$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa File: 02181C4CE13511E7B0D71C83C4F9AE02.roa (raw, json) Hash identifier: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk= Subject key identifier: 33:57:9D:85:78:93:D3:90:80:83:F9:1A:63:C2:DA:59:3A:A5:54:54 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 16EB Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa Signing time: Wed 08 Jan 2025 17:04:36 +0000 ROA not before: Wed 08 Jan 2025 17:04:36 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 137243 IP address blocks: 103.105.191.0/24 maxlen: 24 2001:df3:8900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5867 (0x16eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Jan 8 17:04:36 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677eb023-39c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:95:7c:85:12:e5:7b:a8:21:22:55:b0:ff:56: 25:fc:df:9f:e2:e5:00:5f:e8:fa:4c:c5:af:62:04: 83:1b:9b:fd:94:2c:23:3a:60:57:01:b3:4f:b9:2f: 7c:b3:50:62:22:1e:4b:b2:fb:97:10:62:d4:d1:6d: 75:86:ba:de:36:94:8a:8e:0a:91:6a:56:cf:f2:47: 1c:f6:78:fb:75:0b:7c:b5:7f:52:4c:a0:ab:09:16: 63:22:f8:2a:fb:72:fb:96:21:8f:a1:76:69:48:15: dd:47:57:bf:57:ce:2f:d0:12:cf:13:e5:ef:9b:6f: f2:66:15:b4:85:87:39:b1:32:a8:d9:fd:d5:c7:8f: ad:88:91:70:05:67:16:e3:62:70:12:fe:b3:f4:86: c6:22:15:f8:de:7c:bf:83:b7:38:cc:bc:12:85:cd: 60:44:24:4b:c5:ee:d5:be:07:1c:0c:35:55:02:5d: 06:a5:29:3f:6a:fb:d7:28:a7:88:4a:28:60:b2:85: 42:99:fd:56:1c:41:f3:c8:65:af:99:c3:37:0d:56: f5:a5:68:9a:6d:c8:f5:88:29:b3:39:48:3b:83:0f: 46:26:46:46:2a:30:d9:e2:42:86:f6:b4:ba:11:1c: 0e:d9:b9:25:db:5e:d6:51:20:5a:48:1d:7f:e9:4a: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:57:9D:85:78:93:D3:90:80:83:F9:1A:63:C2:DA:59:3A:A5:54:54 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/02181C4CE13511E7B0D71C83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.105.191.0/24 IPv6: 2001:df3:8900::/48 Signature Algorithm: sha256WithRSAEncryption 65:44:ca:8f:fe:8c:f2:2e:32:49:0d:e7:fb:25:66:b5:1b:ee: b3:3e:16:57:81:fd:cd:89:ed:fb:6d:3c:b2:fb:79:67:ba:80: e9:5a:85:23:04:f1:0a:fb:f8:38:98:fa:58:cf:b0:a8:1a:11: 81:54:4c:05:25:05:03:4e:c9:0b:63:96:1f:0e:f8:ae:f6:09: 47:b3:e5:30:47:38:f5:4d:8b:0e:ad:01:14:55:b9:65:16:fe: ca:b2:be:d9:91:52:9b:ea:37:02:be:32:86:75:fe:02:9c:da: 2a:d9:0c:fc:4d:f4:82:a9:43:1c:31:09:55:14:3c:1f:74:f7: 0a:9f:50:12:19:07:fa:10:20:5b:09:77:a6:13:31:43:bc:f8: fc:5c:06:93:cc:71:d3:8f:1a:e3:d8:53:21:4c:36:ec:2f:a1: b7:6b:87:02:42:88:48:08:3b:80:98:07:0c:71:47:c9:3b:ea: 6c:15:47:d9:f3:21:93:50:95:7f:0b:9b:d7:7b:cf:3d:ce:12: ee:cb:67:fa:ce:08:b3:0b:1c:fe:91:c2:4c:db:20:3f:43:0d: 01:ea:3a:73:73:43:d7:24:69:4b:63:65:8a:54:2a:02:79:8d: ca:fd:d7:c2:2e:00:bb:3e:8f:30:d9:02:3e:f9:25:27:cd:ac: 30:fe:73:7f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICFuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUwMTA4MTcwNDM2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlYjAyMy0zOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpV8hRLle6ghIlWw/1Yl/N+f4uUAX+j6TMWvYgSDG5v9lCwjOmBXAbNPuS98 s1BiIh5LsvuXEGLU0W11hrreNpSKjgqRalbP8kcc9nj7dQt8tX9STKCrCRZjIvgq +3L7liGPoXZpSBXdR1e/V84v0BLPE+Xvm2/yZhW0hYc5sTKo2f3Vx4+tiJFwBWcW 42JwEv6z9IbGIhX43ny/g7c4zLwShc1gRCRLxe7VvgccDDVVAl0GpSk/avvXKKeI SihgsoVCmf1WHEHzyGWvmcM3DVb1pWiabcj1iCmzOUg7gw9GJkZGKjDZ4kKG9rS6 ERwO2bkl217WUSBaSB1/6UqPiwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDNXnYV4 k9OQgIP5GmPC2lk6pVRUMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkIwOUMvMUZDRDE1RTBFMTM0MTFFNzgyNTMxMDgyQzRGOUFFMDIvMDIxODFDNENF MTM1MTFFN0IwRDcxQzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnab8wDwQCAAIwCQMHACABDfOJADANBgkqhkiG9w0BAQsF AAOCAQEAZUTKj/6M8i4ySQ3n+yVmtRvusz4WV4H9zYnt+208svt5Z7qA6VqFIwTx Cvv4OJj6WM+wqBoRgVRMBSUFA07JC2OWHw74rvYJR7PlMEc49U2LDq0BFFW5ZRb+ yrK+2ZFSm+o3Ar4yhnX+ApzaKtkM/E30gqlDHDEJVRQ8H3T3Cp9QEhkH+hAgWwl3 phMxQ7z4/FwGk8xx048a49hTIUw27C+ht2uHAkKISAg7gJgHDHFHyTvqbBVH2fMh k1CVfwub13vPPc4S7stn+s4Iswsc/pHCTNsgP0MNAeo6c3ND1yRpS2NlilQqAnmN yv3Xwi4Auz6PMNkCPvklJ82sMP5zfw== -----END CERTIFICATE-----Generated at Sun Apr 13 03:49:11 2025 by rpki-client