$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa File: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (raw, json) Hash identifier: M9SMB7jrl3DCJBDHj0otMuwBBH52v1DYheoMwHI+3Dw= Subject key identifier: A1:5D:C9:2A:D0:6B:D1:A1:A1:64:C1:A9:8D:A5:33:A3:3E:6B:FD:CA Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Certificate serial: 02 Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa Signing time: Wed 10 Jul 2024 01:05:32 +0000 ROA not before: Wed 10 Jul 2024 01:05:32 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10022 IP address blocks: 103.224.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Validity Not Before: Jul 10 01:05:32 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=668dde5c-57d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:6c:95:d3:0f:10:4e:b8:04:7c:cf:ef:ee: 7d:c3:a1:ca:e2:05:d2:8b:93:d6:ea:f7:79:dd:b1: f0:da:05:dc:f2:bd:a1:32:be:d4:96:5d:34:d9:d1: 0c:a1:13:2e:37:c3:72:84:f6:00:b5:60:33:b6:4a: 06:79:19:fb:4e:8d:08:ec:17:35:85:a8:6a:7b:4d: 93:08:63:30:da:cf:8b:c1:a1:23:bc:4f:7c:30:45: 6a:c4:df:11:aa:5e:0e:76:8e:1e:d8:27:2e:83:5c: d7:29:fd:29:40:e8:38:39:d5:a9:29:f5:89:4f:6f: 9c:6f:25:a3:d9:03:f6:e7:ec:7d:cd:a1:07:9f:ba: a3:f1:e0:82:a6:80:b7:25:7a:8a:4f:eb:a6:bd:bd: cb:1a:7b:81:b8:93:50:58:c5:86:7f:67:1e:8d:4e: 6a:cd:4d:d1:c7:e6:d4:3b:87:04:36:12:91:da:ae: 26:84:b3:e8:73:5c:86:05:fa:ca:f0:4d:ab:18:06: c5:b4:a3:b7:e7:5a:a3:64:68:3e:58:d8:93:7a:41: 7d:2c:a2:25:0d:66:3f:36:ca:35:12:ea:04:d0:7b: 4d:44:93:93:92:b8:0f:9c:67:9e:d2:d3:cd:d8:6b: 7e:ac:33:34:ec:22:53:43:65:d3:0d:7b:e0:99:61: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:C9:2A:D0:6B:D1:A1:A1:64:C1:A9:8D:A5:33:A3:3E:6B:FD:CA X509v3 Authority Key Identifier: keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/81AA7D1A3E5811EFAE13B943C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.107.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ae:98:1f:87:01:d8:d3:5c:e1:19:28:a2:ea:38:de:e0:15: bc:d7:da:db:f6:5c:01:f4:0c:e4:d7:06:aa:5a:64:b8:02:c4: b5:92:51:74:2f:36:0c:6d:06:61:60:9b:97:88:18:27:97:39: 13:96:4f:48:21:a6:2f:4b:b8:f2:aa:79:93:d2:82:ee:4b:a2: ef:02:02:fb:22:41:e3:1d:58:5b:cf:d7:75:5f:1c:36:e6:45: 3d:0d:90:9b:93:13:f2:87:7f:0c:67:a3:4e:05:d3:9d:44:e6: 02:70:95:5a:75:41:7f:17:38:49:8e:88:a5:6e:c7:3a:56:f1: 1e:8a:0f:06:0e:a5:75:3a:7e:2b:eb:96:76:dd:5a:23:f9:2c: 24:95:52:2e:ca:f5:27:dc:8e:2a:c6:fc:9d:c7:97:ba:04:2e: fb:5e:38:dd:d8:5c:9d:0a:7f:ed:4a:73:7b:2f:af:1f:62:81: 00:1d:69:39:80:85:2f:a2:a2:77:7e:9f:bb:5c:0a:93:45:10: 7a:d2:eb:1b:3e:0a:f8:2c:97:47:e5:df:c8:55:ac:c8:8d:84: 0f:f1:54:87:62:93:a8:9d:95:d7:fa:c2:5c:99:58:bb:bc:98: 5a:73:90:c7:bf:6c:b1:59:72:ad:59:0c:7f:68:20:1f:fc:91: 2c:c4:e3:16 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTBFQzExMC8GA1UEBRMoMjkzQ0UxREVEMUE2NDA0QjAwQjJDMENDRkIzRjNDRUFG QjIxQTUwODAeFw0yNDA3MTAwMTA1MzJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OGRkZTVjLTU3ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/42yV0w8QTrgEfM/v7n3DocriBdKLk9bq93ndsfDaBdzyvaEyvtSWXTTZ0Qyh Ey43w3KE9gC1YDO2SgZ5GftOjQjsFzWFqGp7TZMIYzDaz4vBoSO8T3wwRWrE3xGq Xg52jh7YJy6DXNcp/SlA6Dg51akp9YlPb5xvJaPZA/bn7H3NoQefuqPx4IKmgLcl eopP66a9vcsae4G4k1BYxYZ/Zx6NTmrNTdHH5tQ7hwQ2EpHariaEs+hzXIYF+srw TasYBsW0o7fnWqNkaD5Y2JN6QX0soiUNZj82yjUS6gTQe01Ek5OSuA+cZ57S083Y a36sMzTsIlNDZdMNe+CZYWmPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoV3JKtBr 0aGhZMGpjaUzoz5r/cowHwYDVR0jBBgwFoAUKTzh3tGmQEsAssDM+z886vshpQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MEVDLzI0QjhCRkUwM0U1 ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1R6aDN0R21RRXNBc3NETS16ODg2dnNocFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBFQy8yNEI4QkZFMDNFNTgxMUVGOTk2REEzMjFDNEY5QUUwMi84MUFBN0QxQTNF NTgxMUVGQUUxM0I5NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfgazANBgkqhkiG9w0BAQsFAAOCAQEANq6YH4cB2NNc4Rko ouo43uAVvNfa2/ZcAfQM5NcGqlpkuALEtZJRdC82DG0GYWCbl4gYJ5c5E5ZPSCGm L0u48qp5k9KC7kui7wIC+yJB4x1YW8/XdV8cNuZFPQ2Qm5MT8od/DGejTgXTnUTm AnCVWnVBfxc4SY6IpW7HOlbxHooPBg6ldTp+K+uWdt1aI/ksJJVSLsr1J9yOKsb8 nceXugQu+1443dhcnQp/7Upzey+vH2KBAB1pOYCFL6Kid36fu1wKk0UQetLrGz4K +CyXR+XfyFWsyI2ED/FUh2KTqJ2V1/rCXJlYu7yYWnOQx79ssVlyrVkMf2ggH/yR LMTjFg== -----END CERTIFICATE-----Generated at Tue Sep 17 07:38:16 2024 by rpki-client on console-fra.rpki-client.org