$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa File: 7CCE329266F711EF86880681C4F9AE02.roa (raw, json) Hash identifier: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE= Subject key identifier: 79:A9:3B:AD:D3:47:06:9B:1C:14:30:A1:84:06:1D:C5:81:AC:3C:B1 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 039D Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa Signing time: Wed 07 May 2025 01:38:20 +0000 ROA not before: Wed 07 May 2025 01:38:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214766 IP address blocks: 43.243.194.0/24 maxlen: 24 103.229.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 7 01:38:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681ab98c-9ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:0f:86:66:c8:70:bb:52:f7:b4:3e:8f:60: 0c:35:5a:a0:ef:0e:48:69:0f:77:81:74:5e:68:1c: 07:ab:c0:13:53:15:72:38:c6:e2:cf:f3:12:1e:ba: ad:cb:52:d0:6a:13:86:53:ca:4b:ed:fe:a9:52:b2: cd:10:1a:e7:0e:d5:90:38:0b:e2:70:31:ef:14:30: 0c:e2:4d:13:73:1c:9a:ed:a9:9a:94:58:dd:88:da: 27:ee:97:86:11:b9:8c:4c:bb:fc:1b:58:4e:9f:02: e4:1c:07:18:a9:c7:b1:ad:5a:7d:63:13:1b:bc:18: aa:48:d6:28:c8:5b:f8:4e:12:ff:5f:10:97:90:15: a2:f4:94:c1:de:51:46:ff:1c:f2:20:f4:42:16:ed: 14:5b:af:a8:d7:8f:da:5e:16:03:ff:cb:ef:0a:66: ff:15:94:c7:65:10:f3:34:b0:c2:c6:86:6f:6e:28: 39:3e:aa:aa:30:12:9c:ce:6b:87:d6:3a:0e:56:a3: 42:50:15:b0:1a:75:3b:7a:43:ba:a0:fc:37:a5:7b: 98:54:ea:73:cf:0a:05:7b:43:8b:db:28:5e:ad:ba: 8e:2e:65:80:36:2e:4e:3e:39:8b:8d:e5:94:10:a1: 83:0b:39:ce:ae:14:a2:c5:f6:a5:d4:b7:6c:d5:f4: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:3B:AD:D3:47:06:9B:1C:14:30:A1:84:06:1D:C5:81:AC:3C:B1 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/7CCE329266F711EF86880681C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 103.229.118.0/24 Signature Algorithm: sha256WithRSAEncryption 87:fa:0a:bd:9f:78:e9:83:d2:b7:29:67:14:96:ea:9a:d8:c3: a8:cd:8f:36:08:1d:e4:7a:d8:2f:8d:83:b1:ce:0b:d0:61:ef: aa:01:f1:e4:e0:1c:f6:0b:a8:30:f3:93:94:f2:08:e3:88:83: c7:26:bf:4c:0b:3c:19:6f:d2:d8:64:80:58:7a:9c:68:48:4d: 64:f4:eb:2c:4c:8c:fa:63:9c:d1:41:29:a3:d3:41:b1:65:42: 44:7f:c6:36:89:dd:32:f4:b2:64:21:bb:ab:4e:ce:d8:c7:a1: f1:2c:c7:bc:29:21:b7:6c:e7:ea:93:ed:89:a9:dd:dd:63:e6: dd:5d:6b:3f:f2:29:97:4c:1b:ce:f8:65:73:19:07:8b:7a:ce: 54:db:c0:b8:1a:af:28:4b:28:91:24:36:4f:66:16:95:a6:96: b7:2e:de:e1:13:58:db:28:73:a1:66:2b:ae:4b:9e:70:08:20: 28:92:72:ae:96:53:23:7b:d6:82:aa:0a:54:a5:5f:13:51:c0: 45:a8:97:4a:08:1c:65:92:3d:29:cb:9d:94:f8:c3:2e:dc:f0: 39:7b:98:54:1f:76:ad:22:f5:ab:07:3b:52:aa:84:48:9d:93: 1e:88:99:5c:3c:5c:b0:ff:de:e5:4f:36:76:53:9b:07:2c:ca: 96:eb:c6:c2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTA3MDEzODIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhYjk4Yy05ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteYPhmbIcLtS97Q+j2AMNVqg7w5IaQ93gXReaBwHq8ATUxVyOMbiz/MSHrqt y1LQahOGU8pL7f6pUrLNEBrnDtWQOAvicDHvFDAM4k0Tcxya7amalFjdiNon7peG EbmMTLv8G1hOnwLkHAcYqcexrVp9YxMbvBiqSNYoyFv4ThL/XxCXkBWi9JTB3lFG /xzyIPRCFu0UW6+o14/aXhYD/8vvCmb/FZTHZRDzNLDCxoZvbig5PqqqMBKczmuH 1joOVqNCUBWwGnU7ekO6oPw3pXuYVOpzzwoFe0OL2yherbqOLmWANi5OPjmLjeWU EKGDCznOrhSixfal1Lds1fTTOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHmpO63T RwabHBQwoYQGHcWBrDyxMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvN0NDRTMyOTI2 NkY3MTFFRjg2ODgwNjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr88IDBABn5XYwDQYJKoZIhvcNAQELBQADggEBAIf6Cr2f eOmD0rcpZxSW6prYw6jNjzYIHeR62C+Ng7HOC9Bh76oB8eTgHPYLqDDzk5TyCOOI g8cmv0wLPBlv0thkgFh6nGhITWT06yxMjPpjnNFBKaPTQbFlQkR/xjaJ3TL0smQh u6tOztjHofEsx7wpIbds5+qT7Ymp3d1j5t1daz/yKZdMG874ZXMZB4t6zlTbwLga ryhLKJEkNk9mFpWmlrcu3uETWNsoc6FmK65LnnAIICiScq6WUyN71oKqClSlXxNR wEWol0oIHGWSPSnLnZT4wy7c8Dl7mFQfdq0i9asHO1KqhEidkx6ImVw8XLD/3uVP NnZTmwcsypbrxsI= -----END CERTIFICATE-----Generated at Mon May 12 18:39:41 2025 by rpki-client