$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa File: C09ED7E6804A11EDABB05C09C4F9AE02.roa (raw, json) Hash identifier: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU= Subject key identifier: 5F:5D:01:0F:6C:B7:7A:07:51:11:1F:C1:3D:E2:A6:00:AB:0D:E8:5A Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 0312 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa Signing time: Mon 27 Jan 2025 00:53:58 +0000 ROA not before: Mon 27 Jan 2025 00:53:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 140224 IP address blocks: 103.179.242.0/24 maxlen: 24 103.179.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6 Validity Not Before: Jan 27 00:53:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6796d926-c23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:2c:81:2c:72:e9:ec:55:b9:07:36:b8:55: fb:78:7d:21:ca:bc:d6:d6:45:e6:dc:72:c2:f0:32: 1f:ac:63:18:a4:1c:c3:c8:d0:de:12:5d:28:ec:50: 6d:78:c4:cc:19:8c:d0:45:ed:47:d8:75:d8:27:a8: c1:f2:9e:cc:0c:b5:3d:6b:93:d0:37:6d:60:ad:5e: 29:b8:72:c6:f2:2b:61:13:51:7d:5c:12:11:d8:69: 4a:bd:7e:a8:fc:9d:c7:18:ec:67:26:dc:29:f4:5f: a1:09:ff:0b:d7:55:9d:5c:22:b1:6f:02:61:ae:35: 9e:45:74:ac:f2:18:cd:9d:51:39:df:0c:8f:87:ea: 66:8b:fb:58:9e:1f:c3:4c:8c:9f:c6:18:3a:80:02: c2:3a:cb:31:c8:d3:a3:4f:ec:53:85:17:92:b3:47: 4e:51:82:af:3c:6d:8b:63:9b:11:41:b4:94:7f:4f: b8:3a:2b:0c:a8:9b:29:6d:a5:90:ff:8c:fa:32:c8: ce:1f:44:4c:fa:be:bd:05:fb:b3:18:2b:8c:a5:82: fc:bd:92:a4:32:05:6b:92:8c:23:4e:8d:3b:d5:51: c6:05:e8:7a:df:ce:a8:19:a2:90:35:f0:d1:7d:b2: d7:b9:b8:d1:c5:f2:73:46:4e:0c:cd:2c:8f:2d:f3: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5D:01:0F:6C:B7:7A:07:51:11:1F:C1:3D:E2:A6:00:AB:0D:E8:5A X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.242.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:28:d3:76:dd:29:33:e2:16:aa:45:6e:6f:d4:ed:0d:fe:18: 50:80:64:19:5b:5d:ec:fb:f1:19:6c:7a:63:0b:e6:07:f9:7b: 88:81:77:be:0c:68:4a:2b:81:03:ba:ac:97:65:a2:af:92:02: 0e:aa:ac:1f:c9:bf:57:40:e3:d4:fa:91:3e:d6:8a:08:20:ab: fc:60:64:86:61:44:0e:3c:b0:2c:2f:6a:3f:83:70:31:b9:43: 17:3d:28:ee:16:5e:6f:3b:2a:fe:dd:fa:01:5d:9a:3f:ae:6d: 0a:2c:f0:3a:69:87:da:4b:a0:26:bb:0f:ef:4b:53:58:46:6d: df:16:bb:13:c7:84:c1:e2:14:98:2c:bb:af:f4:c5:5d:77:c4: cb:24:8f:8b:4f:4d:a1:10:7a:78:32:9e:ed:7a:05:80:9f:0f: d6:30:0b:39:82:1a:a6:c1:7d:59:34:6c:d2:c7:23:2b:13:bf: f1:f0:6f:cd:c8:5c:c7:aa:41:20:67:e5:82:f8:b8:46:38:13: ad:67:3f:ca:42:7c:94:e6:bc:30:dc:98:16:1a:84:89:1b:29: 41:ba:c0:9e:3e:5a:e0:d0:85:76:51:88:10:a5:7d:e2:8d:78: 79:8c:86:46:8b:a9:5c:5f:99:0d:e2:df:6f:2e:2f:fe:6c:75: 42:d8:bf:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUwMTI3MDA1MzU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk2ZDkyNi1jMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiUsgSxy6exVuQc2uFX7eH0hyrzW1kXm3HLC8DIfrGMYpBzDyNDeEl0o7FBt eMTMGYzQRe1H2HXYJ6jB8p7MDLU9a5PQN21grV4puHLG8ithE1F9XBIR2GlKvX6o /J3HGOxnJtwp9F+hCf8L11WdXCKxbwJhrjWeRXSs8hjNnVE53wyPh+pmi/tYnh/D TIyfxhg6gALCOssxyNOjT+xThReSs0dOUYKvPG2LY5sRQbSUf0+4OisMqJspbaWQ /4z6MsjOH0RM+r69BfuzGCuMpYL8vZKkMgVrkowjTo071VHGBeh6386oGaKQNfDR fbLXubjRxfJzRk4MzSyPLfPImwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF9dAQ9s t3oHUREfwT3ipgCrDehaMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y3RjYvNzgyNEVCRDRCRkJEMTFFQ0I3ODgxMjVEQzRGOUFFMDIvQzA5RUQ3RTY4 MDRBMTFFREFCQjA1QzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFns/IwDQYJKoZIhvcNAQELBQADggEBAAso03bdKTPiFqpF bm/U7Q3+GFCAZBlbXez78RlsemML5gf5e4iBd74MaEorgQO6rJdloq+SAg6qrB/J v1dA49T6kT7Wigggq/xgZIZhRA48sCwvaj+DcDG5Qxc9KO4WXm87Kv7d+gFdmj+u bQos8Dpph9pLoCa7D+9LU1hGbd8WuxPHhMHiFJgsu6/0xV13xMskj4tPTaEQengy nu16BYCfD9YwCzmCGqbBfVk0bNLHIysTv/Hwb83IXMeqQSBn5YL4uEY4E61nP8pC fJTmvDDcmBYahIkbKUG6wJ4+WuDQhXZRiBClfeKNeHmMhkaLqVxfmQ3i328uL/5s dULYvzE= -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:30 2025 by rpki-client