$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa File: 2940424A03EC11F08B00B20AC4F9AE02.roa (raw, json) Hash identifier: 6rsEriGw4XNsZYgQEu7QwE+8qxja7wNDe/5yNwEeC2M= Subject key identifier: 42:55:55:77:3A:06:28:6B:6D:55:D6:CC:F2:97:76:41:3F:F4:D2:73 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1CE6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa Signing time: Tue 18 Mar 2025 11:28:49 +0000 ROA not before: Tue 18 Mar 2025 11:28:49 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141309 IP address blocks: 157.15.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7398 (0x1ce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 18 11:28:49 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67d958f1-1e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:42:72:cd:7c:a6:3f:ab:02:bf:33:1a:06: f5:72:ad:65:ea:15:08:77:cd:ed:62:dd:61:b1:31: 55:75:60:e4:24:44:88:6c:f5:81:14:46:3a:a2:77: bf:72:55:60:de:84:74:d7:43:36:15:33:dc:ce:6f: cd:5c:9f:0b:44:27:b8:ad:ec:23:ec:1c:e0:51:06: 91:3f:b1:22:45:5d:ad:d7:60:f4:f3:ab:b5:1b:86: f2:4b:5a:81:62:21:b7:80:36:9e:cb:b2:58:af:f7: 08:13:fc:dc:06:f8:8e:30:77:84:3f:c5:e2:bc:ed: 6d:47:39:e3:e2:ef:3d:cd:7d:8e:be:e6:66:ef:ec: c3:a6:ec:d6:c7:6a:5a:d7:da:0f:8b:d8:fc:fb:24: 97:d3:cd:34:38:d4:2b:47:3c:c2:53:18:3b:fe:54: da:89:84:34:de:f4:d8:9d:78:e7:9c:79:0c:c8:47: b3:1a:63:ee:c9:50:7b:7f:8f:c5:9a:37:19:94:f7: 3b:cd:72:e1:c8:c5:24:1e:4a:74:fb:a2:b5:94:69: fc:43:62:f7:cb:19:4a:2c:1b:d3:70:6f:53:4a:23: 71:a8:05:f1:b1:fa:d6:22:b0:a0:91:76:c7:7b:b1: d7:75:78:99:99:a4:3b:97:13:e5:0a:2a:2e:78:4e: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:55:77:3A:06:28:6B:6D:55:D6:CC:F2:97:76:41:3F:F4:D2:73 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2940424A03EC11F08B00B20AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.34.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:3f:81:2a:4f:96:e2:43:bc:48:df:ac:60:d2:8f:39:66:6f: 38:ff:18:69:a6:c7:f6:3c:ae:cd:85:cc:07:63:aa:9a:a1:2c: c9:c8:4c:d7:b3:db:64:51:f8:65:88:fb:56:10:e0:cc:b1:f5: 32:45:fa:b3:e3:fc:fe:28:5e:dc:64:31:1a:41:4d:ce:76:89: fb:c3:e1:3c:2b:42:ed:2a:63:49:e5:e7:27:fb:8b:8a:df:71: 49:4c:47:f0:22:6e:f8:c5:d2:71:83:a0:9f:ba:66:ba:4a:eb: b2:79:8e:58:01:82:b3:de:ca:01:63:c5:7f:43:d8:e4:dc:15: a2:30:73:ca:80:3a:3b:98:28:c6:30:a2:6c:4b:45:4e:53:94: 10:8e:d2:cf:64:59:16:7f:0d:17:cb:70:db:63:bc:5c:94:97: 81:cd:ac:85:ae:18:b2:b7:14:95:5b:c4:b3:b9:62:eb:c8:cd: 26:6b:29:42:e7:ea:ae:13:21:20:9f:fd:9a:70:6e:53:2d:89: 39:2c:b2:33:4d:e8:28:d8:c4:f1:6f:ec:d6:87:8b:b4:06:22: 68:41:db:fe:54:aa:97:62:39:ca:13:ca:25:4f:9d:0b:83:26: 51:16:d3:26:92:6a:55:0b:75:0f:95:dc:0a:e0:18:dc:2f:da: 02:16:97:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwMzE4MTEyODQ5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q5NThmMS0xZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn81Ccs18pj+rAr8zGgb1cq1l6hUId83tYt1hsTFVdWDkJESIbPWBFEY6one/ clVg3oR010M2FTPczm/NXJ8LRCe4rewj7BzgUQaRP7EiRV2t12D086u1G4byS1qB YiG3gDaey7JYr/cIE/zcBviOMHeEP8XivO1tRznj4u89zX2OvuZm7+zDpuzWx2pa 19oPi9j8+ySX0800ONQrRzzCUxg7/lTaiYQ03vTYnXjnnHkMyEezGmPuyVB7f4/F mjcZlPc7zXLhyMUkHkp0+6K1lGn8Q2L3yxlKLBvTcG9TSiNxqAXxsfrWIrCgkXbH e7HXdXiZmaQ7lxPlCioueE7XqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEJVVXc6 BihrbVXWzPKXdkE/9NJzMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjk0MDQyNEEw M0VDMTFGMDhCMDBCMjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdDyIwDQYJKoZIhvcNAQELBQADggEBACo/gSpPluJDvEjf rGDSjzlmbzj/GGmmx/Y8rs2FzAdjqpqhLMnITNez22RR+GWI+1YQ4Myx9TJF+rPj /P4oXtxkMRpBTc52ifvD4TwrQu0qY0nl5yf7i4rfcUlMR/AibvjF0nGDoJ+6ZrpK 67J5jlgBgrPeygFjxX9D2OTcFaIwc8qAOjuYKMYwomxLRU5TlBCO0s9kWRZ/DRfL cNtjvFyUl4HNrIWuGLK3FJVbxLO5YuvIzSZrKULn6q4TISCf/ZpwblMtiTkssjNN 6CjYxPFv7NaHi7QGImhB2/5UqpdiOcoTyiVPnQuDJlEW0yaSalULdQ+V3ArgGNwv 2gIWl2g= -----END CERTIFICATE-----Generated at Sun Apr 6 10:09:27 2025 by rpki-client