$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa File: 2DA549EAE23E11EFB267422EC4F9AE02.roa (raw, json) Hash identifier: MAjR+6vV6kQAbBvReYR67qji2ZeC3+thGK+jJVjSbNk= Subject key identifier: FB:B8:13:E7:2E:AB:D0:3D:28:30:B7:E4:45:47:17:34:70:A2:1A:70 Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 0A Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa Signing time: Mon 03 Feb 2025 14:50:16 +0000 ROA not before: Mon 03 Feb 2025 14:50:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 142577 IP address blocks: 161.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Feb 3 14:50:16 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67a0d7a7-d49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:87:43:af:ae:43:95:05:b4:5f:cb:4e:1b: 5c:45:45:53:df:c5:e0:ad:79:10:80:78:c8:6c:2d: 0e:40:2a:c6:f2:69:8d:f9:cc:bd:7c:44:cd:33:1f: 7f:d5:74:3a:40:2e:38:d6:53:37:8b:b9:1f:63:cd: 08:18:bf:92:5d:84:55:47:71:77:82:98:fe:43:16: 6f:25:84:d6:aa:48:c6:05:70:31:ca:f2:e5:7d:b5: 59:03:9d:84:ba:03:33:92:a7:88:0b:d5:f1:9b:f4: d0:8e:9f:3e:21:40:f5:57:f5:16:fe:27:3d:81:8d: c1:be:48:ac:6a:f0:5f:37:76:25:62:c1:bb:8d:13: c8:48:a2:d7:4e:42:ac:36:78:b4:a5:ef:9d:b8:b5: 88:f5:87:28:5f:33:e5:b3:4f:da:27:64:fd:de:1d: 7a:06:71:41:45:30:60:6c:6d:b2:9d:6b:36:54:ad: 53:85:7b:36:a3:0e:1d:48:f5:cc:a5:13:9a:df:a2: 94:fd:34:69:86:9e:68:7f:62:9d:74:12:ec:71:a8: 60:0c:7e:bb:13:d7:a2:57:ed:2d:0c:17:1b:7d:9c: 4f:0f:d4:38:49:e7:63:ee:e0:5c:27:1d:44:ed:23: 7f:8f:dc:1f:86:1d:6a:ba:de:80:6d:d0:2d:bd:96: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:13:E7:2E:AB:D0:3D:28:30:B7:E4:45:47:17:34:70:A2:1A:70 X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.241.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:cd:1c:cd:00:9e:79:95:19:00:48:ad:3f:63:f2:ea:e0:a4: c0:e2:aa:47:74:dc:11:b5:65:69:9d:0b:17:60:e1:81:2e:3f: 4e:24:b7:9e:c3:e4:8a:1b:14:9c:fc:43:d2:74:29:7a:3b:09: fa:96:7e:bc:5f:8e:6e:67:46:99:58:f8:d1:e1:65:7e:6e:7d: 3b:9e:6c:0b:69:86:10:d0:e6:69:1f:d8:99:16:42:41:69:30: 60:c2:31:72:bd:b5:5a:d9:cd:9f:4e:d6:03:33:5c:23:54:09: ab:77:57:cd:c2:f1:4f:1d:8d:5d:ae:5c:6d:21:aa:53:96:75: e1:1f:d0:4e:ea:b6:41:a1:78:0e:d6:32:97:5a:3a:76:37:2d: 76:15:61:7d:f7:2a:1e:de:1d:9d:04:4a:4e:94:d7:bd:df:4b: 94:19:7a:20:7e:1b:04:f1:65:9b:36:f2:20:50:62:b2:44:a2: ab:75:64:f1:2e:36:ed:79:b9:45:c8:3c:40:3d:28:a9:55:51: 04:f0:d3:fc:fc:e3:33:b2:91:c2:50:4d:d7:e4:8d:c7:d6:74: f0:9a:af:e9:8f:de:d8:fe:e4:7c:00:47:61:58:84:2d:8b:66: 3a:79:02:fa:46:67:b7:d4:9d:52:59:ec:4c:51:e8:6b:4e:58: 8f:05:6c:91 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTAwRjExMC8GA1UEBRMoMDgzNTg3NDk3OEJBMzA5RUQ3REE0NjczRTc3MzlEOTMy MkYyNjI5QjAeFw0yNTAyMDMxNDUwMTZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTBkN2E3LWQ0OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0SYdDr65DlQW0X8tOG1xFRVPfxeCteRCAeMhsLQ5AKsbyaY35zL18RM0zH3/V dDpALjjWUzeLuR9jzQgYv5JdhFVHcXeCmP5DFm8lhNaqSMYFcDHK8uV9tVkDnYS6 AzOSp4gL1fGb9NCOnz4hQPVX9Rb+Jz2BjcG+SKxq8F83diViwbuNE8hIotdOQqw2 eLSl7524tYj1hyhfM+WzT9onZP3eHXoGcUFFMGBsbbKdazZUrVOFezajDh1I9cyl E5rfopT9NGmGnmh/Yp10EuxxqGAMfrsT16JX7S0MFxt9nE8P1DhJ52Pu4FwnHUTt I3+P3B+GHWq63oBt0C29lnUXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+7gT5y6r 0D0oMLfkRUcXNHCiGnAwHwYDVR0jBBgwFoAUCDWHSXi6MJ7X2kZz53OdkyLyYpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMDBGLzdEMkIxREYwRDdE MDExRUY5RUZDOTEwREM0RjlBRTAyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0RXSFNYaTZNSjdYMmtaejUzT2RreUx5WXBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi8yREE1NDlFQUUy M0UxMUVGQjI2NzQyMkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH48TANBgkqhkiG9w0BAQsFAAOCAQEAC80czQCeeZUZAEit P2Py6uCkwOKqR3TcEbVlaZ0LF2DhgS4/TiS3nsPkihsUnPxD0nQpejsJ+pZ+vF+O bmdGmVj40eFlfm59O55sC2mGENDmaR/YmRZCQWkwYMIxcr21WtnNn07WAzNcI1QJ q3dXzcLxTx2NXa5cbSGqU5Z14R/QTuq2QaF4DtYyl1o6djctdhVhffcqHt4dnQRK TpTXvd9LlBl6IH4bBPFlmzbyIFBiskSiq3Vk8S427Xm5Rcg8QD0oqVVRBPDT/Pzj M7KRwlBN1+SNx9Z08Jqv6Y/e2P7kfABHYViELYtmOnkC+kZnt9SdUlnsTFHoa05Y jwVskQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:38 2025 by rpki-client