$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa File: A241FA98315611F0B557CE7CC4F9AE02.roa (raw, json) Hash identifier: i9lNfJhnnW8QvG2a+A3cDgHR8+veJShI1zYY4cZGLCQ= Subject key identifier: 2D:45:44:79:C4:11:5D:29:53:CF:7A:02:09:22:58:20:E5:E3:89:CF Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07D1 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa Signing time: Thu 15 May 2025 06:34:21 +0000 ROA not before: Thu 15 May 2025 06:34:21 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 59371 IP address blocks: 103.209.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: May 15 06:34:21 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68258aed-42b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:33:52:19:a3:39:81:83:4b:8f:3f:83:35: 8e:f5:a0:b1:55:dd:6d:6a:34:4d:2d:88:80:47:33: 58:a1:a6:98:93:98:ea:ce:7b:7d:33:7f:01:59:d5: 66:a1:9d:0f:13:be:5c:9f:20:9e:8b:23:71:06:e7: 5c:00:78:0a:31:93:51:30:68:7b:50:7a:f5:3b:f3: 46:e6:43:47:f7:89:31:af:3f:25:61:c8:cf:18:a4: 12:f9:5c:3f:57:c0:45:11:9e:20:62:f3:0d:c4:56: 95:8b:0d:aa:23:bc:ed:0a:82:01:60:f1:d4:7d:09: 44:58:5b:95:40:22:62:91:4c:39:b4:06:d5:e3:44: 07:6a:eb:75:1b:dd:b0:b0:8e:e2:91:45:92:5b:51: 1d:19:b2:6f:88:d2:22:db:75:59:18:6b:d0:47:0a: f0:bb:54:6d:7f:7d:28:a7:3a:af:32:8d:ca:1c:8c: 53:e4:33:ac:92:fa:4a:71:e7:13:0a:c9:91:66:7f: 7e:7e:61:78:da:f5:e5:cf:3f:98:5c:bf:8f:d9:a5: 04:ab:ac:24:a0:b7:55:19:7c:f1:ad:46:ef:74:ce: 79:d0:b7:4e:65:7d:a0:e8:4c:8e:df:23:f4:73:df: 41:9d:d6:35:2d:a4:b6:62:2a:60:d2:28:0f:d0:de: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:45:44:79:C4:11:5D:29:53:CF:7A:02:09:22:58:20:E5:E3:89:CF X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A241FA98315611F0B557CE7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.235.0/24 Signature Algorithm: sha256WithRSAEncryption 28:bc:40:5d:f7:c6:c0:fb:94:68:0c:f4:b9:08:b2:a8:7f:e8: b0:f3:61:f9:37:e0:58:28:f0:b1:6c:ae:6b:86:18:b8:c0:5a: aa:83:a3:ee:ec:bd:1a:07:08:e8:ee:14:7d:f2:30:c7:37:a1: 9b:ac:b8:e3:49:59:44:81:12:40:38:8f:ca:04:40:df:1c:12: 80:56:78:bf:f5:2f:1b:89:6d:d8:6c:e5:83:6f:2e:72:9f:c2: 01:8f:4e:f2:f8:ee:a7:ec:de:a1:5f:2e:ad:ba:e3:a8:60:79: cf:ee:c0:e0:24:5a:20:c3:49:ca:19:ce:88:77:55:9e:d4:ea: c5:d0:1e:17:8a:93:6d:b4:59:51:c1:e7:1c:70:a3:5b:81:4b: 1e:df:28:e5:64:17:45:c6:00:ca:cc:62:61:03:97:62:03:fd: ee:88:2c:1f:15:d0:ee:b4:8d:54:df:d7:d7:9c:cb:06:af:13: 9a:94:76:ff:b4:f8:29:5c:ff:66:b7:46:2f:64:7b:5e:e9:5b: 01:d7:59:17:ba:81:e4:ea:8b:2d:b4:4c:09:b5:44:31:e1:e7: f3:de:87:16:03:cc:9b:2d:b9:c3:65:56:df:46:29:ff:52:35: f5:0f:75:54:0e:03:91:52:90:79:cb:86:3a:db:76:82:64:25: 2e:45:06:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNTE1MDYzNDIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1OGFlZC00MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAEzUhmjOYGDS48/gzWO9aCxVd1tajRNLYiARzNYoaaYk5jqznt9M38BWdVm oZ0PE75cnyCeiyNxBudcAHgKMZNRMGh7UHr1O/NG5kNH94kxrz8lYcjPGKQS+Vw/ V8BFEZ4gYvMNxFaViw2qI7ztCoIBYPHUfQlEWFuVQCJikUw5tAbV40QHaut1G92w sI7ikUWSW1EdGbJviNIi23VZGGvQRwrwu1Rtf30opzqvMo3KHIxT5DOskvpKcecT CsmRZn9+fmF42vXlzz+YXL+P2aUEq6wkoLdVGXzxrUbvdM550LdOZX2g6EyO3yP0 c99BndY1LaS2Yipg0igP0N5WtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC1FRHnE EV0pU896AgkiWCDl44nPMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvQTI0MUZBOTgz MTU2MTFGMEI1NTdDRTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0eswDQYJKoZIhvcNAQELBQADggEBACi8QF33xsD7lGgM 9LkIsqh/6LDzYfk34Fgo8LFsrmuGGLjAWqqDo+7svRoHCOjuFH3yMMc3oZusuONJ WUSBEkA4j8oEQN8cEoBWeL/1LxuJbdhs5YNvLnKfwgGPTvL47qfs3qFfLq2646hg ec/uwOAkWiDDScoZzoh3VZ7U6sXQHheKk220WVHB5xxwo1uBSx7fKOVkF0XGAMrM YmEDl2ID/e6ILB8V0O60jVTf19ecywavE5qUdv+0+Clc/2a3Ri9ke17pWwHXWRe6 geTqiy20TAm1RDHh5/PehxYDzJstucNlVt9GKf9SNfUPdVQOA5FSkHnLhjrbdoJk JS5FBm0= -----END CERTIFICATE-----Generated at Sat May 17 16:50:33 2025 by rpki-client