$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa File: CBF43C10CEE811EEB7FCAA55C4F9AE02.roa (raw, json) Hash identifier: fDaIpXF/aFix9wT0GQ1y73+H146S/LS1SxG+2lg7F8U= Subject key identifier: 42:E8:46:FA:84:49:71:B0:C6:48:A4:B9:08:15:F6:DE:6E:33:C6:A1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DAF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa Signing time: Thu 08 May 2025 15:53:43 +0000 ROA not before: Thu 08 May 2025 15:53:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151734 IP address blocks: 157.15.202.0/23 maxlen: 24 157.20.211.0/24 maxlen: 24 160.22.108.0/23 maxlen: 24 168.220.232.0/22 maxlen: 24 168.220.236.0/22 maxlen: 24 168.220.240.0/22 maxlen: 24 168.220.244.0/22 maxlen: 24 168.220.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7599 (0x1daf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd387-99f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:3e:ae:da:9d:14:0a:7a:64:c1:ac:fa:51: 96:5a:2c:ca:02:1f:e7:80:51:fb:4f:53:45:c0:42: 8b:21:f8:0d:50:32:33:f8:23:c1:be:2b:68:f9:19: 22:b3:b7:4d:d9:7f:e3:93:5c:1a:ac:8a:95:4a:91: ac:81:2d:e3:2a:aa:d7:96:18:04:b7:89:ac:72:59: 0a:cf:55:de:4f:59:5b:80:a8:73:f8:ce:0b:20:60: f0:41:be:df:80:06:7f:9b:e3:07:a4:18:69:31:98: d7:6e:04:c9:c1:71:7e:90:fc:d3:2b:5d:06:6e:b6: 97:8e:ad:01:44:4c:d6:55:b2:f8:99:b0:53:93:53: 6e:98:91:b8:07:af:be:7b:32:bc:fe:16:b9:f1:d1: 79:b1:0d:a9:10:e2:ab:d8:bc:49:23:40:76:35:bb: 79:70:93:07:73:dc:68:84:0c:d6:c7:35:c6:3a:83: 6e:b8:bb:a5:50:41:bc:e5:65:c0:a1:50:88:72:db: f3:28:3c:4f:38:72:68:1c:b0:d1:b0:f9:cf:16:94: 33:fc:a6:f5:23:53:a4:9c:44:e6:08:b2:18:83:8b: f3:49:58:53:23:07:67:e3:4a:fc:db:bd:1f:a2:79: c8:0b:23:fa:93:c0:6d:c7:89:43:45:b9:05:2c:ee: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E8:46:FA:84:49:71:B0:C6:48:A4:B9:08:15:F6:DE:6E:33:C6:A1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CBF43C10CEE811EEB7FCAA55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.202.0/23 157.20.211.0/24 160.22.108.0/23 168.220.232.0-168.220.251.255 Signature Algorithm: sha256WithRSAEncryption 7e:45:d7:84:52:3d:5d:83:f8:06:23:dd:b4:2e:07:d6:2e:12: 51:5e:3c:9e:c8:22:17:9a:72:4e:19:70:3c:f6:14:ec:c5:6a: 30:99:8d:33:f7:d6:4f:6c:b1:d0:3d:aa:71:df:ef:00:00:b6: d2:2a:12:49:83:12:50:4b:ac:94:58:ab:3c:cf:a2:8f:bd:a5: c9:94:9e:d6:65:f7:4d:62:bb:83:b8:8e:eb:78:c7:74:d9:8f: f6:78:70:98:9e:1b:0d:98:bc:b2:3e:2c:cb:34:c0:d0:6a:b1: ad:22:d6:e9:7c:d0:94:6a:75:2f:f3:26:71:31:68:5c:d2:e5: 32:ed:f2:66:2d:0c:fc:73:a9:9c:b4:db:d6:91:e5:b3:e4:3b: 06:aa:67:12:e4:1e:77:66:11:eb:a4:2c:fa:7a:75:eb:ff:25: 5d:d5:9c:fb:cb:77:ee:4c:d7:f3:01:61:db:fe:02:fa:e3:3d: 91:b3:54:a3:11:37:16:4a:29:3c:87:20:91:63:b6:a7:7c:6e: 97:83:7a:bf:93:db:73:2d:5e:3a:d0:43:65:c5:be:8f:7d:16: 32:06:05:0a:16:15:15:32:c1:3e:b9:49:e0:de:3b:7a:74:c9: ca:70:58:07:b3:d9:4a:7e:bb:4e:19:5e:14:20:9f:f4:3f:84: 02:f2:f0:1e -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICHa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4Ny05OWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH4+rtqdFAp6ZMGs+lGWWizKAh/ngFH7T1NFwEKLIfgNUDIz+CPBvito+Rki s7dN2X/jk1warIqVSpGsgS3jKqrXlhgEt4msclkKz1XeT1lbgKhz+M4LIGDwQb7f gAZ/m+MHpBhpMZjXbgTJwXF+kPzTK10GbraXjq0BREzWVbL4mbBTk1NumJG4B6++ ezK8/ha58dF5sQ2pEOKr2LxJI0B2Nbt5cJMHc9xohAzWxzXGOoNuuLulUEG85WXA oVCIctvzKDxPOHJoHLDRsPnPFpQz/Kb1I1OknETmCLIYg4vzSVhTIwdn40r8270f onnICyP6k8Btx4lDRbkFLO4ENwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFELoRvqE SXGwxkikuQgV9t5uM8ahMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0JGNDNDMTBD RUU4MTFFRUI3RkNBQTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAGdD8oDBACdFNMDBAGgFmwwDAMEA6jc6AMEAqjc+DANBgkq hkiG9w0BAQsFAAOCAQEAfkXXhFI9XYP4BiPdtC4H1i4SUV48nsgiF5pyThlwPPYU 7MVqMJmNM/fWT2yx0D2qcd/vAAC20ioSSYMSUEuslFirPM+ij72lyZSe1mX3TWK7 g7iO63jHdNmP9nhwmJ4bDZi8sj4syzTA0GqxrSLW6XzQlGp1L/MmcTFoXNLlMu3y Zi0M/HOpnLTb1pHls+Q7BqpnEuQed2YR66Qs+np16/8lXdWc+8t37kzX8wFh2/4C +uM9kbNUoxE3FkopPIcgkWO2p3xul4N6v5Pbcy1eOtBDZcW+j30WMgYFChYVFTLB PrlJ4N47enTJynBYB7PZSn67ThleFCCf9D+EAvLwHg== -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:22 2025 by rpki-client