdIygRkpaS56EclIDf mLHD/r2l4/rUEYNr/swwg+sqdYTzbvmHeqv1t5EaRUQmDiyIC5hQhA1Dftlwd/gA v19/p1eYLvmVIYMySx6ZWchOKniP+iTSSTNxqHuFyCjFaVJrntp7vMvPig8lK1Yt wcXvGqo0GZ109BSO/NQk29CZPCMdDEuE5uebndoA2hgv51dUgB6riB77RxMz39B1 Hr4kee+CsVq2kZg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:34 2025 by rpki-client