$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/348E15CE0A2111F0A8BA3086C4F9AE02.roa File: 348E15CE0A2111F0A8BA3086C4F9AE02.roa (raw, json) Hash identifier: DwQ5zdbatV2OQxq71Rf6Popv2PzOUlWc3P7XDt/jZfE= Subject key identifier: 41:A8:10:9A:F9:A4:DA:85:F9:4C:17:6C:14:9B:97:B8:29:27:52:46 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: ACB6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/348E15CE0A2111F0A8BA3086C4F9AE02.roa Signing time: Wed 26 Mar 2025 09:03:38 +0000 ROA not before: Wed 26 Mar 2025 09:03:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138796 IP address blocks: 103.134.164.0/24 maxlen: 24 103.134.165.0/24 maxlen: 24 103.134.166.0/24 maxlen: 24 103.134.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44214 (0xacb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 26 09:03:38 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67e3c2ea-ba93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:b3:0d:c8:4e:1d:ee:98:a8:ae:06:55:b6: 6c:57:db:8b:bd:21:27:5f:73:c1:75:40:f9:06:72: 66:07:9b:c5:ac:a4:20:89:ae:38:43:b9:63:91:03: 5b:5c:73:6e:c4:89:1d:c6:02:00:5a:1a:b8:cd:03: bd:40:df:e8:4d:ae:ca:d7:d9:e0:ab:77:2d:2c:43: 85:4c:d9:63:2f:14:de:f9:86:33:e6:df:53:a5:05: 4f:17:e2:00:8d:4c:d2:d6:30:56:68:bf:5f:9e:3a: 42:30:4f:22:cd:04:d5:56:d3:3f:ef:48:78:1f:29: 6e:e5:3b:95:4c:4c:61:ab:25:9e:24:76:92:a8:c3: 3d:b9:4a:4d:02:d1:e7:f3:9e:ce:8b:23:27:81:9c: 8f:01:e4:98:4e:e1:00:fc:db:d9:1f:49:80:f6:8d: 80:56:b4:52:d9:1d:ca:2f:54:53:26:3d:e2:80:dd: 16:f2:c6:ba:18:b7:f1:00:9e:37:95:0b:f2:b2:10: 92:a7:db:ac:b2:7b:41:7e:87:ae:5e:1e:a1:98:d6: ab:7f:81:af:e7:ba:de:8f:ae:89:ce:e7:67:dd:17: 68:c8:a6:3e:c7:22:7c:b3:4c:20:58:c5:26:67:3e: de:0b:9d:c3:0c:d5:16:09:ba:31:25:7b:0c:7d:6d: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:10:9A:F9:A4:DA:85:F9:4C:17:6C:14:9B:97:B8:29:27:52:46 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/348E15CE0A2111F0A8BA3086C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.164.0/22 Signature Algorithm: sha256WithRSAEncryption ac:55:60:cf:74:2b:2e:0d:6d:6e:b9:11:2a:13:e3:04:2d:45: c6:82:7d:dc:77:19:c4:41:cb:13:ad:c7:13:b4:75:4a:aa:6b: f7:b0:69:d2:26:77:4d:e2:b9:c4:00:75:c9:41:37:15:3c:4c: b3:a4:c7:7e:e4:4e:aa:61:78:ca:46:65:08:00:ca:36:b3:fd: bf:db:2d:03:56:63:58:25:dd:e3:16:16:cc:e3:4d:2b:22:bc: a0:63:25:0c:14:62:59:7a:04:e0:c4:74:ba:4b:ea:6d:71:34: b6:92:eb:ff:da:de:27:81:d3:39:0b:04:5a:8b:4b:4c:ad:f0: 04:69:a2:46:ec:2d:18:0b:80:62:72:98:af:42:55:ef:6f:59: ef:23:2d:1c:d9:e7:8f:f4:22:36:c1:69:26:c1:20:94:80:f2: 8b:8e:5f:33:d5:3a:3e:5d:c5:10:ad:87:cc:a5:03:1e:d2:f6: 47:1e:6a:66:c5:15:5e:e2:fb:15:9b:04:64:03:d6:ec:f7:85: a1:9f:c9:f3:8c:a9:ce:b5:df:b7:13:75:69:3e:bb:6d:03:14: 3f:83:03:5e:ea:b9:65:aa:55:cf:f3:89:3f:89:1a:e3:f9:7f: 4a:2e:d0:87:b4:57:ea:35:93:3e:88:52:95:e4:ce:8c:87:78: 8d:14:2b:b7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKy2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMyNjA5MDMzOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlM2MyZWEtYmE5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMh2sw3ITh3umKiuBlW2bFfbi70hJ19zwXVA+QZyZgebxaykIImuOEO5Y5ED W1xzbsSJHcYCAFoauM0DvUDf6E2uytfZ4Kt3LSxDhUzZYy8U3vmGM+bfU6UFTxfi AI1M0tYwVmi/X546QjBPIs0E1VbTP+9IeB8pbuU7lUxMYaslniR2kqjDPblKTQLR 5/OezosjJ4GcjwHkmE7hAPzb2R9JgPaNgFa0Utkdyi9UUyY94oDdFvLGuhi38QCe N5UL8rIQkqfbrLJ7QX6Hrl4eoZjWq3+Br+e63o+uic7nZ90XaMimPscifLNMIFjF Jmc+3gudwwzVFgm6MSV7DH1tsC0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBRBqBCa +aTahflMF2wUm5e4KSdSRjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0OEUxNUNF MEEyMTExRjBBOEJBMzA4NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4akMA0GCSqGSIb3DQEBCwUAA4IBAQCsVWDPdCsuDW1u uREqE+MELUXGgn3cdxnEQcsTrccTtHVKqmv3sGnSJndN4rnEAHXJQTcVPEyzpMd+ 5E6qYXjKRmUIAMo2s/2/2y0DVmNYJd3jFhbM400rIrygYyUMFGJZegTgxHS6S+pt cTS2kuv/2t4ngdM5CwRai0tMrfAEaaJG7C0YC4BicpivQlXvb1nvIy0c2eeP9CI2 wWkmwSCUgPKLjl8z1To+XcUQrYfMpQMe0vZHHmpmxRVe4vsVmwRkA9bs94Whn8nz jKnOtd+3E3VpPrttAxQ/gwNe6rllqlXP84k/iRrj+X9KLtCHtFfqNZM+iFKV5M6M h3iNFCu3 -----END CERTIFICATE-----Generated at Fri Apr 4 10:50:29 2025 by rpki-client