$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa File: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (raw, json) Hash identifier: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g= Subject key identifier: ED:98:AC:28:AF:30:87:79:D9:2E:58:8C:F7:39:68:D0:29:07:39:0A Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 029D Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa Signing time: Fri 25 Apr 2025 01:27:29 +0000 ROA not before: Fri 25 Apr 2025 01:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214271 IP address blocks: 103.227.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Apr 25 01:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680ae501-ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:42:39:02:0e:eb:78:d1:b1:60:96:a1:02:39: 9d:7f:63:e7:f6:1b:74:f8:75:96:5a:83:9b:41:f5: 63:e3:7d:4e:7a:4c:8b:a3:02:d7:3c:c3:9c:0d:4f: 9b:37:d9:88:2e:0b:3d:64:38:72:22:0e:83:9a:b6: 83:46:68:b0:85:08:c7:25:8d:d2:5a:aa:2a:c4:e9: 6a:45:bf:d2:1c:04:a3:30:ac:dc:57:4f:3e:82:a1: 1f:1b:2c:e3:cc:31:78:1d:c8:bf:06:a7:82:6a:92: d9:ba:e3:82:96:ee:2a:3f:50:62:3e:22:1e:70:5d: 77:1c:dd:0c:5e:7e:fc:27:9c:97:db:7e:32:72:6f: e0:56:cd:41:a4:f5:8d:ba:c1:91:77:9a:cb:2a:89: 75:a8:a6:0e:86:27:11:96:0e:58:66:03:26:44:59: d7:33:d7:d0:99:91:94:e8:d9:f0:4a:4a:31:c4:1c: 3a:12:ef:70:be:51:26:fe:33:6d:ac:de:7c:d9:82: 04:84:c4:fd:e2:05:20:53:39:29:c0:c0:a5:8b:76: 74:2e:37:ea:9d:c3:8b:33:9b:1d:14:f9:2b:72:35: d7:ac:7b:ee:bf:41:e9:44:78:3c:bf:45:71:41:5f: e2:87:55:18:15:fd:95:26:da:46:36:a7:c2:e6:a5: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:98:AC:28:AF:30:87:79:D9:2E:58:8C:F7:39:68:D0:29:07:39:0A X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/0EDE44B2797511EF9F3FEC4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.209.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c7:18:f0:52:9c:65:79:9c:90:bf:96:b8:44:47:1e:2d:51: c5:12:f3:fe:99:9c:47:3c:0e:c5:0f:bf:ae:82:3e:33:aa:b5: 8c:bf:45:cc:12:c3:b7:f9:a4:04:d8:d4:68:6f:48:ee:57:82: 99:ee:2e:e6:c2:f4:57:43:85:68:ae:b7:8c:6e:38:c2:4e:e7: ec:63:f3:10:36:bd:a2:dc:e1:bb:0e:93:77:e9:7b:95:ed:84: b3:91:e8:86:9b:54:e9:cb:2f:6a:4c:37:bc:c2:89:81:0e:bc: f1:63:b5:ff:99:2a:cd:30:36:5f:cb:49:38:7b:3e:0e:e4:32: 7a:c3:91:3d:5f:58:42:e2:67:5b:0f:63:31:1d:7b:5a:83:91: 8b:fa:b8:e1:06:6a:f6:03:5a:8d:9d:a6:e6:27:9d:92:30:6d: 49:f4:8f:5a:64:cc:72:15:0b:7b:77:8d:fb:bc:2c:14:cc:84: 5f:f0:d8:2a:2b:23:83:2b:0a:6c:f2:62:98:cb:6a:15:e8:3f: 55:ff:78:21:7b:44:d2:97:7d:59:32:e4:f8:2d:8e:04:54:ab: 12:3f:b0:f0:f4:6c:50:54:2d:09:b9:61:6a:f7:ca:19:b4:09: 65:a9:ef:d9:ae:6d:0a:a3:42:cc:1a:fe:a5:09:ad:b1:31:b2: cc:fe:46:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwNDI1MDEyNzI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhZTUwMS1hYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UI5Ag7reNGxYJahAjmdf2Pn9ht0+HWWWoObQfVj431OekyLowLXPMOcDU+b N9mILgs9ZDhyIg6DmraDRmiwhQjHJY3SWqoqxOlqRb/SHASjMKzcV08+gqEfGyzj zDF4Hci/BqeCapLZuuOClu4qP1BiPiIecF13HN0MXn78J5yX234ycm/gVs1BpPWN usGRd5rLKol1qKYOhicRlg5YZgMmRFnXM9fQmZGU6NnwSkoxxBw6Eu9wvlEm/jNt rN582YIEhMT94gUgUzkpwMCli3Z0LjfqncOLM5sdFPkrcjXXrHvuv0HpRHg8v0Vx QV/ih1UYFf2VJtpGNqfC5qWqOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO2YrCiv MId52S5YjPc5aNApBzkKMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGRkEvQ0U4MUE1MTQwMzJDMTFFREE4Q0I0MDZFQzRGOUFFMDIvMEVERTQ0QjI3 OTc1MTFFRjlGM0ZFQzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn49EwDQYJKoZIhvcNAQELBQADggEBAEXHGPBSnGV5nJC/ lrhERx4tUcUS8/6ZnEc8DsUPv66CPjOqtYy/RcwSw7f5pATY1GhvSO5XgpnuLubC 9FdDhWiut4xuOMJO5+xj8xA2vaLc4bsOk3fpe5XthLOR6IabVOnLL2pMN7zCiYEO vPFjtf+ZKs0wNl/LSTh7Pg7kMnrDkT1fWELiZ1sPYzEde1qDkYv6uOEGavYDWo2d puYnnZIwbUn0j1pkzHIVC3t3jfu8LBTMhF/w2CorI4MrCmzyYpjLahXoP1X/eCF7 RNKXfVky5PgtjgRUqxI/sPD0bFBULQm5YWr3yhm0CWWp79mubQqjQswa/qUJrbEx ssz+RqY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:18:02 2025 by rpki-client