$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa File: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (raw, json) Hash identifier: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE= Subject key identifier: 1F:53:DB:A8:94:BA:CF:CB:45:17:EC:2C:B5:85:42:B1:2E:3A:DC:C0 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 01DB Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa Signing time: Tue 01 Apr 2025 02:58:28 +0000 ROA not before: Tue 01 Apr 2025 02:58:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135377 IP address blocks: 103.86.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621 Validity Not Before: Apr 1 02:58:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb5654-64cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:0b:1d:df:2b:fb:7e:a0:66:28:89:0d:29: 9f:dd:28:86:4f:51:21:25:3c:87:0e:ef:10:2a:a5: 23:db:c5:62:b3:43:be:85:08:be:7b:93:87:4f:bd: ba:62:09:71:91:42:fb:a2:26:97:ae:22:7d:79:08: b3:e2:ac:59:87:cd:9a:a5:c1:0b:de:4f:16:be:1f: fb:07:e1:2b:d9:41:ce:d7:08:4c:60:57:9d:3f:17: d4:d1:56:2c:cf:06:32:a6:d8:7b:14:7e:58:59:4d: 11:7d:26:41:07:c6:af:24:ba:28:fe:70:00:01:18: dd:75:7c:2e:b9:e7:3b:3a:8d:87:bd:ed:b2:4d:f0: 1b:30:4d:09:b2:0f:bf:04:89:8d:95:01:4c:f4:c0: df:1a:c8:f9:c1:85:3e:c6:90:04:ec:8e:21:f5:a8: 9d:a0:af:46:9b:95:c7:a2:87:2b:fb:ff:c3:eb:f0: 2b:de:b8:da:45:8c:01:ca:63:30:e3:9c:30:d5:c8: 03:9d:66:ee:59:d0:52:10:80:79:35:5b:f2:22:78: 34:67:83:b7:fe:0f:1f:31:07:74:4e:32:26:46:fc: 6c:a0:03:4c:e5:cd:20:ff:f3:e0:00:84:bb:6a:4a: 71:98:b0:c0:38:98:25:83:18:6e:d3:c6:28:53:5b: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:DB:A8:94:BA:CF:CB:45:17:EC:2C:B5:85:42:B1:2E:3A:DC:C0 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/5D21607ADDF211EDA14C0C56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:9c:65:2d:c8:92:3c:49:72:af:d0:34:0d:38:4e:fd:ce:27: c4:d3:ba:7b:69:d1:d7:9d:93:a8:48:62:da:06:fa:3b:85:2e: ba:68:cf:71:64:01:c3:66:1f:19:83:26:5e:3f:3c:54:30:6f: 54:1f:1d:67:71:63:61:e2:86:82:f6:ad:1d:52:69:b2:ea:4a: 58:4a:a9:fd:29:de:38:d7:08:4f:6e:d0:58:7f:66:54:da:06: 1d:c6:86:b3:4f:de:22:d4:29:3d:14:d1:c9:b4:6a:c9:72:14: 03:6d:3a:cc:f5:72:45:ca:be:3c:07:a9:2c:08:09:07:5d:dd: 51:0c:f0:86:99:41:01:21:6e:ec:a8:c6:98:ef:29:0c:81:55: 46:0b:c7:29:97:8b:34:6e:ed:8d:a7:ee:e1:73:b0:3e:26:11: 5f:65:76:12:16:34:6a:5d:9f:f5:3e:8c:89:ae:63:f4:f3:73: 0a:5e:b0:1e:9b:9a:e3:74:0e:b6:b2:57:df:2b:da:e4:22:b6: f7:5c:c5:e2:b3:58:99:6c:eb:4a:e0:bb:8c:b3:04:0e:fd:fd: 02:76:8f:c3:17:1b:13:68:41:8d:d4:57:83:3d:5c:34:d9:6d: b4:3e:5c:8e:c7:e7:e4:ec:0c:2d:c1:0d:10:ce:e5:4e:fe:fe: 3a:b8:c9:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNDAxMDI1ODI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNTY1NC02NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPILHd8r+36gZiiJDSmf3SiGT1EhJTyHDu8QKqUj28Vis0O+hQi+e5OHT726 YglxkUL7oiaXriJ9eQiz4qxZh82apcEL3k8Wvh/7B+Er2UHO1whMYFedPxfU0VYs zwYypth7FH5YWU0RfSZBB8avJLoo/nAAARjddXwuuec7Oo2Hve2yTfAbME0Jsg+/ BImNlQFM9MDfGsj5wYU+xpAE7I4h9aidoK9Gm5XHoocr+//D6/Ar3rjaRYwBymMw 45ww1cgDnWbuWdBSEIB5NVvyIng0Z4O3/g8fMQd0TjImRvxsoANM5c0g//PgAIS7 akpxmLDAOJglgxhu08YoU1vyKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9T26iU us/LRRfsLLWFQrEuOtzAMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvNUQyMTYwN0FE REYyMTFFREExNEMwQzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVnswDQYJKoZIhvcNAQELBQADggEBAE+cZS3IkjxJcq/Q NA04Tv3OJ8TTuntp0dedk6hIYtoG+juFLrpoz3FkAcNmHxmDJl4/PFQwb1QfHWdx Y2HihoL2rR1SabLqSlhKqf0p3jjXCE9u0Fh/ZlTaBh3GhrNP3iLUKT0U0cm0asly FANtOsz1ckXKvjwHqSwICQdd3VEM8IaZQQEhbuyoxpjvKQyBVUYLxymXizRu7Y2n 7uFzsD4mEV9ldhIWNGpdn/U+jImuY/TzcwpesB6bmuN0DrayV98r2uQitvdcxeKz WJls60rgu4yzBA79/QJ2j8MXGxNoQY3UV4M9XDTZbbQ+XI7H5+TsDC3BDRDO5U7+ /jq4ySY= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:22 2025 by rpki-client