$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa File: C3C794CCE22611EFBBF69E1FC4F9AE02.roa (raw, json) Hash identifier: IDhgIcPx1WKLbw0Lwc0XPoIg8+cda+zzN6tBU2JMl5g= Subject key identifier: 36:3D:FF:33:C6:B3:60:23:E3:59:6C:C4:AB:55:41:21:B9:7D:D9:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: A49B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa Signing time: Mon 03 Feb 2025 12:02:39 +0000 ROA not before: Mon 03 Feb 2025 12:02:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141826 IP address blocks: 103.167.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42139 (0xa49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Feb 3 12:02:39 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67a0b05f-2b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:7c:17:2a:c2:43:47:c1:d6:a6:af:b9:eb: 14:ef:ff:36:e1:ff:50:e4:46:76:34:80:95:e4:c6: e6:a5:03:91:d9:24:f9:de:c7:30:81:96:7a:5c:94: e2:c7:97:1c:01:e8:3d:28:c6:f1:89:dc:72:b7:d5: a4:7e:cb:da:81:5b:25:f9:7e:44:f5:64:79:d7:0b: ad:98:74:a5:f4:cf:11:f9:24:a1:b6:c6:82:d4:54: a3:db:46:45:0a:9c:fc:be:1d:72:e9:f5:7f:79:5c: a6:77:56:0d:ad:91:f6:81:bc:1a:39:b8:f8:e2:25: 64:98:6b:37:9c:d3:fe:f4:fb:9b:4b:30:15:8a:09: 57:aa:d4:00:78:78:b2:87:ab:90:98:69:d4:34:e0: 88:73:26:77:5e:ed:f3:07:d8:dd:fc:33:9e:b7:3d: 21:a3:d2:e1:0b:36:9f:ae:40:cc:e9:3f:5f:0d:8a: 28:6d:f5:94:ef:48:1d:39:d0:e6:9b:7f:9b:3a:9e: a9:51:62:79:fa:64:d6:81:2d:87:dc:78:cc:fb:b2: b8:a7:57:25:82:c9:b8:17:e8:79:39:91:e6:43:6b: ad:1f:aa:8b:92:77:53:9e:9f:26:54:d6:41:ba:f5: 25:44:6c:87:a7:ed:0d:86:fc:0c:7f:3c:54:17:75: 5d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3D:FF:33:C6:B3:60:23:E3:59:6C:C4:AB:55:41:21:B9:7D:D9:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3C794CCE22611EFBBF69E1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.157.0/24 Signature Algorithm: sha256WithRSAEncryption 29:9f:0c:c5:32:46:cb:e5:4e:e6:67:c2:15:c2:70:ff:dc:76: 71:31:a5:7a:83:64:b7:1e:13:26:55:4f:17:2c:65:78:69:9a: 77:2c:8a:ef:1f:c8:aa:d6:98:f6:c5:96:9f:cc:4b:ff:3f:e8: b9:dc:26:0a:fc:0f:58:11:85:be:6e:5f:26:e5:fd:17:f4:e6: 1e:1e:56:02:b4:6b:63:b9:25:1e:5b:03:84:ad:78:f4:b9:40: 9e:4c:1a:22:4f:09:a8:dd:30:1f:14:1c:61:61:06:65:0d:b2: 39:e0:71:c9:5c:18:4d:96:6e:6b:e7:d5:46:70:d7:63:14:40: d3:81:6e:c9:8d:af:f5:83:be:6b:40:fa:51:52:c7:fb:00:20: 5e:b1:e8:63:41:84:d2:00:df:a4:51:cf:e2:d4:48:6c:01:bd: b7:fd:21:08:65:82:89:6e:ae:16:94:02:eb:7d:d0:88:db:57: 1c:66:90:53:d0:49:51:87:52:2d:55:dd:0d:ee:11:97:4b:1c: 11:41:e8:7f:c7:b7:09:7d:7e:96:02:42:5b:0f:bb:d6:e2:c7: 02:f1:30:f5:a3:de:5a:da:e0:d2:79:36:37:37:d9:74:e3:91: ff:df:b1:fb:b9:10:d7:7d:b9:f3:a0:01:a5:ac:01:e7:95:c3: c3:51:ac:36 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAKSbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDIwMzEyMDIzOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdhMGIwNWYtMmI0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJnFfBcqwkNHwdamr7nrFO//NuH/UORGdjSAleTG5qUDkdkk+d7HMIGWelyU 4seXHAHoPSjG8YnccrfVpH7L2oFbJfl+RPVkedcLrZh0pfTPEfkkobbGgtRUo9tG RQqc/L4dcun1f3lcpndWDa2R9oG8Gjm4+OIlZJhrN5zT/vT7m0swFYoJV6rUAHh4 soerkJhp1DTgiHMmd17t8wfY3fwznrc9IaPS4Qs2n65AzOk/Xw2KKG31lO9IHTnQ 5pt/mzqeqVFiefpk1oEth9x4zPuyuKdXJYLJuBfoeTmR5kNrrR+qi5J3U56fJlTW Qbr1JURsh6ftDYb8DH88VBd1XZsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ2Pf8z xrNgI+NZbMSrVUEhuX3ZajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MzQzc5NEND RTIyNjExRUZCQkY2OUUxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6edMA0GCSqGSIb3DQEBCwUAA4IBAQApnwzFMkbL5U7m Z8IVwnD/3HZxMaV6g2S3HhMmVU8XLGV4aZp3LIrvH8iq1pj2xZafzEv/P+i53CYK /A9YEYW+bl8m5f0X9OYeHlYCtGtjuSUeWwOErXj0uUCeTBoiTwmo3TAfFBxhYQZl DbI54HHJXBhNlm5r59VGcNdjFEDTgW7Jja/1g75rQPpRUsf7ACBesehjQYTSAN+k Uc/i1EhsAb23/SEIZYKJbq4WlALrfdCI21ccZpBT0ElRh1ItVd0N7hGXSxwRQeh/ x7cJfX6WAkJbD7vW4scC8TD1o95a2uDSeTY3N9l045H/37H7uRDXfbnzoAGlrAHn lcPDUaw2 -----END CERTIFICATE-----Generated at Fri Apr 4 10:56:02 2025 by rpki-client