$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75BB8C50096511F0A7693E77C4F9AE02.roa File: 75BB8C50096511F0A7693E77C4F9AE02.roa (raw, json) Hash identifier: NbUWBgOX9VD7frO30LAsr609MhYdqRAYFRyUqjnyk3o= Subject key identifier: 5E:CB:B4:3E:62:D9:EB:C2:29:82:E0:5B:51:FF:98:BD:2B:20:DA:A4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AC61 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75BB8C50096511F0A7693E77C4F9AE02.roa Signing time: Tue 25 Mar 2025 10:39:42 +0000 ROA not before: Tue 25 Mar 2025 10:39:42 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141508 IP address blocks: 103.161.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44129 (0xac61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 25 10:39:42 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67e287ee-8c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:9a:0e:35:97:c5:6a:6f:ac:aa:04:74:40: 8e:b6:9b:f7:24:2e:67:4d:25:74:65:1d:25:5f:aa: 9f:44:ed:24:7b:24:54:4b:ef:4a:be:e0:1d:b2:1c: c1:b8:5f:4d:cf:c5:cf:24:1a:7a:e5:e3:b5:8b:fe: a1:33:80:81:7c:43:e2:93:3d:73:2f:f7:9d:49:08: aa:88:ee:5a:d2:32:ba:f1:0a:c4:9e:86:fe:3c:67: bd:6f:53:d8:fe:30:24:dc:36:1a:7e:32:5a:7b:64: e1:b5:79:55:2d:b9:84:54:e7:f7:a2:7c:24:6d:e9: a6:48:4a:64:c8:b2:1c:92:cc:89:d5:2b:4f:1f:2d: 7f:9b:41:f6:30:ac:a0:7d:b1:f5:fd:c5:ec:2a:df: c2:fa:f8:d7:d1:50:68:74:c4:ca:30:fa:2a:8a:93: 4f:f7:0f:a5:fa:b8:8f:3f:f6:ca:f1:5e:80:91:4e: 88:02:60:8c:20:a2:a5:54:23:13:27:20:93:1f:22: 83:4f:4f:c9:1f:25:2d:1d:f1:a7:1c:a7:5a:6b:34: 1f:28:b3:48:69:c4:b9:38:a2:ae:53:7e:6c:7e:16: 42:cf:61:d3:81:12:82:d9:7e:90:95:d2:23:a2:3b: d1:b1:f9:14:45:89:04:81:7f:b7:63:98:98:70:dc: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CB:B4:3E:62:D9:EB:C2:29:82:E0:5B:51:FF:98:BD:2B:20:DA:A4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75BB8C50096511F0A7693E77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.64.0/23 Signature Algorithm: sha256WithRSAEncryption 72:78:ae:fc:ac:9b:af:9a:fd:63:fe:fc:ae:5d:ad:58:1c:65: db:2a:fa:6f:22:35:75:90:5e:ef:0d:58:f2:8c:97:6f:d6:17: de:dc:9c:ec:01:a3:16:86:c5:7e:15:36:6a:7f:25:0c:aa:e3: cf:9c:e1:0f:3f:dd:53:fc:ac:5d:76:29:f4:b4:dd:90:fb:dc: 4e:35:3c:da:ab:6a:49:9d:57:7d:8c:0d:cc:58:bc:83:93:fe: a8:e5:ff:ac:7b:f5:68:d8:37:85:ba:4c:6b:b8:fe:b4:30:fe: 02:ff:30:f1:93:4e:66:ac:7e:3d:d8:5a:7b:81:42:3e:9b:e2: ba:c2:d3:64:9f:a3:49:04:5e:10:e8:a2:fe:d0:b3:fc:eb:1a: e6:18:c7:27:7a:8f:57:83:c4:2e:97:03:0d:22:b1:85:85:7d: e6:9a:b9:f5:2c:47:7b:78:62:7e:d3:89:23:17:2e:de:8b:0d: d3:a3:72:f2:8c:c7:5c:a8:3b:5f:75:59:12:6a:87:00:b4:ed: 89:ff:d5:7d:36:47:48:30:30:b2:c3:48:ed:8e:84:fd:f1:2c: e9:5c:b4:87:2c:41:24:e1:29:b0:60:29:2a:f8:aa:12:61:1f: 1c:39:55:9b:86:e7:d9:9d:92:7e:48:2d:d6:ef:a0:08:ad:ba: f8:28:fb:a5 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKxhMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMyNTEwMzk0MloXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlMjg3ZWUtOGM3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL0mg41l8Vqb6yqBHRAjrab9yQuZ00ldGUdJV+qn0TtJHskVEvvSr7gHbIc wbhfTc/FzyQaeuXjtYv+oTOAgXxD4pM9cy/3nUkIqojuWtIyuvEKxJ6G/jxnvW9T 2P4wJNw2Gn4yWntk4bV5VS25hFTn96J8JG3ppkhKZMiyHJLMidUrTx8tf5tB9jCs oH2x9f3F7Crfwvr419FQaHTEyjD6KoqTT/cPpfq4jz/2yvFegJFOiAJgjCCipVQj Eycgkx8ig09PyR8lLR3xpxynWms0HyizSGnEuTiirlN+bH4WQs9h04ESgtl+kJXS I6I70bH5FEWJBIF/t2OYmHDc+SECAwEAAaOCApUwggKRMB0GA1UdDgQWBBRey7Q+ YtnrwimC4FtR/5i9KyDapDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc1QkI4QzUw MDk2NTExRjBBNzY5M0U3N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6FAMA0GCSqGSIb3DQEBCwUAA4IBAQByeK78rJuvmv1j /vyuXa1YHGXbKvpvIjV1kF7vDVjyjJdv1hfe3JzsAaMWhsV+FTZqfyUMquPPnOEP P91T/Kxddin0tN2Q+9xONTzaq2pJnVd9jA3MWLyDk/6o5f+se/Vo2DeFukxruP60 MP4C/zDxk05mrH492Fp7gUI+m+K6wtNkn6NJBF4Q6KL+0LP86xrmGMcneo9Xg8Qu lwMNIrGFhX3mmrn1LEd7eGJ+04kjFy7eiw3To3LyjMdcqDtfdVkSaocAtO2J/9V9 NkdIMDCyw0jtjoT98SzpXLSHLEEk4SmwYCkq+KoSYR8cOVWbhufZnZJ+SC3W76AI rbr4KPul -----END CERTIFICATE-----Generated at Fri Apr 4 10:58:43 2025 by rpki-client