$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa File: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (raw, json) Hash identifier: cEwRwL6NyKD7/7j1+2oJ4jFFMQC29bpjH4kEXInL3fM= Subject key identifier: 98:F3:75:05:FA:B1:5C:BC:E0:BE:2B:BD:3D:46:D4:16:9D:DE:92:CC Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049 Certificate serial: 0110 Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa Signing time: Wed 19 Feb 2025 13:09:41 +0000 ROA not before: Wed 19 Feb 2025 13:09:40 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149765 IP address blocks: 103.167.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A Validity Not Before: Feb 19 13:09:40 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67b5d814-9c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:d7:31:d0:b5:c9:75:ae:2f:93:cd:de:e7: 9d:28:d7:09:43:3f:ce:90:4d:0e:dd:3a:a4:fa:07: 09:10:ad:4c:b8:b2:13:15:0c:03:86:6d:18:eb:98: ef:bc:54:bc:db:42:ca:f5:e4:f7:46:0b:82:c2:40: 11:d8:35:cc:9c:8c:6e:60:56:c0:47:78:67:21:7f: 27:cc:8a:31:4f:96:4b:dc:64:ad:09:d6:e7:74:b3: 12:92:48:fd:e0:43:4c:f7:14:0b:0c:00:a4:3e:c5: c4:3e:47:40:52:bb:43:b1:da:8e:48:e6:48:da:8b: 6c:97:d5:43:9b:e4:9a:97:24:26:db:6d:5b:8c:71: 40:85:8d:23:8a:00:60:cf:b3:7c:df:0a:80:9d:c4: 36:95:af:a3:71:bd:cd:19:cd:03:5a:39:d5:fa:9a: dc:bb:d8:31:b7:ec:5f:2d:39:57:93:b8:c2:03:8a: 3c:b3:c5:2a:72:92:64:a2:bf:15:bc:cf:5e:97:7b: 0c:30:e5:96:fc:a9:12:08:fb:48:e0:62:86:a1:3c: d0:52:c8:4b:da:28:fc:76:00:4b:79:61:e8:4d:7a: b5:df:63:44:be:87:e9:c5:9a:ad:7e:45:60:27:98: b8:e4:31:30:2a:e6:f9:bc:1d:a0:32:08:23:76:3c: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F3:75:05:FA:B1:5C:BC:E0:BE:2B:BD:3D:46:D4:16:9D:DE:92:CC X509v3 Authority Key Identifier: keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.41.0/24 Signature Algorithm: sha256WithRSAEncryption bd:bc:22:1c:96:af:1c:7c:fc:43:7d:10:2b:f4:92:7a:94:cc: bf:ee:df:02:ac:09:86:70:2d:2b:bf:6d:2c:a9:68:e1:40:75: 65:a0:88:ed:9e:98:68:bb:79:86:2b:57:90:08:6f:f1:af:62: 79:22:62:10:2f:64:d9:05:58:17:a4:dd:5a:a7:f6:0b:f5:52: 71:db:93:f2:16:57:fd:c5:1d:01:ed:49:64:d6:12:95:32:0e: a2:da:fc:45:37:3e:11:3c:ad:2a:9d:41:5b:ce:c7:b6:96:32: 16:59:c6:e7:89:ac:53:d2:0a:45:e6:68:c9:c4:9e:f6:56:a7: fa:22:79:39:9c:2c:3e:64:6b:05:f3:2e:bb:d1:50:3c:0c:fe: e6:9a:2a:83:e9:bc:6d:dc:7f:13:85:06:a6:39:a5:34:05:ca: 0a:0f:1a:44:b5:2b:3a:ab:0d:91:86:d7:56:75:ae:b3:2e:40: 0e:71:01:5b:e0:06:55:e5:a6:d6:90:9a:35:1f:bd:c6:03:d1: bc:a9:e5:3a:97:79:28:17:3d:96:cf:dd:d8:56:f3:fd:6e:12: ed:26:83:aa:6e:c1:10:fa:6a:d2:34:fe:a5:67:80:a8:bb:62: 22:89:80:ef:70:ce:ed:7b:d2:2a:ae:c4:f4:57:e2:26:62:5f: 47:77:f8:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKEYxMDg5MkY4NTQ2OEJGMDA0RUVGNUY0RTFGQTU5MTdG MDYzMkEwNDkwHhcNMjUwMjE5MTMwOTQwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1ZDgxNC05YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1TXMdC1yXWuL5PN3uedKNcJQz/OkE0O3Tqk+gcJEK1MuLITFQwDhm0Y65jv vFS820LK9eT3RguCwkAR2DXMnIxuYFbAR3hnIX8nzIoxT5ZL3GStCdbndLMSkkj9 4ENM9xQLDACkPsXEPkdAUrtDsdqOSOZI2otsl9VDm+SalyQm221bjHFAhY0jigBg z7N83wqAncQ2la+jcb3NGc0DWjnV+prcu9gxt+xfLTlXk7jCA4o8s8UqcpJkor8V vM9el3sMMOWW/KkSCPtI4GKGoTzQUshL2ij8dgBLeWHoTXq132NEvofpxZqtfkVg J5i45DEwKub5vB2gMggjdjyCCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJjzdQX6 sVy84L4rvT1G1Bad3pLMMB8GA1UdIwQYMBaAFPEIkvhUaL8ATu9fTh+lkX8GMqBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi84UWlTLUZSb3Z3Qk83MTlPSDZXUmZ3WXlv RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhRaVMtRlJvdndCTzcxOU9INldSZndZeW9Fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFGN0EvRTA1MzMzMzZCQUM5MTFFQkI4MDdENTFDQzRGOUFFMDIvQzczQTFDMUNF RUMyMTFFRkJCM0EzRDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpykwDQYJKoZIhvcNAQELBQADggEBAL28IhyWrxx8/EN9 ECv0knqUzL/u3wKsCYZwLSu/bSypaOFAdWWgiO2emGi7eYYrV5AIb/GvYnkiYhAv ZNkFWBek3Vqn9gv1UnHbk/IWV/3FHQHtSWTWEpUyDqLa/EU3PhE8rSqdQVvOx7aW MhZZxueJrFPSCkXmaMnEnvZWp/oieTmcLD5kawXzLrvRUDwM/uaaKoPpvG3cfxOF BqY5pTQFygoPGkS1KzqrDZGG11Z1rrMuQA5xAVvgBlXlptaQmjUfvcYD0byp5TqX eSgXPZbP3dhW8/1uEu0mg6puwRD6atI0/qVngKi7YiKJgO9wzu170iquxPRX4iZi X0d3+KU= -----END CERTIFICATE-----Generated at Fri Apr 11 14:15:40 2025 by rpki-client