$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa File: 2B24D5DC854511EB9B57240FC4F9AE02.roa (raw, json) Hash identifier: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg= Subject key identifier: B0:EC:97:D0:8D:BC:9F:AE:99:22:E7:48:4A:9F:D7:FC:0A:12:8D:D2 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 07F1 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa Signing time: Mon 28 Apr 2025 21:31:19 +0000 ROA not before: Mon 28 Apr 2025 21:31:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138956 IP address blocks: 103.137.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Apr 28 21:31:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680ff3a7-3a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:74:ed:e7:21:9f:dc:2a:32:9d:97:af:96: 94:b9:e0:d8:d6:d2:3b:11:6e:5e:52:4e:ac:f9:a3: d8:39:71:84:1f:26:a3:17:08:0f:20:2c:e4:0d:8c: a9:fa:52:98:ad:80:c5:15:9e:77:49:5e:52:31:4e: b6:03:27:7f:9e:3f:45:39:9e:40:dd:62:1d:62:d1: b1:9d:75:7a:43:47:d1:51:36:ac:c9:fb:8c:a5:0c: 76:3c:48:00:10:3d:20:de:79:31:cc:8f:ef:8f:3c: b3:4c:14:87:49:88:c2:3d:ca:b0:85:92:73:9b:2d: fe:c8:39:56:24:9f:b7:a9:52:40:ed:24:3e:12:88: 5d:18:83:d8:90:f9:43:a5:9c:7c:e6:b2:81:4f:98: d5:3a:a9:e2:6f:a4:92:1c:77:c5:2c:c2:6e:41:ec: f5:b9:24:bc:19:59:de:37:47:8d:08:0d:7b:57:9b: f6:44:8c:7c:72:67:36:43:f1:5b:1c:42:53:e2:c5: f1:6c:fe:00:55:3d:0a:6e:7f:95:b0:5e:bf:93:d9: cd:fd:fd:70:02:2c:e8:a3:bb:4c:cf:34:a3:dc:8a: 74:af:b4:c5:4a:4f:db:c2:48:ba:9c:de:0a:02:e2: 4e:ab:6c:88:68:9e:f0:17:fa:eb:a8:14:db:01:25: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EC:97:D0:8D:BC:9F:AE:99:22:E7:48:4A:9F:D7:FC:0A:12:8D:D2 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/2B24D5DC854511EB9B57240FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.164.0/24 Signature Algorithm: sha256WithRSAEncryption 27:44:a3:e1:6c:5d:00:70:7a:d3:bc:2d:41:21:ca:04:88:fb: dd:e8:5b:cb:5a:bf:23:2e:3e:68:c0:2b:89:a8:b5:fe:a3:71: c0:ac:84:c3:44:80:9d:f4:51:92:0f:95:1a:e3:58:d3:de:ba: c3:25:53:16:8c:75:88:c5:b1:12:18:71:bd:ef:1a:28:d4:8c: cd:af:35:de:f1:d0:2c:ca:2a:80:db:f9:dc:51:30:95:8e:36: 03:88:d3:af:48:3d:36:a8:f3:07:99:b5:2e:cd:af:56:3f:9d: e8:84:e7:fd:40:1c:23:ec:75:89:de:74:86:76:5f:8f:cc:71: 8e:98:77:f8:ec:73:48:b2:b7:75:25:65:79:52:5a:6e:12:66: 67:7f:8b:de:3d:1b:14:b3:b5:2f:c3:c5:bd:9e:35:28:39:90: 89:84:0a:66:9e:3f:fd:56:c3:9b:5c:16:29:cb:4c:8e:68:b6: 0f:85:5d:04:f0:d1:b2:63:1f:12:25:86:8f:dd:7a:9d:52:59: 4e:c0:bf:0e:6d:46:ad:99:ed:85:d1:b4:cc:b3:05:54:e0:1c: 77:4b:5d:f1:f9:20:c3:3c:15:4d:50:0a:40:43:ac:0c:37:b0: cb:55:58:f3:45:d4:bd:93:81:be:4d:33:52:34:58:9c:b6:ca: 93:c0:c0:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUwNDI4MjEzMTE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmZjNhNy0zYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYd07echn9wqMp2Xr5aUueDY1tI7EW5eUk6s+aPYOXGEHyajFwgPICzkDYyp +lKYrYDFFZ53SV5SMU62Ayd/nj9FOZ5A3WIdYtGxnXV6Q0fRUTasyfuMpQx2PEgA ED0g3nkxzI/vjzyzTBSHSYjCPcqwhZJzmy3+yDlWJJ+3qVJA7SQ+EohdGIPYkPlD pZx85rKBT5jVOqnib6SSHHfFLMJuQez1uSS8GVneN0eNCA17V5v2RIx8cmc2Q/Fb HEJT4sXxbP4AVT0Kbn+VsF6/k9nN/f1wAizoo7tMzzSj3Ip0r7TFSk/bwki6nN4K AuJOq2yIaJ7wF/rrqBTbASW7qQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDsl9CN vJ+umSLnSEqf1/wKEo3SMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjk5NEYvQUFGRDE0RUNFNUEyMTFFQTg5QTM2MDZEQzRGOUFFMDIvMkIyNEQ1REM4 NTQ1MTFFQjlCNTcyNDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniaQwDQYJKoZIhvcNAQELBQADggEBACdEo+FsXQBwetO8 LUEhygSI+93oW8tavyMuPmjAK4motf6jccCshMNEgJ30UZIPlRrjWNPeusMlUxaM dYjFsRIYcb3vGijUjM2vNd7x0CzKKoDb+dxRMJWONgOI069IPTao8weZtS7Nr1Y/ neiE5/1AHCPsdYnedIZ2X4/McY6Yd/jsc0iyt3UlZXlSWm4SZmd/i949GxSztS/D xb2eNSg5kImECmaeP/1Ww5tcFinLTI5otg+FXQTw0bJjHxIlho/dep1SWU7Avw5t Rq2Z7YXRtMyzBVTgHHdLXfH5IMM8FU1QCkBDrAw3sMtVWPNF1L2Tgb5NM1I0WJy2 ypPAwLg= -----END CERTIFICATE-----Generated at Wed May 7 18:57:36 2025 by rpki-client