$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa File: 406928720A2411F0A2D02B4AC4F9AE02.roa (raw, json) Hash identifier: 8eGArVfOYdSLWSO+FANax1XLurPiLwrIrNraHvUnN6M= Subject key identifier: AC:3B:B1:93:D8:A4:61:66:0A:92:DC:ED:87:26:85:C5:46:61:C8:70 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2890 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:15 +0000 ROA not before: Sat 26 Jul 2025 15:54:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 30058 IP address blocks: 103.196.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10384 (0x2890) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa27-7ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:91:9b:10:9b:29:2b:ac:ad:4c:49:0d:86: ed:c5:29:74:e4:43:5b:c2:be:db:87:f3:ea:58:3d: 6d:b5:6a:84:b6:4b:ee:50:67:58:b7:d8:0c:fe:d9: fe:e4:30:d1:7c:c7:64:c9:fe:11:54:ad:36:4c:42: cf:a6:19:f3:be:5e:88:9f:5a:0c:3b:15:c1:ca:ad: 6c:24:37:24:1e:8c:4f:f0:c9:0a:d7:7e:ff:ff:90: 14:ed:60:6d:53:be:54:17:d3:43:7a:6c:dc:37:0a: ad:74:48:fb:b9:e9:93:7a:20:fd:d0:df:c6:a9:22: 13:e9:61:d6:c0:43:c3:e0:3a:72:26:98:1f:c2:6b: bd:ca:44:db:16:9f:5f:fc:3f:a1:ec:0a:d5:c0:3b: 1f:c7:24:ff:66:a6:60:d1:ba:50:e2:16:58:4d:87: 77:7a:7a:ef:c1:bd:9b:4b:8e:b4:c2:fd:8c:0a:a4: d0:e6:c3:7c:cd:b9:36:54:2b:e7:7e:53:74:a6:39: b7:f3:ac:2f:5b:0c:b1:0a:30:83:1f:6e:01:70:3f: f6:bf:7d:b2:a7:0c:ae:59:2d:7a:f0:e8:86:be:4d: ab:62:a3:82:3e:53:3a:f6:c0:f5:04:4d:4b:06:a9: 2f:ec:6e:5b:df:e4:27:1e:05:68:6e:ce:0c:bb:57: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3B:B1:93:D8:A4:61:66:0A:92:DC:ED:87:26:85:C5:46:61:C8:70 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.22.0/24 Signature Algorithm: sha256WithRSAEncryption 32:28:4d:c5:f4:9c:b4:4d:67:5f:37:05:d8:e9:83:e1:81:73: 76:87:d3:dc:16:a1:10:d8:a2:76:ac:48:e2:80:44:db:d2:fd: 7b:96:6f:7e:1f:19:ed:63:b1:ac:b5:f9:32:e0:df:5b:ae:1d: 5e:2e:29:02:03:96:89:0b:0c:28:32:be:26:39:d1:f4:ad:88: ff:27:76:41:1e:7c:5e:52:3c:06:93:da:72:4b:77:7f:6f:68: 4f:91:22:bd:04:74:e1:d8:87:bc:c0:17:15:62:01:30:6f:6f: 14:c8:c1:1f:86:78:81:34:53:03:4d:8d:f9:6b:5f:2d:b2:af: e4:4e:ae:2e:90:05:6f:a2:10:4f:7d:d8:15:ff:52:54:83:d9: 54:b4:68:11:08:64:2b:4d:e0:b5:a4:c9:53:61:ec:c8:71:e0: 33:35:ea:3b:7b:b0:69:f4:1b:cd:c8:4c:60:cc:e6:fc:a9:17: b0:51:3b:10:02:33:f4:35:dc:4b:f4:54:a2:e4:68:05:46:54: a4:22:99:0c:a9:44:04:33:e5:58:3c:9b:cf:b4:ba:4e:f5:86: a2:41:1a:37:fb:cf:f8:6b:95:0f:d3:f7:eb:fb:32:dd:2b:cc: dc:e5:a0:c7:e3:fb:23:db:59:65:48:a9:a5:39:40:9f:41:25: 05:4b:08:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEyNy03ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QuRmxCbKSusrUxJDYbtxSl05ENbwr7bh/PqWD1ttWqEtkvuUGdYt9gM/tn+ 5DDRfMdkyf4RVK02TELPphnzvl6In1oMOxXByq1sJDckHoxP8MkK137//5AU7WBt U75UF9NDemzcNwqtdEj7uemTeiD90N/GqSIT6WHWwEPD4DpyJpgfwmu9ykTbFp9f /D+h7ArVwDsfxyT/ZqZg0bpQ4hZYTYd3enrvwb2bS460wv2MCqTQ5sN8zbk2VCvn flN0pjm386wvWwyxCjCDH24BcD/2v32ypwyuWS168OiGvk2rYqOCPlM69sD1BE1L Bqkv7G5b3+QnHgVobs4Mu1drgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKw7sZPY pGFmCpLc7YcmhcVGYchwMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDA2OTI4NzIw QTI0MTFGMEEyRDAyQjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnxBYwDQYJKoZIhvcNAQELBQADggEBADIoTcX0nLRNZ183 Bdjpg+GBc3aH09wWoRDYonasSOKARNvS/XuWb34fGe1jsay1+TLg31uuHV4uKQID lokLDCgyviY50fStiP8ndkEefF5SPAaT2nJLd39vaE+RIr0EdOHYh7zAFxViATBv bxTIwR+GeIE0UwNNjflrXy2yr+ROri6QBW+iEE992BX/UlSD2VS0aBEIZCtN4LWk yVNh7Mhx4DM16jt7sGn0G83ITGDM5vypF7BROxACM/Q13Ev0VKLkaAVGVKQimQyp RAQz5Vg8m8+0uk71hqJBGjf7z/hrlQ/T9+v7Mt0rzNzloMfj+yPbWWVIqaU5QJ9B JQVLCBY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:37:58 2025 by rpki-client