$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa File: B341065EBDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: xWZRsgmr1J1+VW78rxK2NEfNFZ/c5ZAOvmHYlWDZXUQ= Subject key identifier: 8E:71:5C:34:03:4D:A0:00:7E:4B:0F:AC:06:DF:38:B5:98:13:63:02 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1E43 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa Signing time: Fri 09 May 2025 08:07:34 +0000 ROA not before: Fri 09 May 2025 08:07:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55824 IP address blocks: 157.15.12.0/23 maxlen: 24 157.15.158.0/24 maxlen: 24 158.144.12.0/24 maxlen: 24 158.144.15.0/24 maxlen: 24 158.144.18.0/24 maxlen: 24 158.144.182.0/24 maxlen: 24 158.144.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7747 (0x1e43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 9 08:07:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681db7c6-4349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:e1:ab:12:4d:92:0d:93:1e:e5:e9:da:da: 44:6a:a2:43:59:9c:5c:0b:a4:82:ac:a2:51:53:c7: 27:ae:26:f8:33:9b:67:e7:54:7e:18:e5:6d:69:c9: 61:a3:8c:8f:2b:53:60:42:72:d3:9a:74:05:0e:97: 23:14:9c:47:90:77:c9:71:e6:ea:de:79:23:54:94: 15:68:a2:6d:22:c6:b8:6f:10:5a:e8:07:11:dc:a4: ce:ec:29:be:3c:aa:50:99:bb:0f:43:01:8d:53:3a: ad:ea:d0:3c:a3:e9:74:e8:49:b6:c2:9d:1c:84:a9: be:8e:89:c8:c9:41:ba:b7:2b:ac:f4:37:b4:ea:8a: e4:a7:6f:e8:13:20:d0:11:71:d6:07:56:c5:b9:8c: b4:df:22:5f:95:4b:fc:38:24:09:90:14:3c:05:d9: c9:ab:53:cb:c0:3b:5c:2f:4c:b2:20:09:06:8f:b6: d9:ad:1e:49:84:75:87:db:ed:ac:d0:80:53:e1:af: 77:7c:4f:85:b8:30:47:2b:94:50:fe:12:9a:a8:18: 5d:a2:a5:74:34:13:c5:5c:1b:8f:8b:12:f7:16:08: 2e:59:92:48:d8:ac:f6:90:ca:c3:d8:ed:58:fa:66: 90:fe:3f:ee:f9:a2:1d:35:74:b2:f3:57:b0:fb:ec: 5d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:71:5C:34:03:4D:A0:00:7E:4B:0F:AC:06:DF:38:B5:98:13:63:02 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.12.0/23 157.15.158.0/24 158.144.12.0/24 158.144.15.0/24 158.144.18.0/24 158.144.182.0/24 158.144.186.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:ee:ec:ba:07:ac:70:6b:de:0d:fc:ad:06:3c:ff:d9:67:62: 87:50:e7:6e:5f:a2:69:69:34:e2:31:16:2a:cb:ca:76:4e:27: 18:89:ef:1f:3b:9f:8b:82:12:b3:67:98:b2:59:44:c6:3b:3d: 81:29:7e:92:79:ff:7e:a1:d8:dd:b7:89:d1:e6:7e:a6:96:f5: 3a:fe:c0:76:ea:f8:df:5b:c6:55:a2:09:0f:ca:ab:e9:72:4e: f4:95:4a:fe:c0:62:6f:38:79:a0:c2:e6:16:f7:6a:54:a5:d9: c7:05:13:16:4b:f6:57:54:43:a9:d2:75:3a:8d:86:8e:c0:e8: 73:f2:7e:c8:31:90:c9:bd:4d:07:aa:71:97:52:b5:9b:4b:6c: 33:35:68:66:3e:9e:b1:47:ec:a4:ed:67:f9:c7:5d:52:af:65: 7c:2a:0e:c8:33:88:2e:a6:93:ce:f5:c5:15:a6:9f:8a:71:a2: ae:b7:73:14:a2:a4:f3:97:fa:4e:d4:2d:bd:14:ad:b4:33:53: 22:c7:89:9e:16:53:dc:eb:51:0a:77:d2:67:f6:e8:c9:30:dc: ad:d3:12:e9:32:b1:f7:49:1b:f0:2a:05:17:f1:d3:8b:e8:6e: e6:03:81:2e:38:d5:fd:9d:df:50:51:58:73:06:50:7f:56:d4: 4b:a6:83:06 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICHkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA5MDgwNzM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkYjdjNi00MzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UbhqxJNkg2THuXp2tpEaqJDWZxcC6SCrKJRU8cnrib4M5tn51R+GOVtaclh o4yPK1NgQnLTmnQFDpcjFJxHkHfJcebq3nkjVJQVaKJtIsa4bxBa6AcR3KTO7Cm+ PKpQmbsPQwGNUzqt6tA8o+l06Em2wp0chKm+jonIyUG6tyus9De06orkp2/oEyDQ EXHWB1bFuYy03yJflUv8OCQJkBQ8BdnJq1PLwDtcL0yyIAkGj7bZrR5JhHWH2+2s 0IBT4a93fE+FuDBHK5RQ/hKaqBhdoqV0NBPFXBuPixL3FgguWZJI2Kz2kMrD2O1Y +maQ/j/u+aIdNXSy81ew++xdawIDAQABo4ICuTCCArUwHQYDVR0OBBYEFI5xXDQD TaAAfksPrAbfOLWYE2MCMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjM0MTA2NUVC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBAGdDwwDBACdD54DBACekAwDBACekA8DBACekBIDBACekLYD BAGekLowDQYJKoZIhvcNAQELBQADggEBAC/u7LoHrHBr3g38rQY8/9lnYodQ525f omlpNOIxFirLynZOJxiJ7x87n4uCErNnmLJZRMY7PYEpfpJ5/36h2N23idHmfqaW 9Tr+wHbq+N9bxlWiCQ/Kq+lyTvSVSv7AYm84eaDC5hb3alSl2ccFExZL9ldUQ6nS dTqNho7A6HPyfsgxkMm9TQeqcZdStZtLbDM1aGY+nrFH7KTtZ/nHXVKvZXwqDsgz iC6mk871xRWmn4pxoq63cxSipPOX+k7ULb0UrbQzUyLHiZ4WU9zrUQp30mf26Mkw 3K3TEukysfdJG/AqBRfx04vobuYDgS441f2d31BRWHMGUH9W1EumgwY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:55 2025 by rpki-client