$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa File: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (raw, json) Hash identifier: /ks11M81kp4oGi/uf6+uil4xz+jgg1PhbFjvxN9fgAU= Subject key identifier: 9D:C6:DC:A1:A6:C5:9A:89:FF:42:25:00:09:D5:5D:01:D4:74:EC:04 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 03A3 Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa Signing time: Tue 11 Feb 2025 00:43:33 +0000 ROA not before: Tue 11 Feb 2025 00:43:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149491 IP address blocks: 103.181.24.0/23 maxlen: 23 103.181.24.0/24 maxlen: 24 103.181.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Feb 11 00:43:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67aa9d34-6487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:24:7c:60:a0:00:dd:20:77:9a:42:27:1e: 8e:f1:7b:26:30:14:1c:94:74:37:29:17:91:2c:cd: 03:9c:9e:62:22:48:11:1f:e1:6d:90:11:ba:40:39: 24:6c:cf:f1:68:4a:f5:0b:6c:71:1f:18:20:32:f7: 7f:d0:a9:9e:58:83:f6:a3:41:9f:bd:e9:dd:88:81: d4:ed:90:bd:f7:6c:e0:16:d5:94:c2:db:39:d6:90: 05:72:0c:ad:4a:b4:e4:49:95:d9:15:e2:73:9a:a6: e5:8f:cb:d6:a5:fd:49:a0:98:b3:30:60:e3:d5:eb: 29:e4:9b:56:8c:3c:f7:03:f1:db:d8:26:f6:07:1c: 72:0d:f0:f8:7a:0e:55:75:85:0c:d9:c8:35:d8:44: f0:aa:70:16:0f:e5:b7:6d:0c:1e:3c:b2:a4:63:80: e2:86:4b:95:f5:51:d4:8d:11:cc:6b:65:c3:69:8a: db:c1:10:4b:2e:e2:2a:c2:3c:de:bf:86:a6:c3:b9: 5c:64:a0:38:e1:4c:2c:ac:4c:ec:63:7a:b9:5d:f3: 67:08:17:8b:10:12:3d:7f:2c:24:9d:f6:ff:0f:7c: 77:9a:f4:35:4f:86:8b:db:ac:f7:cc:fc:ca:e4:47: bd:78:0d:2a:c5:41:e5:68:be:e3:b3:43:9e:04:a3: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C6:DC:A1:A6:C5:9A:89:FF:42:25:00:09:D5:5D:01:D4:74:EC:04 X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/24C0E7A684C911EC8CE1246BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.24.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:57:ec:18:fc:9e:20:20:b0:c8:8c:99:38:90:a1:0c:e8:88: 0d:fe:d3:55:9f:66:d5:21:0d:50:d6:34:35:ca:2a:22:bf:fa: 2e:81:16:18:44:ba:dc:82:c2:7e:21:d1:d8:8d:78:d4:f8:e1: c7:df:a1:7a:ae:c1:c2:11:b6:28:55:fa:9d:1e:09:6c:c4:54: c5:cb:b3:37:a1:93:39:da:41:f4:98:5b:34:29:9d:8c:2a:cc: 53:84:25:54:06:9c:4c:f8:93:93:8b:2e:39:e9:da:5e:47:e0: 1a:5b:74:c7:fc:ca:5c:9a:2f:e8:8a:01:f6:5a:e8:04:2c:4f: 03:6c:7f:4b:27:d0:7a:8e:59:8b:fe:7d:a9:ea:eb:d3:6b:43: e8:d9:0e:8d:1f:0f:2d:4c:cf:0d:0a:ae:25:2f:5d:7b:fd:f3: 2a:89:95:c0:71:df:99:9b:7a:64:d5:3d:67:2c:fc:fc:af:ad: 33:e4:1d:d1:cd:a7:98:59:70:e7:8a:2e:3a:1b:a2:b4:04:cd: 0d:de:a6:ef:22:8f:e3:ef:ea:41:b2:15:c0:ac:8e:8f:aa:c8: c9:5e:e5:8d:94:1f:fe:d4:05:39:84:47:5f:aa:70:f6:5d:cf: dd:30:24:05:18:e8:22:4d:8c:f0:7f:53:dd:05:69:3f:52:08: 09:2c:bd:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjUwMjExMDA0MzMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhOWQzNC02NDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMQkfGCgAN0gd5pCJx6O8XsmMBQclHQ3KReRLM0DnJ5iIkgRH+FtkBG6QDkk bM/xaEr1C2xxHxggMvd/0KmeWIP2o0GfvendiIHU7ZC992zgFtWUwts51pAFcgyt SrTkSZXZFeJzmqblj8vWpf1JoJizMGDj1esp5JtWjDz3A/Hb2Cb2BxxyDfD4eg5V dYUM2cg12ETwqnAWD+W3bQwePLKkY4DihkuV9VHUjRHMa2XDaYrbwRBLLuIqwjze v4amw7lcZKA44UwsrEzsY3q5XfNnCBeLEBI9fywknfb/D3x3mvQ1T4aL26z3zPzK 5Ee9eA0qxUHlaL7js0OeBKMFzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3G3KGm xZqJ/0IlAAnVXQHUdOwEMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJCRTEvOUU2NjAzNEM4NEM1MTFFQ0E5ODYxNTY0QzRGOUFFMDIvMjRDMEU3QTY4 NEM5MTFFQzhDRTEyNDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFntRgwDQYJKoZIhvcNAQELBQADggEBAItX7Bj8niAgsMiM mTiQoQzoiA3+01WfZtUhDVDWNDXKKiK/+i6BFhhEutyCwn4h0diNeNT44cffoXqu wcIRtihV+p0eCWzEVMXLszehkznaQfSYWzQpnYwqzFOEJVQGnEz4k5OLLjnp2l5H 4BpbdMf8ylyaL+iKAfZa6AQsTwNsf0sn0HqOWYv+fanq69NrQ+jZDo0fDy1Mzw0K riUvXXv98yqJlcBx35mbemTVPWcs/PyvrTPkHdHNp5hZcOeKLjoborQEzQ3epu8i j+Pv6kGyFcCsjo+qyMle5Y2UH/7UBTmER1+qcPZdz90wJAUY6CJNjPB/U90FaT9S CAksvQE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:20:00 2025 by rpki-client