$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/07A28E0E42DA11F0AAB03C37C4F9AE02.roa File: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (raw, json) Hash identifier: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g= Subject key identifier: D7:C5:F9:81:74:43:B6:32:96:5C:32:BE:F7:E1:18:65:DA:3B:83:7F Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0204 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/07A28E0E42DA11F0AAB03C37C4F9AE02.roa Signing time: Fri 06 Jun 2025 13:27:45 +0000 ROA not before: Fri 06 Jun 2025 13:27:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 2914 IP address blocks: 103.86.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Jun 6 13:27:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6842ecd0-7970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:3b:e2:88:72:a0:92:88:28:f5:80:f2:3d: 4d:3c:07:33:f1:46:48:f0:dd:39:ea:9d:46:f0:d9: dd:2b:f2:c4:c9:a4:2b:87:54:56:7b:09:d0:3e:44: 73:ce:d3:a9:ec:c6:02:c3:e3:cd:8d:2d:2a:af:e5: 57:95:e6:3b:af:b1:28:61:13:f8:c4:7f:92:dc:f2: 32:c7:f2:36:58:a7:15:e4:92:48:b2:c6:49:be:a9: e6:b8:28:96:35:71:ed:64:45:cb:eb:94:a8:65:35: fb:85:f3:50:68:17:dd:84:72:12:25:9a:e0:2c:8d: ea:3f:bd:73:66:74:f3:a5:e1:3d:00:fa:05:ad:0a: 4a:83:e1:24:fc:63:23:ca:e9:4e:0c:6b:fc:28:4a: 27:f7:b4:de:59:aa:ae:19:c4:3d:47:25:70:ed:40: 25:cd:f5:c6:71:a0:2b:58:14:27:4d:3c:a5:9b:1b: cd:a0:d6:bc:09:87:c1:27:6f:86:58:56:2b:ae:66: 28:37:93:b7:6e:8c:0a:e6:c8:4e:fa:eb:f3:3c:30: 4b:23:f6:9a:d0:c9:4a:d4:68:cb:19:b0:15:59:a3: 95:e7:21:78:9a:a6:81:24:0e:1c:a5:56:7a:cf:a2: 55:83:e2:22:a3:aa:b1:23:21:84:ca:40:2e:2f:a1: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C5:F9:81:74:43:B6:32:96:5C:32:BE:F7:E1:18:65:DA:3B:83:7F X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/07A28E0E42DA11F0AAB03C37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.121.0/24 Signature Algorithm: sha256WithRSAEncryption 38:05:a1:11:8c:0a:2a:a4:3d:75:6e:db:b8:e2:11:dd:25:c8: 0d:88:e0:75:ee:d0:0d:47:2a:0b:db:43:67:99:00:cd:39:e5: 4f:b5:80:0c:27:69:cc:98:51:3b:4e:fd:f6:78:cf:4b:8f:a5: 8f:76:96:57:ee:03:59:8a:45:ab:ce:1d:05:99:d9:5c:b1:74: 57:af:2d:9f:95:5f:01:65:e5:dc:34:00:a6:c2:a3:f3:de:29: b3:ca:ff:f3:00:25:70:af:e4:12:02:de:c6:86:a7:58:04:46: 95:c5:8f:41:68:4c:65:a7:5e:62:cb:b0:86:7c:69:dd:1b:1a: 36:61:7a:d4:92:83:87:0c:24:f5:6b:b8:36:a2:9e:ae:31:01: fc:47:3d:e1:e4:46:4c:4b:c9:d4:4b:b4:26:45:0b:bb:4f:dd: c2:5e:e5:1b:ab:43:63:ba:da:80:a1:d4:d0:82:35:a6:73:ee: df:27:e3:2c:2a:48:1e:96:69:d2:32:88:a6:b7:16:9d:19:53: c5:37:84:a5:b6:0d:a2:b8:eb:15:42:80:d6:77:fa:e2:cd:05: dd:54:fc:b4:4c:24:e7:21:00:77:39:6d:67:2d:52:09:14:28: ea:ea:49:aa:33:df:cc:5b:ab:ac:ce:c0:78:9d:fb:e5:af:4c: 7b:23:20:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwNjA2MTMyNzQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODQyZWNkMC03OTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB474ohyoJKIKPWA8j1NPAcz8UZI8N056p1G8NndK/LEyaQrh1RWewnQPkRz ztOp7MYCw+PNjS0qr+VXleY7r7EoYRP4xH+S3PIyx/I2WKcV5JJIssZJvqnmuCiW NXHtZEXL65SoZTX7hfNQaBfdhHISJZrgLI3qP71zZnTzpeE9APoFrQpKg+Ek/GMj yulODGv8KEon97TeWaquGcQ9RyVw7UAlzfXGcaArWBQnTTylmxvNoNa8CYfBJ2+G WFYrrmYoN5O3bowK5shO+uvzPDBLI/aa0MlK1GjLGbAVWaOV5yF4mqaBJA4cpVZ6 z6JVg+Iio6qxIyGEykAuL6E79wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNfF+YF0 Q7YyllwyvvfhGGXaO4N/MB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvMDdBMjhFMEU0 MkRBMTFGMEFBQjAzQzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVnkwDQYJKoZIhvcNAQELBQADggEBADgFoRGMCiqkPXVu 27jiEd0lyA2I4HXu0A1HKgvbQ2eZAM055U+1gAwnacyYUTtO/fZ4z0uPpY92llfu A1mKRavOHQWZ2VyxdFevLZ+VXwFl5dw0AKbCo/PeKbPK//MAJXCv5BIC3saGp1gE RpXFj0FoTGWnXmLLsIZ8ad0bGjZhetSSg4cMJPVruDainq4xAfxHPeHkRkxLydRL tCZFC7tP3cJe5RurQ2O62oCh1NCCNaZz7t8n4ywqSB6WadIyiKa3Fp0ZU8U3hKW2 DaK46xVCgNZ3+uLNBd1U/LRMJOchAHc5bWctUgkUKOrqSaoz38xbq6zOwHid++Wv THsjIM8= -----END CERTIFICATE-----Generated at Fri Jun 20 13:18:29 2025 by rpki-client