$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa File: ACFC76964A0E11EF91642A7AC4F9AE02.roa (raw, json) Hash identifier: Hc2nQWpYQRaKENnErggeFlb/7PAEm8QKAhDbzdl16TY= Subject key identifier: 0F:D3:C6:1A:2A:B1:11:9B:20:9D:4C:B8:B5:06:C5:8D:78:75:68:1D Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 012E Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa Signing time: Thu 03 Apr 2025 05:02:03 +0000 ROA not before: Thu 03 Apr 2025 05:02:03 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 152300 IP address blocks: 157.10.64.0/23 maxlen: 31 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4 Validity Not Before: Apr 3 05:02:03 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67ee164b-27f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:76:ac:0f:cd:3f:b7:7f:48:4b:d9:00:36: 65:6c:eb:61:43:81:94:3f:2b:d1:c5:8a:b2:5f:1d: 01:19:0e:30:7b:b7:0d:20:1e:79:50:1d:7f:ee:74: 60:3d:93:32:37:76:75:44:fe:72:fd:a2:8e:01:37: 44:0c:11:61:c3:11:19:47:7b:c1:6d:fe:9c:ac:87: f9:f8:84:b8:12:fc:82:f7:53:1c:60:a4:17:32:7b: e1:fa:29:5f:42:88:34:cd:46:c6:14:b0:df:d4:15: 0c:5c:1c:62:67:f4:a9:32:e5:e9:b9:31:89:a2:10: 71:f3:0e:f1:b2:9b:62:23:7c:77:cd:fb:67:e1:9e: 83:d7:f2:96:7e:a9:54:4b:50:fc:54:dd:32:30:be: c6:d1:4b:39:1f:8a:f0:d1:c6:f3:0d:50:80:82:58: 1a:44:c2:ca:00:76:4e:2d:7b:19:d3:14:8d:bb:90: 4e:3d:db:3e:3f:21:87:51:fd:0a:2a:09:bf:0f:03: 0b:c6:8a:53:f4:11:ba:31:a6:04:5e:fe:3a:26:12: 80:55:4e:c5:56:c5:80:b0:68:66:2f:61:ad:56:55: f8:08:8e:b0:50:aa:1c:b3:bf:22:7d:07:2d:55:60: 02:92:bf:99:57:75:3c:c4:d1:c7:25:10:09:a1:6a: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:C6:1A:2A:B1:11:9B:20:9D:4C:B8:B5:06:C5:8D:78:75:68:1D X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.64.0/23 Signature Algorithm: sha256WithRSAEncryption 79:43:87:c8:10:ce:a2:f0:92:41:8f:eb:ee:46:e3:8e:14:b2: 25:50:10:7e:4e:04:3f:22:5a:ba:40:4e:68:33:63:76:0f:d8: df:3d:ec:b5:bd:a4:2e:a4:8e:2f:fa:d2:85:8c:7b:9f:13:ee: e7:4c:4a:42:c8:0e:08:37:23:6b:a3:3e:12:d1:f0:ae:f8:31: c3:20:d7:1c:b4:bf:32:e4:d6:8a:cd:00:78:35:34:08:50:ae: f4:e3:82:0b:44:af:18:8c:0d:8f:84:56:8e:6d:8b:d1:e6:ea: 18:b2:45:0b:ff:5c:a5:67:29:65:fe:7f:77:58:27:fe:e0:34: ab:27:38:fd:76:00:7d:59:bc:80:88:dd:e6:f8:c5:dd:01:cd: 23:0e:a1:35:7d:6a:3a:0e:4b:bb:ea:0d:39:a7:64:7d:4b:21: ad:fc:fb:53:f8:57:e3:a7:6f:c5:88:ce:4d:4b:49:f9:70:dd: ab:5d:d1:01:5d:31:9f:5f:48:b4:a9:f0:a0:98:2b:00:bd:b8: 45:3d:71:e9:58:c7:00:c5:93:0e:29:bc:c8:45:09:1c:bf:35: 21:e9:b1:9a:cd:25:88:e6:95:cc:57:75:cd:53:a1:2c:16:94: f7:c7:74:d2:39:e1:ca:c8:ca:ee:f5:34:8a:2a:93:49:23:b5: e2:fe:89:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUwNDAzMDUwMjAzWhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTY0Yi0yN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxJ2rA/NP7d/SEvZADZlbOthQ4GUPyvRxYqyXx0BGQ4we7cNIB55UB1/7nRg PZMyN3Z1RP5y/aKOATdEDBFhwxEZR3vBbf6crIf5+IS4EvyC91McYKQXMnvh+ilf Qog0zUbGFLDf1BUMXBxiZ/SpMuXpuTGJohBx8w7xsptiI3x3zftn4Z6D1/KWfqlU S1D8VN0yML7G0Us5H4rw0cbzDVCAglgaRMLKAHZOLXsZ0xSNu5BOPds+PyGHUf0K Kgm/DwMLxopT9BG6MaYEXv46JhKAVU7FVsWAsGhmL2GtVlX4CI6wUKocs78ifQct VWACkr+ZV3U8xNHHJRAJoWpqOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA/Txhoq sRGbIJ1MuLUGxY14dWgdMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFEQzQvMkZBNDM0Q0FBQUE2MTFFRTk2M0FBNjNBQzRGOUFFMDIvQUNGQzc2OTY0 QTBFMTFFRjkxNjQyQTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCkAwDQYJKoZIhvcNAQELBQADggEBAHlDh8gQzqLwkkGP 6+5G444UsiVQEH5OBD8iWrpATmgzY3YP2N897LW9pC6kji/60oWMe58T7udMSkLI Dgg3I2ujPhLR8K74McMg1xy0vzLk1orNAHg1NAhQrvTjggtErxiMDY+EVo5ti9Hm 6hiyRQv/XKVnKWX+f3dYJ/7gNKsnOP12AH1ZvICI3eb4xd0BzSMOoTV9ajoOS7vq DTmnZH1LIa38+1P4V+Onb8WIzk1LSflw3atd0QFdMZ9fSLSp8KCYKwC9uEU9celY xwDFkw4pvMhFCRy/NSHpsZrNJYjmlcxXdc1ToSwWlPfHdNI54crIyu71NIoqk0kj teL+ifg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:51:07 2025 by rpki-client