$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa File: F2CE31B608CA11F09E81487CC4F9AE02.roa (raw, json) Hash identifier: /IwIj5wHV9TZq7gyFUGmW+srgA66FnHYYQjrcF03350= Subject key identifier: C0:4E:13:1B:3A:8E:16:A4:70:69:39:3B:E4:C4:61:F2:C5:1D:B1:E4 Certificate issuer: /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97 Certificate serial: 019F Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa Signing time: Mon 24 Mar 2025 16:13:40 +0000 ROA not before: Mon 24 Mar 2025 16:13:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.81.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91403E9 Validity Not Before: Mar 24 16:13:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67e184b4-df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:99:63:3d:33:8b:86:08:69:71:e1:1b:3a: 79:4a:3a:e7:de:ae:57:02:71:3d:a7:45:7d:87:40: 36:07:c1:ba:3b:a3:3d:98:bd:f0:e6:77:eb:85:2f: c0:60:38:9d:6a:e3:3e:89:1d:3e:d7:d8:79:67:05: 90:6f:5a:c8:99:78:7b:54:82:90:e5:84:e4:61:dc: 85:45:7f:c2:01:e8:96:16:32:73:e3:80:06:66:2a: 41:3a:32:15:63:fa:e7:8a:1e:e9:0c:e7:cd:a6:01: 16:81:85:a9:bd:5d:96:d0:0e:03:d4:6e:7c:79:c0: ee:72:62:02:49:87:9e:92:33:4f:b0:25:e6:ee:55: fc:b4:66:dc:1c:ac:61:98:09:b3:d1:8b:34:48:4f: ca:97:bc:55:c1:fb:fe:0d:a0:c8:e8:ff:f7:a0:43: ea:7b:7a:e1:23:fc:61:45:d3:08:e1:9b:08:ad:7d: 2e:72:dc:f8:1c:5b:a1:5a:f2:2d:a9:da:dd:ec:e2: 7d:7a:57:79:6b:e8:f3:bd:d3:92:52:af:c7:b0:0d: 67:35:60:c5:14:81:c2:cf:d7:4b:03:5c:14:84:21: c3:bc:99:2e:c1:0d:93:44:bf:57:84:65:26:fc:3b: 0f:71:69:bc:00:d4:f9:3b:89:9b:cd:e4:92:bc:1c: 44:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:13:1B:3A:8E:16:A4:70:69:39:3B:E4:C4:61:F2:C5:1D:B1:E4 X509v3 Authority Key Identifier: keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/F2CE31B608CA11F09E81487CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.28.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b0:69:f6:84:45:4c:cc:c3:0c:d8:26:39:6d:5b:9d:c5:af: e2:f2:fb:6f:a1:2c:6e:f6:79:5e:64:fd:c6:71:07:b6:c5:33: 88:23:d6:6b:53:8f:5e:66:56:8d:be:9e:87:bb:48:fe:0a:02: 1b:c4:92:b4:74:8e:6e:e0:ce:9a:10:16:51:cc:50:94:c5:d5: 96:6b:ea:5d:0f:bd:05:12:27:3e:5a:e8:f5:42:26:ad:1f:56: 5c:98:50:12:fe:c5:a7:3e:7d:b9:a5:c6:1f:de:18:21:ea:fc: 50:20:b9:47:55:0a:5c:4b:fc:0a:e6:39:04:44:17:b2:0b:ca: 1f:cf:7c:1b:4a:6b:ba:08:83:3b:c0:6b:d5:38:34:c3:51:8e: 21:74:ab:ed:0b:59:67:01:7d:0f:dd:37:74:96:33:3c:2b:20: 22:09:7d:29:8d:21:2f:1c:64:45:76:bb:17:d7:cb:7f:af:34: fe:6c:5d:72:de:fa:e1:d1:ac:b7:70:1c:46:c9:3c:4d:9f:ad: e3:e1:f5:2f:bf:0f:80:bd:1e:87:c5:4f:d3:24:f8:d8:fc:28: 15:cc:28:22:79:00:3e:9f:87:ca:ba:2a:82:cb:ed:85:7b:81: 55:2d:e1:e7:0b:d8:e1:ad:bd:1b:37:23:ec:ca:0b:c7:7a:ec: 0f:aa:be:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAzRTkxMTAvBgNVBAUTKDkyRkVGRThBRTgyOUYwQTVBNTAxQjU3NTA2RkFFNEU1 QzExQTFEOTcwHhcNMjUwMzI0MTYxMzQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxODRiNC1kZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKmZYz0zi4YIaXHhGzp5Sjrn3q5XAnE9p0V9h0A2B8G6O6M9mL3w5nfrhS/A YDidauM+iR0+19h5ZwWQb1rImXh7VIKQ5YTkYdyFRX/CAeiWFjJz44AGZipBOjIV Y/rnih7pDOfNpgEWgYWpvV2W0A4D1G58ecDucmICSYeekjNPsCXm7lX8tGbcHKxh mAmz0Ys0SE/Kl7xVwfv+DaDI6P/3oEPqe3rhI/xhRdMI4ZsIrX0uctz4HFuhWvIt qdrd7OJ9eld5a+jzvdOSUq/HsA1nNWDFFIHCz9dLA1wUhCHDvJkuwQ2TRL9XhGUm /DsPcWm8ANT5O4mbzeSSvBxEjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBOExs6 jhakcGk5O+TEYfLFHbHkMB8GA1UdIwQYMBaAFJL+/oroKfClpQG1dQb65OXBGh2X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDNFOS8xNzYxMzIzNEFD M0ExMUVEOTc0MEI2NTVDNEY5QUUwMi9rdjctaXVncDhLV2xBYlYxQnZyazVjRWFI WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t2Ny1pdWdwOEtXbEFiVjFCdnJrNWNFYUhaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAzRTkvMTc2MTMyMzRBQzNBMTFFRDk3NDBCNjU1QzRGOUFFMDIvRjJDRTMxQjYw OENBMTFGMDlFODE0ODdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnURwwDQYJKoZIhvcNAQELBQADggEBADGwafaERUzMwwzY JjltW53Fr+Ly+2+hLG72eV5k/cZxB7bFM4gj1mtTj15mVo2+noe7SP4KAhvEkrR0 jm7gzpoQFlHMUJTF1ZZr6l0PvQUSJz5a6PVCJq0fVlyYUBL+xac+fbmlxh/eGCHq /FAguUdVClxL/ArmOQREF7ILyh/PfBtKa7oIgzvAa9U4NMNRjiF0q+0LWWcBfQ/d N3SWMzwrICIJfSmNIS8cZEV2uxfXy3+vNP5sXXLe+uHRrLdwHEbJPE2frePh9S+/ D4C9HofFT9Mk+Nj8KBXMKCJ5AD6fh8q6KoLL7YV7gVUt4ecL2OGtvRs3I+zKC8d6 7A+qvms= -----END CERTIFICATE-----Generated at Sat Apr 5 02:20:46 2025 by rpki-client