$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/7798FA94D9BF11ED88162D23C4F9AE02.roa File: 7798FA94D9BF11ED88162D23C4F9AE02.roa (raw, json) Hash identifier: +5+CGiKVbxmsjW2Dgtnff5yTnGOW4oXDxyvtduyu/to= Subject key identifier: E3:FF:CE:A0:A0:C6:63:9B:74:FF:BC:7F:61:88:06:C9:96:28:82:1F Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 2179 Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/7798FA94D9BF11ED88162D23C4F9AE02.roa Signing time: Tue 04 Mar 2025 16:33:12 +0000 ROA not before: Tue 04 Mar 2025 16:33:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136161 IP address blocks: 103.82.124.0/24 maxlen: 24 103.92.94.0/24 maxlen: 24 103.112.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8569 (0x2179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D Validity Not Before: Mar 4 16:33:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c72b48-f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:38:3d:b0:3e:b7:8a:96:e9:68:d3:27:79: 7d:bc:d3:b6:ff:6a:95:28:40:ce:b2:2c:4e:52:91: ab:85:48:ca:98:a1:49:82:19:09:c8:77:ed:f9:1e: bd:9c:48:ed:79:69:eb:82:d5:3d:43:05:cd:04:e3: 10:60:23:ef:89:83:98:bf:24:57:59:8a:82:be:8c: df:23:7a:9f:54:eb:33:3d:06:a0:97:17:e6:e6:fb: 4b:ba:bc:b3:37:a0:44:79:3c:f0:c9:c6:3d:ba:d5: 31:e3:d5:50:27:b7:f6:1f:57:53:4f:18:c8:1d:f7: 11:3d:4a:41:c1:02:c0:41:ea:5b:61:24:c6:2c:07: 12:07:ef:87:a4:e2:d1:e9:f0:86:31:31:56:b3:43: 1f:a2:f8:4a:97:0e:ee:b9:00:54:f4:f3:95:fa:57: 81:7d:39:59:ed:4c:39:55:74:cc:44:d2:bf:f5:bb: 9b:6a:a0:0a:1c:a6:5f:fe:ad:a3:41:af:ef:d2:49: d9:18:bb:e1:a7:33:65:85:8b:1e:6a:67:43:d4:3f: 52:c6:1a:93:99:76:33:ad:77:16:bd:f0:1e:02:5c: bf:e4:ed:fa:01:9a:02:9b:03:72:16:4a:e1:27:7c: 64:e7:7d:7f:7e:9a:df:18:5c:c4:96:f8:d2:d4:69: ce:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:CE:A0:A0:C6:63:9B:74:FF:BC:7F:61:88:06:C9:96:28:82:1F X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/7798FA94D9BF11ED88162D23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.82.124.0/24 103.92.94.0/24 103.112.104.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:f0:82:19:63:cb:4a:10:75:6d:5f:bd:fd:68:70:75:d2:32: 29:ed:2d:09:4a:0f:0d:27:63:6e:4d:0b:9e:a7:c0:37:fd:c8: 36:df:b6:9c:3e:bd:48:e1:54:e5:d3:bc:cb:9b:e7:13:b7:8a: e4:ed:af:03:01:73:ec:52:35:f7:bf:c7:8d:09:76:7e:3e:7d: 33:aa:2a:bf:f0:2a:16:e6:32:cc:74:16:56:2c:47:b7:f6:50: 29:7e:f3:a8:d7:71:70:87:35:a8:24:a0:d4:67:f2:94:90:b5: 7a:42:e0:39:c4:5a:88:3b:46:43:c3:28:09:53:aa:eb:88:46: 61:6d:0c:28:9a:4d:98:02:c9:0b:ba:db:68:72:72:2f:2d:44: c1:3a:81:e9:1b:1b:c2:64:78:dc:64:f0:10:24:7f:a1:b0:2b: 15:b2:8b:55:b4:4a:1a:4c:32:06:1d:d1:37:15:f0:5d:55:e9: ab:e7:6d:3f:a8:ab:26:47:20:67:d9:6a:c2:84:b5:72:1f:7e: 19:ec:22:0a:25:46:5a:df:01:60:82:ee:5c:45:ca:3c:a8:26: 07:ba:a0:b1:d8:75:11:43:c1:25:f6:9a:35:d9:82:dd:ee:81: 0d:1a:5a:f7:f0:75:9a:64:e5:1d:43:23:eb:16:fa:61:81:21: 1a:a9:64:18 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjUwMzA0MTYzMzEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MmI0OC1mM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGw4PbA+t4qW6WjTJ3l9vNO2/2qVKEDOsixOUpGrhUjKmKFJghkJyHft+R69 nEjteWnrgtU9QwXNBOMQYCPviYOYvyRXWYqCvozfI3qfVOszPQaglxfm5vtLuryz N6BEeTzwycY9utUx49VQJ7f2H1dTTxjIHfcRPUpBwQLAQepbYSTGLAcSB++HpOLR 6fCGMTFWs0MfovhKlw7uuQBU9POV+leBfTlZ7Uw5VXTMRNK/9bubaqAKHKZf/q2j Qa/v0knZGLvhpzNlhYseamdD1D9SxhqTmXYzrXcWvfAeAly/5O36AZoCmwNyFkrh J3xk531/fprfGFzElvjS1GnOjwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOP/zqCg xmObdP+8f2GIBsmWKIIfMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvNzc5OEZBOTRE OUJGMTFFRDg4MTYyRDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnUnwDBABnXF4DBAFncGgwDQYJKoZIhvcNAQELBQADggEB AJ/wghljy0oQdW1fvf1ocHXSMintLQlKDw0nY25NC56nwDf9yDbftpw+vUjhVOXT vMub5xO3iuTtrwMBc+xSNfe/x40Jdn4+fTOqKr/wKhbmMsx0FlYsR7f2UCl+86jX cXCHNagkoNRn8pSQtXpC4DnEWog7RkPDKAlTquuIRmFtDCiaTZgCyQu622hyci8t RME6gekbG8JkeNxk8BAkf6GwKxWyi1W0ShpMMgYd0TcV8F1V6avnbT+oqyZHIGfZ asKEtXIffhnsIgolRlrfAWCC7lxFyjyoJge6oLHYdRFDwSX2mjXZgt3ugQ0aWvfw dZpk5R1DI+sW+mGBIRqpZBg= -----END CERTIFICATE-----Generated at Thu Apr 10 10:48:57 2025 by rpki-client