$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa File: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (raw, json) Hash identifier: kwR4HiPzGhpK5SEPo+ThTcF7apxZuPZzTOyt4h1UDag= Subject key identifier: 64:A3:9A:56:B2:D5:92:0E:DB:A4:7C:75:FD:F8:5B:EB:D2:DA:7F:0E Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Certificate serial: 02 Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa Signing time: Wed 26 Mar 2025 07:44:34 +0000 ROA not before: Wed 26 Mar 2025 07:44:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132703 IP address blocks: 103.18.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB97 Validity Not Before: Mar 26 07:44:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67e3b062-3543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:79:df:ca:39:6f:e4:af:d9:5a:f6:6d:e8: 2c:88:d6:08:17:0f:cf:9a:f1:81:79:ff:48:4e:44: 35:db:3f:82:32:df:78:fd:a2:df:47:66:c0:a3:ed: 27:a1:26:76:12:be:95:89:d4:d0:a1:a4:70:c0:10: 25:0c:76:f0:66:5b:d8:7a:35:27:f6:0a:b0:0f:2d: cd:c2:78:0e:a8:80:a1:a9:9f:f6:52:aa:59:bc:9e: 64:5c:82:e6:b6:0d:1d:49:d9:5a:c3:b9:e9:45:04: 2c:0a:8c:77:c9:09:1f:90:98:eb:a8:2d:4c:65:92: 19:c0:52:34:6f:63:12:7e:d0:a2:7e:c8:85:da:de: 1c:b8:89:a8:05:02:4a:d5:90:d5:c7:74:11:8b:b9: c8:0c:60:da:55:94:ec:22:d2:b2:62:52:89:cf:e9: eb:92:f9:d1:18:21:b3:84:89:85:99:67:ce:41:6d: e8:13:e9:98:31:7c:64:d9:29:37:19:4c:28:30:33: ed:0a:cb:41:54:d2:ca:e8:18:26:f3:4c:7c:26:d2: d8:35:40:5c:75:b5:8b:08:61:3b:97:a0:29:c4:1e: 70:04:f8:29:eb:2d:b2:33:f2:52:7a:ff:58:09:55: 83:cd:1c:ca:68:d3:e6:6c:51:fa:1d:aa:b3:6b:a1: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A3:9A:56:B2:D5:92:0E:DB:A4:7C:75:FD:F8:5B:EB:D2:DA:7F:0E X509v3 Authority Key Identifier: keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.189.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f0:11:84:b9:37:01:03:c5:91:72:df:94:76:5f:2d:a2:32: 9a:8c:2b:72:f8:fb:15:28:71:8f:15:35:35:6b:a7:a3:ff:cf: 1a:9f:09:e6:17:54:5b:18:fd:a4:60:da:f0:97:b9:97:a8:ea: 74:46:c7:ea:37:6f:bf:a2:10:80:38:14:b0:e6:07:1d:41:14: c8:d6:8b:54:13:f4:80:a5:e2:2d:05:50:0c:8f:c3:f4:a3:62: 26:96:59:67:46:19:82:64:34:7a:f0:0d:9d:03:78:20:a4:06: fe:aa:69:55:74:c3:22:48:84:4f:d1:9f:09:14:41:44:2f:2b: ca:c7:b9:8b:ff:d0:ae:ec:33:3b:8b:8e:43:bd:1d:c9:93:cc: 09:82:15:bc:e9:ee:6c:7b:64:d8:51:ff:dd:a3:ba:d5:25:84: f4:e6:39:bd:15:7b:1f:4e:41:ce:8a:a3:0b:9c:20:cd:1d:e9: 19:76:e2:87:08:62:21:9e:5a:70:06:ac:1f:bc:91:7a:f7:ed: 21:80:bb:9d:69:ac:19:a8:e8:16:d7:84:02:e1:0c:94:5d:d6: 93:2f:e3:8b:2e:ce:63:c0:c2:fa:42:5c:1a:6e:1c:79:4f:fb: 38:a7:c7:2f:bc:22:8e:b1:33:87:9d:84:c2:96:5c:fa:c6:8e: 5f:9b:9a:88 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REI5NzExMC8GA1UEBRMoQzFGNEEzOTg2MUNBRDNDRjM3ODQyMThERURBN0EwNUU4 NTJGMjI3RjAeFw0yNTAzMjYwNzQ0MzRaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTNiMDYyLTM1NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Mnnfyjlv5K/ZWvZt6CyI1ggXD8+a8YF5/0hORDXbP4Iy33j9ot9HZsCj7Seh JnYSvpWJ1NChpHDAECUMdvBmW9h6NSf2CrAPLc3CeA6ogKGpn/ZSqlm8nmRcgua2 DR1J2VrDuelFBCwKjHfJCR+QmOuoLUxlkhnAUjRvYxJ+0KJ+yIXa3hy4iagFAkrV kNXHdBGLucgMYNpVlOwi0rJiUonP6euS+dEYIbOEiYWZZ85BbegT6ZgxfGTZKTcZ TCgwM+0Ky0FU0sroGCbzTHwm0tg1QFx1tYsIYTuXoCnEHnAE+CnrLbIz8lJ6/1gJ VYPNHMpo0+ZsUfodqrNroTHpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZKOaVrLV kg7bpHx1/fhb69Lafw4wHwYDVR0jBBgwFoAUwfSjmGHK0883hCGN7aegXoUvIn8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQjk3LzVEOEI1MjY0MEEx NDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9Vdklu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2ZTam1HSEswODgzaENHTjdhZWdYb1V2SW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5Ny81RDhCNTI2NDBBMTQxMUYwQjQzREM1ODZDNEY5QUUwMi8yOEY4N0QxODBB MTYxMUYwQkM4RkQxMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGcSvTANBgkqhkiG9w0BAQsFAAOCAQEAQPARhLk3AQPFkXLf lHZfLaIymowrcvj7FShxjxU1NWuno//PGp8J5hdUWxj9pGDa8Je5l6jqdEbH6jdv v6IQgDgUsOYHHUEUyNaLVBP0gKXiLQVQDI/D9KNiJpZZZ0YZgmQ0evANnQN4IKQG /qppVXTDIkiET9GfCRRBRC8ryse5i//QruwzO4uOQ70dyZPMCYIVvOnubHtk2FH/ 3aO61SWE9OY5vRV7H05BzoqjC5wgzR3pGXbihwhiIZ5acAasH7yRevftIYC7nWms GajoFteEAuEMlF3Wky/jiy7OY8DC+kJcGm4ceU/7OKfHL7wijrEzh52EwpZc+saO X5uaiA== -----END CERTIFICATE-----Generated at Sun Apr 6 01:29:28 2025 by rpki-client