$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa File: F0674762B6B611EE8EF4443AC4F9AE02.roa (raw, json) Hash identifier: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY= Subject key identifier: 4D:36:86:D3:64:9F:98:4B:61:00:1E:47:57:00:FF:35:03:88:D9:E8 Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: D2 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa Signing time: Tue 11 Feb 2025 04:58:09 +0000 ROA not before: Tue 11 Feb 2025 04:58:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 147006 IP address blocks: 157.10.242.0/23 maxlen: 23 157.10.242.0/24 maxlen: 24 157.10.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E Validity Not Before: Feb 11 04:58:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aad8e0-7978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:04:df:c6:bf:2e:d5:78:a3:ef:c1:ef:98: 84:56:9c:c1:35:df:04:de:49:42:1d:0d:d4:ae:09: 9b:63:66:66:99:04:90:f3:80:7b:a9:f5:ab:92:3b: 68:d4:ab:08:1f:da:94:21:90:7c:9c:fb:1d:1f:f7: 64:ad:51:77:4a:be:1f:bc:17:b0:0e:26:91:a3:3b: 39:e0:a8:ed:c0:26:dd:37:66:1f:65:43:58:2d:d9: 89:8b:a3:85:d9:be:fe:91:d5:4b:01:3f:41:13:ca: 65:0e:2b:13:fb:bb:ac:8c:4b:ae:7f:20:16:6e:29: 97:3d:9f:0c:94:0c:c7:0b:c1:e2:e0:ae:f6:57:9e: e2:f6:8e:a6:52:aa:2c:a3:9d:42:65:c3:d7:ff:d6: 19:d0:51:91:c3:de:ab:96:fc:16:b8:4b:d3:d3:ee: e8:da:6d:31:e8:68:ec:77:3f:e9:d2:0a:9b:ac:96: 0f:f8:9f:d2:94:6b:35:f8:8c:ed:4e:17:77:42:47: c1:fd:45:58:05:7b:39:58:ff:28:0a:e1:b7:1e:53: 97:e0:ed:ce:77:57:b9:ff:b8:8c:bb:dc:ab:cc:1f: b2:d2:45:ad:ef:8d:b9:94:ab:37:77:86:4f:56:74: 33:3e:1e:42:c0:38:5c:18:f3:ea:a5:ea:39:7f:f0: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:36:86:D3:64:9F:98:4B:61:00:1E:47:57:00:FF:35:03:88:D9:E8 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.242.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:8b:ad:cb:fa:79:1e:07:90:6f:9b:96:07:5e:3c:bc:60:98: 47:3a:25:4d:e3:bd:89:23:7c:71:f2:5e:80:69:ea:86:e5:30: a4:67:17:83:4e:9c:f1:ee:bb:84:e6:95:b6:b6:09:4a:19:91: b8:fa:83:ec:22:0e:f1:ab:51:65:76:c7:61:89:81:87:b6:fb: ec:a2:18:b7:3a:45:d1:3f:97:7d:b9:15:5a:06:92:9c:71:e3: 32:be:29:2e:1b:19:63:31:e7:39:96:f4:64:d5:35:8f:7c:1f: c7:8a:88:d1:18:1a:08:45:26:58:e4:d9:56:e2:6b:c3:a8:fb: ef:bb:73:61:ac:be:6c:43:94:f3:f7:9f:f4:f4:58:04:07:93: 89:69:4a:62:b6:be:0f:da:3e:34:30:b8:eb:50:7b:d9:6c:be: 98:bd:1f:75:61:6b:7e:3d:1a:9c:1b:01:19:fe:82:af:e5:b1: 51:46:20:a0:f6:01:80:28:68:5c:75:c9:7f:95:de:0b:c5:74: 16:c5:2f:57:5b:8b:4d:35:f9:6b:a0:ff:de:80:9b:0d:c1:10: ba:91:cd:23:38:87:df:a5:d4:83:d0:93:93:8a:cc:fb:04:9f: f6:f0:fb:5f:cb:39:21:3d:50:25:69:9f:1d:db:d8:68:71:61: d5:6e:f4:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwMjExMDQ1ODA5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhZDhlMC03OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDAE38a/LtV4o+/B75iEVpzBNd8E3klCHQ3UrgmbY2ZmmQSQ84B7qfWrkjto 1KsIH9qUIZB8nPsdH/dkrVF3Sr4fvBewDiaRozs54KjtwCbdN2YfZUNYLdmJi6OF 2b7+kdVLAT9BE8plDisT+7usjEuufyAWbimXPZ8MlAzHC8Hi4K72V57i9o6mUqos o51CZcPX/9YZ0FGRw96rlvwWuEvT0+7o2m0x6Gjsdz/p0gqbrJYP+J/SlGs1+Izt Thd3QkfB/UVYBXs5WP8oCuG3HlOX4O3Od1e5/7iMu9yrzB+y0kWt7425lKs3d4ZP VnQzPh5CwDhcGPPqpeo5f/AQaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE02htNk n5hLYQAeR1cA/zUDiNnoMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5N0UvRjIxMjEyRkNCNjlBMTFFRThEOERGNjBFQzRGOUFFMDIvRjA2NzQ3NjJC NkI2MTFFRThFRjQ0NDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCvIwDQYJKoZIhvcNAQELBQADggEBAEuLrcv6eR4HkG+b lgdePLxgmEc6JU3jvYkjfHHyXoBp6oblMKRnF4NOnPHuu4Tmlba2CUoZkbj6g+wi DvGrUWV2x2GJgYe2++yiGLc6RdE/l325FVoGkpxx4zK+KS4bGWMx5zmW9GTVNY98 H8eKiNEYGghFJljk2Vbia8Oo+++7c2GsvmxDlPP3n/T0WAQHk4lpSmK2vg/aPjQw uOtQe9lsvpi9H3Vha349GpwbARn+gq/lsVFGIKD2AYAoaFx1yX+V3gvFdBbFL1db i001+Wug/96Amw3BELqRzSM4h9+l1IPQk5OKzPsEn/bw+1/LOSE9UCVpnx3b2Ghx YdVu9Ms= -----END CERTIFICATE-----Generated at Tue Apr 8 17:36:52 2025 by rpki-client