$ rpki-client -vvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa File: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (raw, json) Hash identifier: 3Kdq8iB7GHkmorOzNCkj5Eih8OtxQjBmOJhG+WoD4A8= Subject key identifier: EA:B2:0D:7D:9C:2C:94:E3:2D:2F:C2:D7:A9:AF:A5:08:F8:A7:B7:49 Certificate issuer: /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Certificate serial: 0341 Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa Signing time: Thu 05 Jun 2025 01:07:39 +0000 ROA not before: Thu 05 Jun 2025 01:07:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58507 IP address blocks: 103.186.28.0/23 maxlen: 24 2400:6ce0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 01:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990 Validity Not Before: Jun 5 01:07:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6840eddb-884c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:29:26:89:9f:1e:c4:27:ea:1c:89:3d:ba: e2:d7:9c:56:80:52:3e:72:3a:f1:42:b3:c6:5c:02: f3:bb:f8:2f:81:f1:30:9a:05:26:a5:07:b2:59:20: 88:a0:dc:ca:74:8b:f3:d4:c5:c9:1e:d7:b7:a2:11: 56:05:71:d8:7b:be:11:1b:74:f9:75:4f:50:d9:00: 43:ed:07:7e:2e:97:2c:67:73:55:a1:91:2a:95:7b: 45:67:3b:15:aa:c9:5b:d5:29:9e:2b:88:2a:bb:4e: b3:ef:84:e2:2a:f3:15:59:58:e4:b0:1f:aa:f3:13: b7:51:56:02:e6:5b:a2:46:e2:0d:48:91:4e:6a:4c: b5:9f:2a:18:3b:f0:04:ba:0a:e7:96:ec:81:df:84: 50:dc:cd:b5:16:0a:26:2b:1a:3f:2b:b0:b4:14:33: 08:93:7b:73:54:06:a4:dd:01:e6:f4:32:f1:a2:e3: 38:52:55:f1:6d:e1:de:de:6b:27:8f:20:01:02:f6: 11:6e:76:74:9b:f7:d0:f1:6b:4b:80:b5:72:41:07: 05:6d:56:18:69:e1:7b:5b:d9:1b:53:44:76:b1:65: b5:39:db:24:24:9e:79:a2:39:35:1d:69:dc:59:f1: 83:b3:48:02:ef:09:75:b9:d0:fb:33:cd:60:23:f3: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:0D:7D:9C:2C:94:E3:2D:2F:C2:D7:A9:AF:A5:08:F8:A7:B7:49 X509v3 Authority Key Identifier: keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/06A2C3E2C1E211EC86C79687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.28.0/23 IPv6: 2400:6ce0::/32 Signature Algorithm: sha256WithRSAEncryption 87:b1:5e:fb:be:9e:e2:92:f2:27:45:55:4f:8c:47:c6:a7:bb: f5:70:f1:33:b5:6d:c0:cb:fc:5a:6d:e2:51:37:6b:ad:01:7f: 22:9b:36:d7:4c:f9:04:2e:2a:4f:a2:9c:9d:95:a0:de:75:52: 71:37:74:63:d0:57:98:8f:34:87:93:40:04:04:99:5c:8b:d6: 63:bd:cb:d7:be:9e:02:1a:05:75:fd:0e:64:80:b1:e6:f3:cf: c4:c2:76:96:2d:a2:0b:8f:e5:3d:4a:e9:7e:cb:c7:99:64:c4: fd:e6:f1:05:1a:dc:43:4c:c9:37:eb:2e:e3:32:94:07:ce:1b: ea:f9:04:87:ba:f5:71:01:50:37:d0:e1:21:4e:a4:4d:72:e3: 7e:08:f7:ed:cd:78:fe:2a:71:17:5b:4f:7e:a7:21:43:4c:be: 10:bf:99:7d:55:ba:49:73:bf:8c:61:91:23:4e:b2:de:ee:be: 9b:65:86:45:c8:d3:80:54:dd:13:db:17:be:aa:72:9f:31:5e: 75:4c:1a:51:e1:52:e8:73:8a:3b:d2:d2:5f:aa:c3:71:b2:90: b9:3c:5d:2c:c2:b4:53:b1:ba:3f:11:cd:8c:fc:eb:26:6d:31: f6:c3:6d:d6:c3:7a:18:f5:39:f6:2d:97:1a:1e:78:c0:66:46: 8e:63:b3:8a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ4REYxMTAvBgNVBAUTKEYwNzBDMUU3NERBRDEyMjc0RThGNTc1REZFMEJCN0Mx NEVCREM5OTAwHhcNMjUwNjA1MDEwNzM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZWRkYi04ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GIpJomfHsQn6hyJPbri15xWgFI+cjrxQrPGXALzu/gvgfEwmgUmpQeyWSCI oNzKdIvz1MXJHte3ohFWBXHYe74RG3T5dU9Q2QBD7Qd+LpcsZ3NVoZEqlXtFZzsV qslb1SmeK4gqu06z74TiKvMVWVjksB+q8xO3UVYC5luiRuINSJFOaky1nyoYO/AE ugrnluyB34RQ3M21FgomKxo/K7C0FDMIk3tzVAak3QHm9DLxouM4UlXxbeHe3msn jyABAvYRbnZ0m/fQ8WtLgLVyQQcFbVYYaeF7W9kbU0R2sWW1OdskJJ55ojk1HWnc WfGDs0gC7wl1udD7M81gI/PbMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOqyDX2c LJTjLS/C16mvpQj4p7dJMB8GA1UdIwQYMBaAFPBwwedNrRInTo9XXf4Lt8FOvcmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhERi9GMDJCNURCQ0Mx REQxMUVDQjk3QjlDN0ZDNEY5QUUwMi84SERCNTAydEVpZE9qMWRkX2d1M3dVNjl5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIREI1MDJ0RWlkT2oxZGRfZ3Uzd1U2OXlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ4REYvRjAyQjVEQkNDMUREMTFFQ0I5N0I5QzdGQzRGOUFFMDIvMDZBMkMzRTJD MUUyMTFFQzg2Qzc5Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnuhwwDQQCAAIwBwMFACQAbOAwDQYJKoZIhvcNAQELBQAD ggEBAIexXvu+nuKS8idFVU+MR8anu/Vw8TO1bcDL/Fpt4lE3a60BfyKbNtdM+QQu Kk+inJ2VoN51UnE3dGPQV5iPNIeTQAQEmVyL1mO9y9e+ngIaBXX9DmSAsebzz8TC dpYtoguP5T1K6X7Lx5lkxP3m8QUa3ENMyTfrLuMylAfOG+r5BIe69XEBUDfQ4SFO pE1y434I9+3NeP4qcRdbT36nIUNMvhC/mX1Vuklzv4xhkSNOst7uvptlhkXI04BU 3RPbF76qcp8xXnVMGlHhUuhzijvS0l+qw3GykLk8XSzCtFOxuj8RzYz86yZtMfbD bdbDehj1OfYtlxoeeMBmRo5js4o= -----END CERTIFICATE-----Generated at Thu Jun 5 19:12:58 2025 by rpki-client