$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa File: D52B5F46BB4E11EE9496B14FC4F9AE02.roa (raw, json) Hash identifier: N3RiVvERa467r+WVdZBex2Oj1FV0US5QnHplB1wn8rw= Subject key identifier: 67:AD:E1:EF:67:73:78:F2:A2:49:03:B1:FD:74:8C:30:7A:06:D8:30 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1DA7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa Signing time: Thu 08 May 2025 15:53:37 +0000 ROA not before: Thu 08 May 2025 15:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151719 IP address blocks: 157.15.10.0/23 maxlen: 24 157.20.180.0/23 maxlen: 24 157.66.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7591 (0x1da7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd381-d519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:4b:ba:ed:8f:b1:55:55:6b:59:2d:33:1d: b6:8a:5f:24:4e:23:5b:bc:cc:f5:c0:e7:85:df:ff: 90:a2:c2:8b:4c:01:81:57:da:93:4c:ec:1c:b5:98: 95:32:17:dd:4d:8f:b0:67:91:8a:e9:14:81:dc:39: 4f:1f:ef:0f:b1:b7:e9:08:16:15:3f:8a:bb:ea:28: ed:a4:4b:ed:f4:19:8c:b2:c5:d5:b9:dc:12:dc:c1: 00:73:a5:62:bd:23:ff:61:b8:a7:02:90:82:c6:b3: da:4c:82:e7:b2:fa:1f:8f:b6:90:c2:e9:cc:1f:78: f6:bb:cd:27:05:f9:8d:f4:4f:63:f1:2c:0a:64:bb: ee:c0:73:7d:b4:8c:bc:7e:c0:0a:9f:1d:1e:3d:9e: ae:bf:10:aa:09:28:3e:10:77:1f:27:f7:be:74:cd: 88:9c:37:20:48:be:2b:af:bf:79:ae:7d:39:69:e2: 5f:44:1e:fc:f2:e2:64:fe:00:0b:55:ac:3e:0a:62: dc:c7:19:2f:95:d0:27:c1:76:64:ca:04:53:a6:ea: 36:34:72:6a:fc:dc:f5:bf:f0:51:c4:3d:3b:e2:2b: a3:5d:d9:91:63:04:d2:6a:1b:0a:37:3c:1c:ef:3e: cc:f4:cc:f3:47:0c:66:b9:1a:2a:13:25:6a:45:9a: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:E1:EF:67:73:78:F2:A2:49:03:B1:FD:74:8C:30:7A:06:D8:30 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D52B5F46BB4E11EE9496B14FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.10.0/23 157.20.180.0/23 157.66.118.0/23 Signature Algorithm: sha256WithRSAEncryption 65:2d:c6:90:65:37:f5:7e:71:21:4f:16:6c:b7:23:97:75:07: 4a:89:9b:51:51:27:97:ab:53:5c:a9:72:e4:53:f7:c9:ad:aa: 00:c5:dd:c0:1c:84:fa:27:c1:bb:b2:fe:f5:af:3a:2b:c9:c9: 33:8c:52:d8:73:91:0b:c0:d7:31:ac:18:31:69:87:a0:a5:30: 6e:52:4d:f7:9e:a4:34:86:9f:97:21:6d:50:e8:e3:2e:4c:ed: a7:83:4f:4c:87:d8:93:2b:ff:91:db:d6:d6:1a:77:1d:e6:f6: 5c:a5:a6:9d:a2:19:50:c2:7d:cd:8c:73:44:f6:ed:40:67:19: 19:eb:5a:16:95:d8:79:73:6d:a5:f8:18:54:f6:83:07:61:9f: 90:f9:c7:21:bc:36:9d:ac:81:52:9a:da:79:b7:b5:4e:5b:fb: a9:29:5b:67:b7:d7:96:2f:3e:00:23:51:36:11:61:2b:da:95: af:75:9a:7f:2c:a0:e1:94:9e:9b:3f:29:94:c7:51:d6:29:b6: a7:0e:51:88:b6:0c:46:9c:4e:c4:00:84:a8:a5:6f:7f:be:0a: 7f:10:a3:8a:b2:5f:ec:4c:2c:83:15:e5:7d:aa:da:d7:d1:40: c8:38:9f:47:1a:f0:36:e7:d3:75:22:48:05:b7:b0:ae:c8:e8: d3:b2:f9:c9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICHacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZDM4MS1kNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYpLuu2PsVVVa1ktMx22il8kTiNbvMz1wOeF3/+QosKLTAGBV9qTTOwctZiV MhfdTY+wZ5GK6RSB3DlPH+8PsbfpCBYVP4q76ijtpEvt9BmMssXVudwS3MEAc6Vi vSP/YbinApCCxrPaTILnsvofj7aQwunMH3j2u80nBfmN9E9j8SwKZLvuwHN9tIy8 fsAKnx0ePZ6uvxCqCSg+EHcfJ/e+dM2InDcgSL4rr795rn05aeJfRB788uJk/gAL Vaw+CmLcxxkvldAnwXZkygRTpuo2NHJq/Nz1v/BRxD074iujXdmRYwTSahsKNzwc 7z7M9MzzRwxmuRoqEyVqRZrSfwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGet4e9n c3jyokkDsf10jDB6BtgwMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDUyQjVGNDZC QjRFMTFFRTk0OTZCMTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdDwoDBAGdFLQDBAGdQnYwDQYJKoZIhvcNAQELBQADggEB AGUtxpBlN/V+cSFPFmy3I5d1B0qJm1FRJ5erU1ypcuRT98mtqgDF3cAchPonwbuy /vWvOivJyTOMUthzkQvA1zGsGDFph6ClMG5STfeepDSGn5chbVDo4y5M7aeDT0yH 2JMr/5Hb1tYadx3m9lylpp2iGVDCfc2Mc0T27UBnGRnrWhaV2HlzbaX4GFT2gwdh n5D5xyG8Np2sgVKa2nm3tU5b+6kpW2e315YvPgAjUTYRYSvala91mn8soOGUnps/ KZTHUdYptqcOUYi2DEacTsQAhKilb3++Cn8Qo4qyX+xMLIMV5X2q2tfRQMg4n0ca 8Dbn03UiSAW3sK7I6NOy+ck= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:25 2025 by rpki-client