$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa File: 804B03560A7211EE8FA2CD58C4F9AE02.roa (raw, json) Hash identifier: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs= Subject key identifier: 1C:D5:C5:3A:6D:F4:70:09:C1:C0:2E:A2:D5:2F:37:B7:62:0E:33:86 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 036C Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa Signing time: Thu 01 May 2025 00:36:45 +0000 ROA not before: Thu 01 May 2025 00:36:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138398 IP address blocks: 103.185.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: May 1 00:36:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812c21d-6cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:cd:eb:6a:af:80:4c:a7:15:9c:c4:c3:4d: ad:fa:2c:8b:c4:23:a2:be:02:e0:92:96:88:c1:ee: 19:af:56:31:6a:82:d4:e5:9b:b1:da:ca:1b:23:67: 59:00:ce:f4:70:74:57:b6:df:d8:9e:46:fb:16:ad: b0:f6:0a:51:ad:02:ff:88:9e:8a:b9:df:6c:51:dc: 7a:a2:61:ee:2b:8e:26:88:64:d7:e2:95:fe:a9:5a: 84:5c:84:7c:32:b6:a6:81:32:ec:4e:5f:92:94:f3: 17:08:ad:34:bb:b3:17:6e:29:f4:b3:89:76:6c:ea: be:80:0a:31:d5:92:f9:af:f3:1b:bf:78:e8:e9:49: 7f:42:57:63:6b:78:3a:86:e2:22:cf:45:d9:46:12: 1d:ac:d5:cf:0f:b6:23:52:1e:06:5f:07:59:97:f0: 34:26:95:78:ea:95:1a:c2:66:6e:2f:af:9c:3a:8a: 55:f5:31:8a:1d:a7:3e:fa:0f:b5:1f:49:a7:d2:52: d0:57:8a:91:0c:90:7a:1c:06:54:4f:06:24:55:00: 52:09:c9:b2:1c:5c:11:de:33:bb:81:25:bc:bb:01: 70:48:3d:c1:11:e0:2e:56:1a:c4:e9:27:82:0e:f3: 61:37:ed:0f:46:f4:24:2b:98:8a:f2:af:2f:d6:32: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D5:C5:3A:6D:F4:70:09:C1:C0:2E:A2:D5:2F:37:B7:62:0E:33:86 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.22.0/24 Signature Algorithm: sha256WithRSAEncryption 09:08:6f:80:2d:45:09:cd:2f:5f:ce:c0:51:89:48:7f:23:1a: cb:ed:8c:99:25:ac:39:91:87:cc:95:72:f8:d6:2e:0c:21:a6: a1:dd:26:2a:32:7f:98:99:6a:24:78:4a:9a:f2:52:85:4a:41: 75:7e:c2:ff:63:36:3f:49:76:83:87:13:ee:80:36:04:16:84: d5:7d:72:ae:4b:f4:dc:62:6c:17:b5:9c:dc:40:24:cc:bf:1f: 50:7e:8b:f2:b5:cf:3c:af:cb:a2:04:de:25:6a:fa:08:b5:6a: 17:62:d2:1d:29:d2:f7:94:54:06:e1:99:ab:84:d0:32:44:57: 9f:8c:ea:5f:4a:ff:d9:b7:e0:42:94:59:7d:1c:0e:18:e2:be: dd:90:1c:da:39:99:51:78:37:8e:89:a6:bf:6d:98:f0:08:13: a8:89:52:3e:da:3a:67:f1:47:37:76:d3:cb:90:d4:52:03:9b: 20:4f:ca:99:95:44:be:61:7d:9b:30:c4:11:0a:46:42:e6:a0: cf:f4:dd:43:02:42:54:9e:93:ee:79:f8:f5:94:29:a3:30:39: 66:e2:63:fe:7b:9f:8d:40:28:2e:67:41:7f:12:53:72:16:be: 33:93:c0:19:e5:4c:3c:d9:d9:c0:4e:b4:6c:35:5d:44:9c:b5: 66:22:e8:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUwNTAxMDAzNjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyYzIxZC02Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnDN62qvgEynFZzEw02t+iyLxCOivgLgkpaIwe4Zr1YxaoLU5Zux2sobI2dZ AM70cHRXtt/Ynkb7Fq2w9gpRrQL/iJ6Kud9sUdx6omHuK44miGTX4pX+qVqEXIR8 MramgTLsTl+SlPMXCK00u7MXbin0s4l2bOq+gAox1ZL5r/Mbv3jo6Ul/Qldja3g6 huIiz0XZRhIdrNXPD7YjUh4GXwdZl/A0JpV46pUawmZuL6+cOopV9TGKHac++g+1 H0mn0lLQV4qRDJB6HAZUTwYkVQBSCcmyHFwR3jO7gSW8uwFwSD3BEeAuVhrE6SeC DvNhN+0PRvQkK5iK8q8v1jK9mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBzVxTpt 9HAJwcAuotUvN7diDjOGMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ4MjYvQ0Y0RTFENzRBRTRBMTFFQzg0NkYzRjY4QzRGOUFFMDIvODA0QjAzNTYw QTcyMTFFRThGQTJDRDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnuRYwDQYJKoZIhvcNAQELBQADggEBAAkIb4AtRQnNL1/O wFGJSH8jGsvtjJklrDmRh8yVcvjWLgwhpqHdJioyf5iZaiR4SpryUoVKQXV+wv9j Nj9JdoOHE+6ANgQWhNV9cq5L9NxibBe1nNxAJMy/H1B+i/K1zzyvy6IE3iVq+gi1 ahdi0h0p0veUVAbhmauE0DJEV5+M6l9K/9m34EKUWX0cDhjivt2QHNo5mVF4N46J pr9tmPAIE6iJUj7aOmfxRzd208uQ1FIDmyBPypmVRL5hfZswxBEKRkLmoM/03UMC QlSek+55+PWUKaMwOWbiY/57n41AKC5nQX8SU3IWvjOTwBnlTDzZ2cBOtGw1XUSc tWYi6D8= -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:23 2025 by rpki-client