$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa File: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (raw, json) Hash identifier: 5sqOGBsF1ucCZYwk5F1J19/8HxFnGjHNBCogN/tCysY= Subject key identifier: 79:0B:F0:B8:C4:EE:40:3A:DD:53:72:AA:1F:45:C1:ED:07:A6:12:6F Certificate issuer: /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Certificate serial: 6D Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa Signing time: Thu 07 Nov 2024 04:57:45 +0000 ROA not before: Thu 07 Nov 2024 04:57:45 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 151842 IP address blocks: 103.224.72.0/24 maxlen: 24 2001:df2:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Validity Not Before: Nov 7 04:57:45 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672c48c9-acc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:62:f9:3d:62:7c:a4:a2:dc:8e:b1:3e:d2:f9: c3:97:1a:00:8a:29:c3:c1:1c:c0:f2:27:56:5b:af: c8:89:3a:93:06:ca:f0:7a:5d:be:c4:e9:23:7d:a0: 61:2a:b2:34:67:fc:4e:38:1a:0f:10:51:42:3e:f5: 7d:dd:20:aa:81:cb:fb:52:71:fc:eb:a4:79:47:54: 02:33:99:7f:37:82:f3:7f:2e:2d:89:8f:52:db:4b: 6d:0d:45:ca:d4:ed:bc:d3:7f:c8:bf:11:24:94:88: dc:05:7c:3a:32:93:a4:2f:00:91:27:68:00:b8:82: 9e:28:51:0d:9a:65:f1:05:3c:5d:a9:c6:18:9a:25: 47:62:b7:cb:40:df:e2:89:80:4c:0b:13:f3:5b:9c: df:12:01:06:80:58:71:e5:5c:8c:77:21:6e:ef:48: 90:aa:5c:75:5a:36:ae:5c:00:f9:4e:92:cc:75:d5: b4:8f:a5:dd:7e:67:ff:f5:44:72:62:b6:94:ba:ed: f1:99:8c:41:99:dc:45:84:1d:eb:82:77:02:72:d0: 15:2a:0f:21:14:2d:9e:29:2a:7e:09:f7:7e:6d:40: 69:3d:f1:f1:e7:bf:bb:85:b7:d3:61:ce:fe:a0:e1: 5a:b2:05:2f:43:32:82:8a:73:bf:87:01:5f:02:d0: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0B:F0:B8:C4:EE:40:3A:DD:53:72:AA:1F:45:C1:ED:07:A6:12:6F X509v3 Authority Key Identifier: keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.72.0/24 IPv6: 2001:df2:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:47:47:ff:26:73:92:b2:85:a4:d6:be:4b:d7:53:5d:7f:0b: f5:bc:ec:18:b9:b2:61:75:93:63:fa:5f:33:29:09:3f:53:8c: 3e:da:68:e6:b3:7e:f7:98:7f:64:c1:ef:8b:1a:1e:16:31:4f: 45:95:7e:62:23:08:80:b5:3e:9e:ae:49:2f:43:99:4f:34:81: 24:8c:ec:f4:29:b6:c5:db:db:c5:d6:bc:8d:50:39:ae:fb:60: ec:3f:23:0c:3f:06:37:99:a3:4b:8b:dd:a4:68:7d:0d:a6:2f: d0:7e:98:66:8c:c4:63:07:ef:21:5e:c0:4b:ca:61:43:9e:1e: 3b:a6:a2:c3:90:40:52:4a:e6:8f:53:ca:ee:69:9e:41:7b:05: ef:30:f4:ae:a2:2a:8a:0f:32:83:b7:e9:4e:6d:e0:eb:d5:cb: d7:cf:65:fa:61:7c:ba:53:56:f6:e6:4f:25:eb:93:4d:c1:aa: fb:c6:0c:ce:7a:4f:e7:12:89:a2:14:25:e6:b0:01:86:25:ca: 49:a5:cf:02:ce:20:c2:e9:9b:b5:9e:90:f7:d1:06:48:dd:7f: 8f:d0:9b:ed:7d:56:98:4e:72:4b:53:61:7c:e3:b9:5f:e7:c4: 41:8f:b0:05:38:e6:67:c6:db:2d:60:59:3e:e7:c8:30:11:82: 0d:a5:1c:da -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Rjg5QTExMC8GA1UEBRMoNjBFNTRGNjA1MUVEQjQxRUE3QTk1MDg5NkNEOUJCRDY3 MDEyMEQ2MzAeFw0yNDExMDcwNDU3NDVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmM0OGM5LWFjYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqYvk9YnykotyOsT7S+cOXGgCKKcPBHMDyJ1Zbr8iJOpMGyvB6Xb7E6SN9oGEq sjRn/E44Gg8QUUI+9X3dIKqBy/tScfzrpHlHVAIzmX83gvN/Li2Jj1LbS20NRcrU 7bzTf8i/ESSUiNwFfDoyk6QvAJEnaAC4gp4oUQ2aZfEFPF2pxhiaJUdit8tA3+KJ gEwLE/NbnN8SAQaAWHHlXIx3IW7vSJCqXHVaNq5cAPlOksx11bSPpd1+Z//1RHJi tpS67fGZjEGZ3EWEHeuCdwJy0BUqDyEULZ4pKn4J935tQGk98fHnv7uFt9Nhzv6g 4VqyBS9DMoKKc7+HAV8C0AcZAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUeQvwuMTu QDrdU3KqH0XB7QemEm8wHwYDVR0jBBgwFoAUYOVPYFHttB6nqVCJbNm71nASDWMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGODlBLzhDNzA0NzQ0Rjg4 NDExRUVBN0IzQTc1MEM0RjlBRTAyL1lPVlBZRkh0dEI2bnFWQ0piTm03MW5BU0RX TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWU9WUFlGSHR0QjZucVZDSmJObTcxbkFTRFdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjg5QS84QzcwNDc0NEY4ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi85OUFBMzU4MEY4 ODYxMUVFOEU5QjNFNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGfgSDAPBAIAAjAJAwcAIAEN8v3AMA0GCSqGSIb3DQEBCwUA A4IBAQCPR0f/JnOSsoWk1r5L11Ndfwv1vOwYubJhdZNj+l8zKQk/U4w+2mjms373 mH9kwe+LGh4WMU9FlX5iIwiAtT6erkkvQ5lPNIEkjOz0KbbF29vF1ryNUDmu+2Ds PyMMPwY3maNLi92kaH0Npi/QfphmjMRjB+8hXsBLymFDnh47pqLDkEBSSuaPU8ru aZ5BewXvMPSuoiqKDzKDt+lObeDr1cvXz2X6YXy6U1b25k8l65NNwar7xgzOek/n EomiFCXmsAGGJcpJpc8CziDC6Zu1npD30QZI3X+P0JvtfVaYTnJLU2F847lf58RB j7AFOOZnxtstYFk+58gwEYINpRza -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:32 2025 by rpki-client