$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa File: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (raw, json) Hash identifier: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk= Subject key identifier: 61:33:A1:3C:C9:F6:72:F9:22:D7:04:45:BC:76:3F:12:CF:88:11:98 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0136 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa Signing time: Sat 31 May 2025 10:39:12 +0000 ROA not before: Sat 31 May 2025 10:39:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138658 IP address blocks: 157.15.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: May 31 10:39:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=683adc50-fd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bd:e4:55:d5:1b:78:86:c9:ff:62:f0:49:41: 4f:f8:d8:58:e8:28:45:e1:3d:cf:ed:21:0d:fa:cb: ab:97:db:76:d8:8b:ba:a9:02:b2:0a:87:ac:4c:ee: 15:72:e3:11:94:5e:d1:bb:5a:c9:40:15:ae:1a:2a: 0e:78:b3:c7:bc:0f:64:67:fd:3a:df:69:96:08:10: fd:90:94:1f:f5:b0:68:4d:d0:4a:6a:42:26:71:6b: 47:db:dc:45:49:57:48:1e:27:ea:64:7f:5d:57:04: 49:5d:d7:4b:af:5c:d1:f6:e3:52:8d:4a:0d:91:8f: f6:92:61:af:a8:53:c7:c1:df:50:2f:73:fb:3c:65: 3f:66:b0:66:d3:53:b5:86:d8:0c:55:5d:ce:46:7c: 6a:3b:26:65:88:e9:cf:8a:a6:c6:e7:ed:a4:93:aa: fc:f4:f9:7e:06:85:65:d8:36:3b:fa:b6:02:e2:d7: c0:df:11:d7:fb:78:03:31:7a:59:de:2e:e1:f9:8e: 52:8a:58:f4:89:b2:d8:d8:f8:1e:5b:ca:56:db:c1: 17:58:3a:34:a6:11:2b:43:a3:3c:a5:26:2a:9c:60: 2f:8a:bc:03:1e:cf:01:02:e5:7f:ec:76:c1:70:82: 1e:07:c3:e4:c7:95:1d:4c:b8:26:20:7c:32:01:07: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:33:A1:3C:C9:F6:72:F9:22:D7:04:45:BC:76:3F:12:CF:88:11:98 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.135.0/24 Signature Algorithm: sha256WithRSAEncryption 34:9a:35:1f:8c:b3:ad:4d:70:09:a2:9a:5a:70:87:97:3a:4e: 6f:79:c7:f5:f8:89:05:a2:24:c2:64:72:12:9d:3a:e1:d6:62: 99:82:2d:4b:ab:58:64:5d:79:2d:fc:7f:db:e6:35:60:72:45: b8:f4:57:5d:6c:00:6a:3e:34:1b:72:36:0b:63:32:dd:b5:8e: e1:c3:16:82:46:3f:12:2b:8c:50:94:db:ee:a0:2b:78:9d:33: ef:fd:55:be:68:30:a1:cb:d0:07:00:80:ef:1b:68:74:de:98: 7b:60:ae:7c:56:72:9a:23:15:38:54:69:28:72:e7:2a:8f:0a: 46:3c:2d:b6:05:f3:58:ce:ca:85:cd:3b:1b:1b:9c:17:e9:44: fc:5a:8f:2e:0c:f2:9d:bb:15:79:7e:6d:9b:a0:c5:bb:e7:d0: 4f:7a:42:a9:ce:02:4f:2f:e3:aa:af:66:0b:d2:8a:f4:a5:6b: dc:87:47:26:39:69:a7:11:17:19:4b:42:47:21:85:11:8b:89: 5b:bd:16:21:f7:ff:70:4b:46:42:35:eb:24:26:d4:1e:36:5a: ce:cc:a5:17:43:c9:f8:ac:9c:95:81:74:5a:06:1f:14:4a:14: c6:3e:5e:13:6c:fa:13:da:4e:71:06:a5:ec:d4:c1:36:38:a8: b3:13:0d:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNTMxMTAzOTEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhZGM1MC1mZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7b3kVdUbeIbJ/2LwSUFP+NhY6ChF4T3P7SEN+surl9t22Iu6qQKyCoesTO4V cuMRlF7Ru1rJQBWuGioOeLPHvA9kZ/0632mWCBD9kJQf9bBoTdBKakImcWtH29xF SVdIHifqZH9dVwRJXddLr1zR9uNSjUoNkY/2kmGvqFPHwd9QL3P7PGU/ZrBm01O1 htgMVV3ORnxqOyZliOnPiqbG5+2kk6r89Pl+BoVl2DY7+rYC4tfA3xHX+3gDMXpZ 3i7h+Y5Silj0ibLY2PgeW8pW28EXWDo0phErQ6M8pSYqnGAvirwDHs8BAuV/7HbB cIIeB8Pkx5UdTLgmIHwyAQdDCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGEzoTzJ 9nL5ItcERbx2PxLPiBGYMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE2N0YvNEFBQjdCQ0FDNDdEMTFFRTlGQzdDODBGQzRGOUFFMDIvN0RBNTBGOUMz RTBCMTFGMDk3NzlERjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdD4cwDQYJKoZIhvcNAQELBQADggEBADSaNR+Ms61NcAmi mlpwh5c6Tm95x/X4iQWiJMJkchKdOuHWYpmCLUurWGRdeS38f9vmNWByRbj0V11s AGo+NBtyNgtjMt21juHDFoJGPxIrjFCU2+6gK3idM+/9Vb5oMKHL0AcAgO8baHTe mHtgrnxWcpojFThUaShy5yqPCkY8LbYF81jOyoXNOxsbnBfpRPxajy4M8p27FXl+ bZugxbvn0E96QqnOAk8v46qvZgvSivSla9yHRyY5aacRFxlLQkchhRGLiVu9FiH3 /3BLRkI16yQm1B42Ws7MpRdDyfisnJWBdFoGHxRKFMY+XhNs+hPaTnEGpezUwTY4 qLMTDfE= -----END CERTIFICATE-----Generated at Wed Jun 4 12:05:07 2025 by rpki-client