$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa File: 406928720A2411F0A2D02B4AC4F9AE02.roa (raw, json) Hash identifier: XB1FXJk+02Ga8yfAsMsEB/gNNXe0Zuk0SHtAoo0/aCY= Subject key identifier: 2E:C5:DC:59:29:78:87:0F:52:E9:07:E9:94:50:1E:16:8D:37:A2:E0 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2804 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa Signing time: Wed 26 Mar 2025 09:25:27 +0000 ROA not before: Wed 26 Mar 2025 09:25:27 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 30058 IP address blocks: 103.196.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10244 (0x2804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D Validity Not Before: Mar 26 09:25:27 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67e3c806-3e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:4b:02:a8:d8:e4:ef:64:43:c5:78:3e:25: 47:6e:35:aa:ea:b2:d2:46:06:b4:2b:d4:eb:aa:94: fa:4d:29:3f:e2:12:a2:ed:49:7e:0c:15:e7:a3:45: ed:0e:d8:6b:79:34:f4:6e:5f:b0:89:b2:6c:1a:11: b5:69:d5:8b:eb:79:53:e1:77:69:d3:1d:2a:bf:bd: 48:3d:3a:05:31:1b:7f:81:9b:71:3c:d1:15:c4:39: 72:9a:57:78:51:1f:01:0b:23:6c:b7:18:2e:64:e1: 4a:58:72:06:fa:d3:e0:05:4c:bf:e9:de:70:c7:16: 68:84:dc:d9:4f:d6:2f:58:b3:77:9a:a7:88:8e:27: 0a:f2:7b:51:98:d2:b7:ee:7f:03:8f:45:80:0e:69: fc:fd:b8:a8:2b:95:e2:ff:96:4c:57:d4:0d:d9:a9: 01:5c:b2:68:48:d6:d2:33:81:7e:cc:39:b0:c1:e7: 70:d8:a0:e1:6b:62:53:0b:02:42:58:5b:45:cf:84: b6:2a:8a:b2:18:92:eb:c5:80:5c:e3:6f:47:b8:df: 18:8e:ed:56:0a:ad:89:9b:9e:0a:93:23:6b:8c:bd: 71:9f:b8:04:b3:ee:5c:23:6f:19:e2:78:a1:bb:05: 49:03:60:c5:c3:12:e4:16:7f:4e:2d:ef:f4:f1:d1: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C5:DC:59:29:78:87:0F:52:E9:07:E9:94:50:1E:16:8D:37:A2:E0 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.22.0/24 Signature Algorithm: sha256WithRSAEncryption 53:95:db:0b:1c:9e:d1:d3:f8:f2:9b:fc:7e:2c:23:5c:4a:2c: b0:4c:f3:e7:83:8b:fa:06:e7:82:f6:11:5e:bf:b5:da:f1:0d: 2f:d8:b6:df:61:a3:1e:66:3a:c1:74:f7:4a:21:85:35:e6:fe: ab:9e:36:8d:13:c6:69:b5:56:9e:c1:c5:cd:82:1c:ce:d7:cc: bb:83:d7:aa:f0:40:b5:83:4d:0c:d9:76:29:52:51:95:70:90: 7d:40:27:43:cb:a9:e9:99:e9:35:13:11:df:8c:5f:4c:12:b8: b8:b3:5e:1d:3d:35:87:16:31:57:c4:04:c6:16:d3:59:05:95: 3e:2b:b5:e4:f2:91:b5:c5:b8:55:f2:84:e9:e6:0e:52:bb:b3: a9:c8:9c:ef:d8:9e:88:9e:f6:b7:77:e2:b9:28:aa:4a:2c:d6: 2b:74:b7:05:59:0d:a8:fa:d5:33:fd:46:32:af:eb:56:04:ff: 0d:50:b3:93:5d:fd:bf:6d:29:c3:e6:9f:71:6a:7d:f8:31:48: 0a:c1:5f:b9:d8:fa:70:bc:87:5e:35:1a:08:e4:3e:61:b3:f8: 0b:53:30:64:71:bf:87:61:e4:1a:7a:1c:06:5d:b5:cb:04:e5: e6:b4:b4:fb:f1:e0:11:3c:fe:2b:a8:2b:d1:46:e6:79:fb:64: b9:60:03:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwMzI2MDkyNTI3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UzYzgwNi0zZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A5LAqjY5O9kQ8V4PiVHbjWq6rLSRga0K9TrqpT6TSk/4hKi7Ul+DBXno0Xt DthreTT0bl+wibJsGhG1adWL63lT4Xdp0x0qv71IPToFMRt/gZtxPNEVxDlymld4 UR8BCyNstxguZOFKWHIG+tPgBUy/6d5wxxZohNzZT9YvWLN3mqeIjicK8ntRmNK3 7n8Dj0WADmn8/bioK5Xi/5ZMV9QN2akBXLJoSNbSM4F+zDmwwedw2KDha2JTCwJC WFtFz4S2KoqyGJLrxYBc429HuN8Yju1WCq2Jm54KkyNrjL1xn7gEs+5cI28Z4nih uwVJA2DFwxLkFn9OLe/08dFg2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFC7F3Fkp eIcPUukH6ZRQHhaNN6LgMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDA2OTI4NzIw QTI0MTFGMEEyRDAyQjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxBYwDQYJKoZIhvcNAQELBQADggEBAFOV2wscntHT+PKb /H4sI1xKLLBM8+eDi/oG54L2EV6/tdrxDS/Ytt9hox5mOsF090ohhTXm/queNo0T xmm1Vp7Bxc2CHM7XzLuD16rwQLWDTQzZdilSUZVwkH1AJ0PLqemZ6TUTEd+MX0wS uLizXh09NYcWMVfEBMYW01kFlT4rteTykbXFuFXyhOnmDlK7s6nInO/Ynoie9rd3 4rkoqkos1it0twVZDaj61TP9RjKv61YE/w1Qs5Nd/b9tKcPmn3FqffgxSArBX7nY +nC8h141GgjkPmGz+AtTMGRxv4dh5Bp6HAZdtcsE5ea0tPvx4BE8/iuoK9FG5nn7 ZLlgA0E= -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:24 2025 by rpki-client