$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A38DE8CC8D711EFB2BEC085C4F9AE02.roa File: 7A38DE8CC8D711EFB2BEC085C4F9AE02.roa (raw, json) Hash identifier: dbUV67reQeoLg1GIiAyHYsaAhrZrCT3m7uv+AKP3xGs= Subject key identifier: 33:9D:01:E5:72:14:70:7C:5D:1A:DF:DF:08:F3:F9:02:36:93:18:D4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A151 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A38DE8CC8D711EFB2BEC085C4F9AE02.roa Signing time: Thu 02 Jan 2025 07:02:07 +0000 ROA not before: Thu 02 Jan 2025 07:02:07 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138262 IP address blocks: 103.162.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41297 (0xa151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Jan 2 07:02:07 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=677639ee-d45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:7b:10:41:ee:66:39:ce:c2:43:19:e9:4e: 86:13:af:57:73:9b:20:d0:c3:02:0a:55:47:19:38: 5e:29:ce:a6:d6:9b:ad:aa:17:d2:bb:aa:df:c6:e4: 4f:25:63:8f:d6:94:c4:20:87:2c:31:0c:d6:fe:27: b1:84:6f:94:1d:1f:44:fb:66:36:06:0c:e8:1f:d6: 2f:ae:08:c1:dd:72:4b:37:9a:b5:b4:2a:e3:cb:03: 67:3e:9d:c2:b6:01:da:b5:a5:42:97:2f:3b:6d:24: 6d:b1:e9:6b:f4:db:cd:9b:ab:6c:39:4b:9b:2b:7c: 99:6a:e0:f8:14:ed:cd:8f:59:74:8d:22:1f:68:00: 40:7f:d2:b7:97:81:16:da:f1:df:43:26:81:9e:61: b3:b5:d5:79:7d:67:03:a5:fb:08:43:17:83:18:67: 44:58:0d:e7:b9:f6:85:ec:e8:e6:e6:9c:70:7d:f1: d4:11:76:ae:24:a7:6a:b5:93:af:85:a2:6b:c8:8e: 46:b4:fc:ca:5a:4f:65:c0:f4:70:37:45:b5:f5:d0: b1:eb:d1:40:4c:93:b9:50:72:2d:9a:d7:b3:21:84: 60:2f:fd:ef:c0:f0:19:41:22:d8:26:bc:50:04:a4: 6e:41:af:0d:1e:7c:4a:e1:3b:6c:b4:29:24:d2:f4: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9D:01:E5:72:14:70:7C:5D:1A:DF:DF:08:F3:F9:02:36:93:18:D4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A38DE8CC8D711EFB2BEC085C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.74.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8e:fd:a9:55:14:f9:09:65:73:63:26:76:35:41:56:c7:79: 8b:ba:fb:3a:d2:4f:fe:cf:a0:c3:83:57:4e:af:97:7f:2b:21: e6:6e:d5:8c:83:33:f7:1c:80:96:37:94:db:82:70:7c:bd:0c: a2:3e:6d:5d:b9:55:cd:c4:6d:af:e0:6b:e2:38:41:42:24:25: 05:39:06:17:71:60:24:df:03:4a:6b:48:8d:f9:b9:a7:48:84: 6f:4e:b4:7b:3c:4b:eb:67:14:7d:83:ec:30:64:aa:2a:a2:aa: 69:41:68:f8:15:38:d1:ca:c5:98:09:d0:95:84:08:88:b2:49: eb:54:e2:00:7b:82:fe:63:5b:2d:c7:20:28:9e:36:c6:0e:26: d9:f1:61:c3:63:6a:a0:2a:96:d5:84:d6:1b:4c:28:48:54:3f: 62:41:08:54:f6:a5:22:b0:7c:9e:74:d1:6b:5a:12:e5:c7:c8: 7f:a2:04:83:46:ac:11:7a:14:2a:95:97:24:40:bb:d6:1e:60: dd:02:db:1d:9b:ce:63:33:39:e4:56:c8:1f:8d:22:f7:ea:9a: e5:fd:e5:f9:a4:06:88:85:51:6e:75:78:a0:a7:b7:66:76:e6: 25:ca:13:00:5b:7e:b5:e1:d7:df:d9:7d:34:71:f9:ee:a9:3e: d3:05:aa:65 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKFRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDEwMjA3MDIwN1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjc3NjM5ZWUtZDQ1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc1exBB7mY5zsJDGelOhhOvV3ObINDDAgpVRxk4XinOptabraoX0ruq38bk TyVjj9aUxCCHLDEM1v4nsYRvlB0fRPtmNgYM6B/WL64Iwd1ySzeatbQq48sDZz6d wrYB2rWlQpcvO20kbbHpa/TbzZurbDlLmyt8mWrg+BTtzY9ZdI0iH2gAQH/St5eB Ftrx30MmgZ5hs7XVeX1nA6X7CEMXgxhnRFgN57n2hezo5uaccH3x1BF2riSnarWT r4Wia8iORrT8ylpPZcD0cDdFtfXQsevRQEyTuVByLZrXsyGEYC/978DwGUEi2Ca8 UASkbkGvDR58SuE7bLQpJNL0Ou8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQznQHl chRwfF0a398I8/kCNpMY1DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdBMzhERThD QzhENzExRUZCMkJFQzA4NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6JKMA0GCSqGSIb3DQEBCwUAA4IBAQCajv2pVRT5CWVz YyZ2NUFWx3mLuvs60k/+z6DDg1dOr5d/KyHmbtWMgzP3HICWN5TbgnB8vQyiPm1d uVXNxG2v4GviOEFCJCUFOQYXcWAk3wNKa0iN+bmnSIRvTrR7PEvrZxR9g+wwZKoq oqppQWj4FTjRysWYCdCVhAiIsknrVOIAe4L+Y1stxyAonjbGDibZ8WHDY2qgKpbV hNYbTChIVD9iQQhU9qUisHyedNFrWhLlx8h/ogSDRqwRehQqlZckQLvWHmDdAtsd m85jMznkVsgfjSL36prl/eX5pAaIhVFudXigp7dmduYlyhMAW3614dff2X00cfnu qT7TBapl -----END CERTIFICATE-----Generated at Sat Apr 5 02:03:14 2025 by rpki-client