$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa File: 3C73210E29E711F0AB5EBA80C4F9AE02.roa (raw, json) Hash identifier: LZ/NW4Ul+FvSw/YC7i7jRWtLnsARm09vDsPHML7acmQ= Subject key identifier: 4E:48:ED:DD:F5:24:02:49:7C:0D:18:F6:AF:71:67:00:79:54:84:DE Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 07C2 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa Signing time: Mon 05 May 2025 19:29:18 +0000 ROA not before: Mon 05 May 2025 19:29:18 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 153038 IP address blocks: 103.214.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: May 5 19:29:18 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6819118d-d489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:a2:59:c2:82:f8:22:85:01:92:b2:e7:b6: 37:a2:46:86:39:28:fc:d4:24:54:ba:51:91:c8:54: 98:41:cc:19:4b:c7:35:07:84:b3:96:62:79:49:29: d1:d5:c0:1b:5c:98:23:50:dc:5c:70:d3:3e:db:0a: a1:f5:4d:f6:38:2d:77:05:f5:8b:da:ff:84:0d:af: 12:a5:31:71:cc:33:c6:84:3f:c6:3e:45:16:c7:15: a3:5d:00:12:98:96:1f:5f:08:28:68:63:23:ff:df: 80:9d:21:57:24:a0:49:8f:bd:db:a0:6f:b1:7b:2e: 1c:57:79:20:90:56:25:15:f1:9b:10:d4:53:af:20: e0:e0:41:cb:8b:a6:be:73:48:01:19:2e:14:38:de: e0:af:5d:c1:9c:a1:07:05:22:88:11:09:65:8f:7d: f0:e9:7f:59:2a:4d:a6:86:24:9b:59:48:1b:19:9a: 31:1c:ea:84:8d:96:86:d0:04:4f:e2:6d:f6:22:03: a9:e6:18:1b:14:ef:c9:9c:95:9a:6f:d9:99:57:e3: a8:fe:f9:ac:73:1d:11:de:8d:4d:27:4b:ad:19:d3: 0b:c3:c8:67:61:8c:a9:5b:c0:88:2b:15:fe:30:0a: 8b:34:6d:76:eb:ee:46:d2:ca:0a:22:3f:d3:58:f1: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:ED:DD:F5:24:02:49:7C:0D:18:F6:AF:71:67:00:79:54:84:DE X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/3C73210E29E711F0AB5EBA80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.216.0/24 Signature Algorithm: sha256WithRSAEncryption 71:dd:b6:18:5f:2f:eb:e7:f3:8e:c7:c4:0c:09:d2:11:41:7f: 21:2c:44:fb:c3:8e:e2:f6:f8:19:1b:ad:7e:29:3a:0d:7a:ee: 02:1a:be:49:b1:98:8d:ea:07:fa:cc:0b:ea:2f:c9:98:4c:94: 91:0c:cd:be:c3:f7:a0:d5:0c:9e:8e:f6:8f:58:09:aa:c9:e9: 71:7d:6b:fc:d5:41:2c:66:43:4e:cc:44:aa:5b:11:39:b0:b8: 2d:c9:f9:08:55:b7:b1:95:5c:c4:5e:6e:d1:a9:6c:3f:e1:78: b9:dd:3b:97:8c:fd:fc:89:09:72:66:9c:cc:c6:ab:8e:4b:07: 9d:8f:7f:69:0e:af:d6:0b:0d:8a:5d:a3:cc:ba:dc:17:f6:67: 06:8e:01:85:d2:91:85:7b:cf:39:16:48:2f:f2:cd:89:6d:09: 58:9b:5d:34:f1:9a:32:0b:15:8d:99:5e:e9:35:f8:b6:96:fd: d6:09:88:56:6c:b4:df:a4:ff:c7:c4:0b:85:6c:43:b8:79:44: 29:57:ff:67:48:e6:d8:11:3b:34:19:d6:7f:e8:a6:ed:63:21: 6c:1c:83:e8:9e:8f:13:aa:93:a6:e2:26:c6:18:37:33:36:4d: 83:c9:71:14:3a:27:bc:f5:30:4d:7f:9c:f6:61:85:b2:72:cb: 7e:f3:c8:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwNTA1MTkyOTE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5MTE4ZC1kNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEOiWcKC+CKFAZKy57Y3okaGOSj81CRUulGRyFSYQcwZS8c1B4SzlmJ5SSnR 1cAbXJgjUNxccNM+2wqh9U32OC13BfWL2v+EDa8SpTFxzDPGhD/GPkUWxxWjXQAS mJYfXwgoaGMj/9+AnSFXJKBJj73boG+xey4cV3kgkFYlFfGbENRTryDg4EHLi6a+ c0gBGS4UON7gr13BnKEHBSKIEQllj33w6X9ZKk2mhiSbWUgbGZoxHOqEjZaG0ARP 4m32IgOp5hgbFO/JnJWab9mZV+Oo/vmscx0R3o1NJ0utGdMLw8hnYYypW8CIKxX+ MAqLNG126+5G0soKIj/TWPF47wIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5I7d31 JAJJfA0Y9q9xZwB5VITeMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvM0M3MzIxMEUy OUU3MTFGMEFCNUVCQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn1tgwDQYJKoZIhvcNAQELBQADggEBAHHdthhfL+vn847H xAwJ0hFBfyEsRPvDjuL2+BkbrX4pOg167gIavkmxmI3qB/rMC+ovyZhMlJEMzb7D 96DVDJ6O9o9YCarJ6XF9a/zVQSxmQ07MRKpbETmwuC3J+QhVt7GVXMRebtGpbD/h eLndO5eM/fyJCXJmnMzGq45LB52Pf2kOr9YLDYpdo8y63Bf2ZwaOAYXSkYV7zzkW SC/yzYltCVibXTTxmjILFY2ZXuk1+LaW/dYJiFZstN+k/8fEC4VsQ7h5RClX/2dI 5tgROzQZ1n/opu1jIWwcg+iejxOqk6biJsYYNzM2TYPJcRQ6J7z1ME1/nPZhhbJy y37zyNk= -----END CERTIFICATE-----Generated at Mon May 12 20:28:29 2025 by rpki-client