$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa File: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (raw, json) Hash identifier: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M= Subject key identifier: E4:30:9A:FD:20:AC:A2:60:70:A9:06:44:AD:28:B7:17:37:F7:1E:E8 Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 081A Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa Signing time: Thu 06 Feb 2025 20:39:25 +0000 ROA not before: Thu 06 Feb 2025 20:39:24 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45638 IP address blocks: 103.207.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB Validity Not Before: Feb 6 20:39:24 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a51dfc-7071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:39:20:ad:0d:ea:e6:0f:e8:bf:39:c8:a4: 10:47:b3:04:ac:5d:91:b4:87:25:b7:26:16:ef:3d: f0:2d:14:9d:1c:8f:6a:84:cd:e9:8a:eb:d9:eb:4e: 6b:5d:f5:11:9c:7f:0a:c2:62:7d:71:63:66:fe:7d: 72:9b:43:0e:fb:a7:a4:ba:df:ba:bd:2a:90:5d:4a: b3:48:6e:2a:b4:64:47:72:40:49:0e:2b:48:81:84: 9a:90:cc:a2:15:3c:63:73:87:f9:5c:f4:10:da:fb: a1:85:18:4c:2a:30:d2:cb:8d:ce:ea:ec:b1:e1:ea: 18:69:7a:0c:44:77:9c:6a:4b:14:16:ba:89:76:b7: e7:bd:77:db:39:a8:be:7e:03:2f:b3:a5:e0:1a:97: ce:eb:54:0b:50:5f:12:f3:83:cb:b2:40:b5:ed:b2: d4:4e:46:dd:6d:50:66:ad:e8:93:fc:ba:54:7c:c4: 22:86:47:0e:b1:d4:75:fd:c8:a9:c2:6e:8d:a8:b7: e3:d7:89:6a:cc:6b:b8:c8:6d:f6:cd:ac:05:20:59: c8:e1:42:62:ca:10:41:41:83:70:0e:33:20:7b:77: ed:22:c0:d7:4a:74:03:cd:e7:11:4c:a4:4b:c3:c5: 81:e1:16:d3:ea:60:17:50:03:aa:f8:79:b9:58:04: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:9A:FD:20:AC:A2:60:70:A9:06:44:AD:28:B7:17:37:F7:1E:E8 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.28.0/22 Signature Algorithm: sha256WithRSAEncryption 39:05:f9:5c:f5:cb:b0:fa:09:ec:a3:cf:ee:9d:50:0b:25:a9: 51:47:50:94:62:4b:fc:de:46:4e:16:93:f9:2d:ef:98:aa:53: 0f:9b:d5:51:87:5a:e7:d0:c3:84:e1:9f:e3:22:a3:10:04:a2: ad:bd:30:0e:56:64:fc:0a:36:f0:cc:4e:d1:86:fe:5f:06:c9: ed:c9:82:0b:8c:22:60:f2:d5:6b:86:26:00:44:08:2e:16:8e: 54:65:e6:12:84:14:d4:94:93:ac:8f:57:aa:97:ef:73:2e:69: 60:a0:4a:ea:4a:b5:7f:6f:c2:01:2c:45:78:27:3a:8a:2e:9f: 0a:09:bd:f8:a5:05:69:65:11:03:6f:7b:80:0e:56:88:4c:11: 5a:d1:27:ad:69:61:48:08:81:28:50:25:79:e1:bd:96:74:2a: 70:ee:5a:90:15:e3:52:dc:32:92:53:e7:f2:6c:3e:a6:45:e2: 32:bf:9e:d3:d0:e0:3d:62:5b:36:26:1b:55:28:d9:09:83:bf: 41:c0:a5:e0:1b:78:c1:88:62:39:e0:9a:75:fb:2c:38:eb:13: 57:87:bd:f3:30:6d:a8:ec:03:ff:6d:85:0a:7c:d3:e3:22:3f: dd:ed:49:3c:72:c6:7e:e5:2b:c4:28:65:91:25:9c:30:4b:44: 60:48:6a:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwMjA2MjAzOTI0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MWRmYy03MDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvc5IK0N6uYP6L85yKQQR7MErF2RtIcltyYW7z3wLRSdHI9qhM3piuvZ605r XfURnH8KwmJ9cWNm/n1ym0MO+6ekut+6vSqQXUqzSG4qtGRHckBJDitIgYSakMyi FTxjc4f5XPQQ2vuhhRhMKjDSy43O6uyx4eoYaXoMRHecaksUFrqJdrfnvXfbOai+ fgMvs6XgGpfO61QLUF8S84PLskC17bLUTkbdbVBmreiT/LpUfMQihkcOsdR1/cip wm6NqLfj14lqzGu4yG32zawFIFnI4UJiyhBBQYNwDjMge3ftIsDXSnQDzecRTKRL w8WB4RbT6mAXUAOq+Hm5WATkOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOQwmv0g rKJgcKkGRK0otxc39x7oMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q5Q0IvM0ZEMkQ5QzRDQTJBMTFFQTk1RUE4ODdGQzRGOUFFMDIvRDZDRTJERTRD QTNDMTFFQUIzNjA0QzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnzxwwDQYJKoZIhvcNAQELBQADggEBADkF+Vz1y7D6Ceyj z+6dUAslqVFHUJRiS/zeRk4Wk/kt75iqUw+b1VGHWufQw4Thn+MioxAEoq29MA5W ZPwKNvDMTtGG/l8Gye3JgguMImDy1WuGJgBECC4WjlRl5hKEFNSUk6yPV6qX73Mu aWCgSupKtX9vwgEsRXgnOoounwoJvfilBWllEQNve4AOVohMEVrRJ61pYUgIgShQ JXnhvZZ0KnDuWpAV41LcMpJT5/JsPqZF4jK/ntPQ4D1iWzYmG1Uo2QmDv0HApeAb eMGIYjngmnX7LDjrE1eHvfMwbajsA/9thQp80+MiP93tSTxyxn7lK8QoZZElnDBL RGBIaqg= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:03 2025 by rpki-client