$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa File: F47B2136202611F08C91C683C4F9AE02.roa (raw, json) Hash identifier: bo83lWwkb62HCCBfEehNLe9siq1i68IzVQL3HJEnOzA= Subject key identifier: E1:68:A4:F8:46:37:61:3D:A2:CD:0F:EF:0E:90:AE:15:D6:42:27:7C Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2837 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa Signing time: Sun 18 May 2025 20:47:48 +0000 ROA not before: Sun 18 May 2025 20:47:48 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152918 IP address blocks: 27.100.39.0/24 maxlen: 24 103.196.21.0/24 maxlen: 24 103.196.23.0/24 maxlen: 24 103.217.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10295 (0x2837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: May 18 20:47:48 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=682a4774-a96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:fc:88:bd:67:f7:e6:9f:d0:06:c4:f5:d2: 71:df:32:42:0c:fa:7b:d1:b9:a0:d8:ae:db:b5:61: 19:c3:67:5b:0a:48:1c:71:44:6f:4e:b8:53:1f:b4: 99:a8:d3:32:f2:4c:8a:a1:4e:30:46:93:d1:45:70: 26:4a:fa:0b:dc:ba:b1:b3:c0:61:67:82:42:79:66: 69:69:cd:aa:98:79:ea:00:83:df:e2:17:6b:df:d7: 76:32:0d:3d:5b:24:12:02:8c:8a:e4:80:78:4c:37: f1:32:46:9e:98:41:88:45:af:6a:17:df:92:3a:08: db:81:ec:5a:52:9a:8b:46:be:5b:d5:ea:2c:af:70: 96:92:35:b0:3f:4e:26:c0:e0:0a:62:f9:cc:c3:c6: 88:2c:5e:48:41:7e:8d:be:a3:0c:74:75:e8:0e:7b: cd:7e:6e:ed:09:43:24:47:b4:ad:1c:ef:3b:29:df: 11:92:9c:2e:3a:5c:09:68:99:1f:cb:71:a0:60:28: 94:fd:65:90:fa:d0:b2:27:6a:0f:0c:a4:92:cd:40: 48:f9:4f:1c:74:e2:f4:03:85:0e:dd:14:f4:c4:fb: 52:71:e3:b3:9f:7c:c2:88:fd:b3:b5:81:5f:d9:77: 14:9b:00:22:ed:9f:f2:b2:d6:fa:a2:12:9e:c4:34: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:68:A4:F8:46:37:61:3D:A2:CD:0F:EF:0E:90:AE:15:D6:42:27:7C X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.39.0/24 103.196.21.0/24 103.196.23.0/24 103.217.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:4a:90:dd:ff:39:6c:d1:cc:1a:1b:54:0c:fc:3e:66:c6:8d: 8b:29:9f:70:e5:8b:e5:9a:b3:bf:76:1f:37:17:c4:07:fc:24: 05:eb:53:f3:94:69:09:e3:af:91:5f:96:3e:59:5a:29:7f:ff: 7d:ae:be:ca:e7:27:21:a1:a9:4b:58:01:c0:d4:0c:2e:a6:08: c6:ac:33:da:a1:d9:af:ff:76:6f:15:94:75:0b:0f:73:ae:bd: e6:06:68:a0:42:9d:f9:f1:21:63:fa:db:3b:e6:43:ff:7c:7a: 02:20:57:f7:03:c8:54:2a:1a:3f:e0:57:f2:ba:58:8a:d4:69: c6:c8:e8:86:4d:f4:37:b6:97:7c:e2:55:38:2e:c4:44:bc:69: 86:d8:f0:9d:5e:47:fa:af:5d:f7:71:80:ac:81:a8:89:51:dd: 49:95:53:d7:9a:aa:e1:ba:e7:b6:0b:6a:5b:12:4d:89:eb:9c: 62:ed:7d:6f:47:ea:db:4d:9c:3f:00:23:4c:4a:98:81:96:3f: 32:08:9f:f6:b6:e8:32:aa:ce:79:ba:7e:f2:1b:43:7e:dd:9c: 4b:8c:bc:c6:c2:df:44:d7:8a:2a:c9:8a:60:52:c9:ca:17:97: eb:f9:e4:34:d0:35:33:6e:cc:37:4b:c7:d2:53:43:7c:6b:bb: 58:48:35:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICKDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNTE4MjA0NzQ4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhNDc3NC1hOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJb8iL1n9+af0AbE9dJx3zJCDPp70bmg2K7btWEZw2dbCkgccURvTrhTH7SZ qNMy8kyKoU4wRpPRRXAmSvoL3Lqxs8BhZ4JCeWZpac2qmHnqAIPf4hdr39d2Mg09 WyQSAoyK5IB4TDfxMkaemEGIRa9qF9+SOgjbgexaUpqLRr5b1eosr3CWkjWwP04m wOAKYvnMw8aILF5IQX6NvqMMdHXoDnvNfm7tCUMkR7StHO87Kd8RkpwuOlwJaJkf y3GgYCiU/WWQ+tCyJ2oPDKSSzUBI+U8cdOL0A4UO3RT0xPtSceOzn3zCiP2ztYFf 2XcUmwAi7Z/ystb6ohKexDRCxwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFOFopPhG N2E9os0P7w6QrhXWQid8MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjQ3QjIxMzYy MDI2MTFGMDhDOTFDNjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAbZCcDBABnxBUDBABnxBcDBABn2f8wDQYJKoZIhvcNAQEL BQADggEBAA5KkN3/OWzRzBobVAz8PmbGjYspn3Dli+Was792HzcXxAf8JAXrU/OU aQnjr5Fflj5ZWil//32uvsrnJyGhqUtYAcDUDC6mCMasM9qh2a//dm8VlHULD3Ou veYGaKBCnfnxIWP62zvmQ/98egIgV/cDyFQqGj/gV/K6WIrUacbI6IZN9De2l3zi VTguxES8aYbY8J1eR/qvXfdxgKyBqIlR3UmVU9eaquG657YLalsSTYnrnGLtfW9H 6ttNnD8AI0xKmIGWPzIIn/a26DKqznm6fvIbQ37dnEuMvMbC30TXiirJimBSycoX l+v55DTQNTNuzDdLx9JTQ3xru1hINVs= -----END CERTIFICATE-----Generated at Mon Jun 2 06:43:58 2025 by rpki-client