$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa File: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (raw, json) Hash identifier: WIZmU+L0O9RcMZGa4g5/Y6rLFYKaR2VClhlEkEMS/7E= Subject key identifier: 0F:54:F8:C0:5C:11:8B:3F:97:68:05:5B:EB:4B:80:7B:0C:58:EC:DB Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Certificate serial: 66 Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa Signing time: Fri 17 Jan 2025 05:18:34 +0000 ROA not before: Fri 17 Jan 2025 05:18:34 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 10022 IP address blocks: 103.224.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Validity Not Before: Jan 17 05:18:34 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6789e82a-110b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:45:52:ae:9f:a6:8e:47:40:0a:13:f1:0a: 61:b0:14:b8:74:22:c1:59:9e:12:03:62:58:15:09: 30:44:06:a0:a1:c1:00:d8:a2:58:c7:76:46:4d:65: c0:f4:6a:46:ed:f3:68:85:3c:71:69:b4:e6:7d:00: 53:f2:eb:7b:e0:6a:18:3e:65:96:97:1a:fe:48:70: b0:f9:c1:78:72:0f:06:2f:89:e1:2b:d3:e9:4c:eb: 66:ee:dd:db:12:04:f2:35:0e:28:7e:cf:8c:86:e0: e8:63:6e:0b:c9:2c:50:eb:99:dd:4f:a4:18:93:fb: 60:7a:6e:68:ea:b6:0d:f3:58:b7:c2:48:98:96:7f: 1c:db:01:0c:96:46:96:c0:b0:d4:35:02:94:82:ae: 12:ed:e7:cb:c3:ff:5a:c5:13:0c:4a:5a:42:ed:3e: b4:62:fe:ee:c7:a0:0d:ed:97:1d:d4:7d:55:cb:63: dd:39:54:3d:ce:d0:01:4a:99:34:b5:1d:df:2b:14: 1e:18:6e:b5:27:58:92:a0:6d:92:54:f2:af:b2:cb: 8e:6e:85:c2:04:28:0d:f2:5f:61:6f:93:75:ef:2a: 85:3d:09:ce:06:5f:9c:d9:9a:7b:14:0f:7c:9c:cb: 2d:29:60:e1:dc:c4:5d:a3:38:01:68:bd:fd:c2:a5: 63:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:F8:C0:5C:11:8B:3F:97:68:05:5B:EB:4B:80:7B:0C:58:EC:DB X509v3 Authority Key Identifier: keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.107.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:68:36:a6:b2:b3:1e:50:0a:b2:f2:d5:2b:e4:10:dc:68:83: d0:ff:fe:b0:9f:ab:f1:09:4d:b6:25:0e:91:14:57:f7:d5:87: 7a:4d:d8:c6:61:2d:9d:f1:0a:21:a4:9f:df:ad:4c:a8:23:e0: bb:af:47:cf:d3:85:b7:c0:95:72:d7:bc:77:71:cc:13:d0:13: 99:09:17:a0:db:a8:12:c8:b5:ce:b2:64:cf:53:a2:ec:50:be: 49:b4:2d:c9:27:80:64:54:ff:b5:93:ba:ea:7a:48:aa:44:6f: 58:3a:3f:9e:d2:cd:4f:a1:ed:7f:dc:13:a6:f2:65:91:1b:3f: ce:8f:46:5f:d5:a7:d7:ee:fb:14:b6:c6:bd:84:53:7c:0e:a3: 79:12:5e:05:9f:e4:b5:30:ef:d6:b2:92:87:2b:35:77:23:77: a6:31:5a:02:af:a3:b3:af:76:ff:b6:b7:e4:11:1e:77:25:1b: 3e:02:9f:d7:07:ae:e7:ee:5d:de:3c:0d:ea:ea:3d:31:ea:3d: da:e6:4c:5b:cc:7c:9a:64:4f:75:ad:af:8d:1b:97:7d:be:bc: 15:bf:23:65:ee:16:ab:05:e3:1b:ef:1b:e6:ff:00:2f:af:8e: 14:58:d3:a7:6a:2b:8b:b7:cb:99:ac:93:b2:9c:64:2c:10:0b: d8:e2:1d:69 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTBFQzExMC8GA1UEBRMoMjkzQ0UxREVEMUE2NDA0QjAwQjJDMENDRkIzRjNDRUFG QjIxQTUwODAeFw0yNTAxMTcwNTE4MzRaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODllODJhLTExMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeWEVSrp+mjkdAChPxCmGwFLh0IsFZnhIDYlgVCTBEBqChwQDYoljHdkZNZcD0 akbt82iFPHFptOZ9AFPy63vgahg+ZZaXGv5IcLD5wXhyDwYvieEr0+lM62bu3dsS BPI1Dih+z4yG4OhjbgvJLFDrmd1PpBiT+2B6bmjqtg3zWLfCSJiWfxzbAQyWRpbA sNQ1ApSCrhLt58vD/1rFEwxKWkLtPrRi/u7HoA3tlx3UfVXLY905VD3O0AFKmTS1 Hd8rFB4YbrUnWJKgbZJU8q+yy45uhcIEKA3yX2Fvk3XvKoU9Cc4GX5zZmnsUD3yc yy0pYOHcxF2jOAFovf3CpWO/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD1T4wFwR iz+XaAVb60uAewxY7NswHwYDVR0jBBgwFoAUKTzh3tGmQEsAssDM+z886vshpQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MEVDLzI0QjhCRkUwM0U1 ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1R6aDN0R21RRXNBc3NETS16ODg2dnNocFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFQy8yNEI4QkZFMDNFNTgxMUVGOTk2REEzMjFDNEY5QUUwMi84MUFBN0QxQTNF NTgxMUVGQUUxM0I5NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfgazANBgkqhkiG9w0BAQsFAAOCAQEAa2g2prKzHlAKsvLV K+QQ3GiD0P/+sJ+r8QlNtiUOkRRX99WHek3YxmEtnfEKIaSf361MqCPgu69Hz9OF t8CVcte8d3HME9ATmQkXoNuoEsi1zrJkz1Oi7FC+SbQtySeAZFT/tZO66npIqkRv WDo/ntLNT6Htf9wTpvJlkRs/zo9GX9Wn1+77FLbGvYRTfA6jeRJeBZ/ktTDv1rKS hys1dyN3pjFaAq+js692/7a35BEedyUbPgKf1weu5+5d3jwN6uo9Meo92uZMW8x8 mmRPda2vjRuXfb68Fb8jZe4WqwXjG+8b5v8AL6+OFFjTp2ori7fLmayTspxkLBAL 2OIdaQ== -----END CERTIFICATE-----Generated at Sat Apr 26 09:11:07 2025 by rpki-client