$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa File: DB4085480A3A11E999FA296FC4F9AE02.roa (raw, json) Hash identifier: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ= Subject key identifier: D7:F3:0A:BE:20:DB:B5:5C:33:19:41:1D:F4:AA:A8:44:13:5D:A4:B1 Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 1111 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa Signing time: Mon 20 Jan 2025 17:25:21 +0000 ROA not before: Mon 20 Jan 2025 17:25:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 45455 IP address blocks: 103.28.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4369 (0x1111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Jan 20 17:25:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=678e8701-318c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:1c:78:6e:29:c1:cc:18:c4:88:9d:02:2f: be:38:6b:a0:67:8c:e8:ca:84:d3:95:4c:19:6f:d8: 7e:0d:fe:dd:b6:16:14:2e:46:7c:e3:27:dc:43:65: c7:c3:10:84:33:d2:49:66:ac:6a:59:dd:e3:b3:40: 62:21:8b:50:89:d7:e1:e7:27:9c:f0:f1:8d:bb:31: 97:06:d7:8e:0b:67:a2:3c:16:74:63:e6:94:c7:51: 86:6d:96:ff:d9:26:88:86:0a:c3:c9:e7:cc:a5:9a: d1:ad:e5:49:f6:cc:67:8a:06:fe:ec:be:db:7a:da: 79:58:f1:ec:64:82:a7:fc:9d:67:23:02:a8:c9:6b: de:2c:5d:bb:ba:f9:7d:00:29:18:b4:69:80:e4:0c: bf:f8:49:50:b3:a1:eb:f7:46:b3:41:92:9a:d6:51: 8e:f0:f1:72:1c:2c:f7:4a:6f:2e:96:d5:ce:6d:5c: 42:58:4a:e4:ab:cf:be:05:bf:3a:54:91:b9:2d:3f: d6:00:54:ad:52:4d:22:d1:10:14:89:6d:df:2d:f9: 68:4a:ad:3f:53:36:b8:e5:40:e0:0b:a9:9d:98:9a: af:19:f5:7f:a9:5a:cf:0c:c9:e1:c3:05:f0:7f:29: 6b:9a:fa:ac:23:e3:d9:29:a7:ef:bf:4c:bc:c9:d8: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:0A:BE:20:DB:B5:5C:33:19:41:1D:F4:AA:A8:44:13:5D:A4:B1 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/DB4085480A3A11E999FA296FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.124.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:15:8f:31:be:8f:c4:e6:f0:7f:46:5b:ff:68:d3:24:ab:55: f7:73:e8:df:0e:10:9f:91:2f:0c:13:90:e6:41:3c:28:c5:c4: 22:c6:9b:a2:3c:7f:b6:ce:bb:c9:ed:db:ce:58:56:9d:95:d6: 4f:7f:f0:0c:a9:ed:2e:52:44:91:1e:65:af:ac:7d:92:54:24: bc:5c:c0:4a:a7:d5:fc:82:13:a8:c7:69:d9:93:a1:fc:48:06: 7f:0e:c3:b2:60:87:61:3a:3b:b7:4e:3b:17:22:fa:2d:5e:71: 76:ad:4d:7d:b0:82:97:fe:98:20:d1:d5:fc:26:53:b7:e1:a0: ab:91:fe:b0:71:70:66:41:a8:f9:c3:cc:2d:d4:1e:b1:7d:d5: 06:52:2f:2b:e0:f6:1e:08:b8:66:05:09:77:cf:c3:46:f0:97: 7d:f0:72:a7:ee:3a:a7:f9:2a:a9:c6:29:a0:25:85:2b:0f:8a: a8:71:0f:8b:f4:e1:02:80:8c:91:24:c2:84:f3:70:88:27:55: 03:a3:38:e0:1f:62:20:49:ae:04:02:04:68:b6:6b:16:1e:30: d4:08:bd:a9:51:d7:bb:96:24:30:19:6d:cd:17:19:d0:fa:7c: 1c:b8:4c:e5:d5:cc:58:58:97:df:25:0a:e5:e3:2b:4c:bf:b8: e3:37:ae:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUwMTIwMTcyNTIxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhlODcwMS0zMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQcceG4pwcwYxIidAi++OGugZ4zoyoTTlUwZb9h+Df7dthYULkZ84yfcQ2XH wxCEM9JJZqxqWd3js0BiIYtQidfh5yec8PGNuzGXBteOC2eiPBZ0Y+aUx1GGbZb/ 2SaIhgrDyefMpZrRreVJ9sxnigb+7L7betp5WPHsZIKn/J1nIwKoyWveLF27uvl9 ACkYtGmA5Ay/+ElQs6Hr90azQZKa1lGO8PFyHCz3Sm8ultXObVxCWErkq8++Bb86 VJG5LT/WAFStUk0i0RAUiW3fLfloSq0/Uza45UDgC6mdmJqvGfV/qVrPDMnhwwXw fylrmvqsI+PZKafvv0y8ydhazwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNfzCr4g 27VcMxlBHfSqqEQTXaSxMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUYwRjEvNDBCMTNCQzAwQTM2MTFFOTg3QTlDNDY0QzRGOUFFMDIvREI0MDg1NDgw QTNBMTFFOTk5RkEyOTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnHHwwDQYJKoZIhvcNAQELBQADggEBADoVjzG+j8Tm8H9G W/9o0ySrVfdz6N8OEJ+RLwwTkOZBPCjFxCLGm6I8f7bOu8nt285YVp2V1k9/8Ayp 7S5SRJEeZa+sfZJUJLxcwEqn1fyCE6jHadmTofxIBn8Ow7Jgh2E6O7dOOxci+i1e cXatTX2wgpf+mCDR1fwmU7fhoKuR/rBxcGZBqPnDzC3UHrF91QZSLyvg9h4IuGYF CXfPw0bwl33wcqfuOqf5KqnGKaAlhSsPiqhxD4v04QKAjJEkwoTzcIgnVQOjOOAf YiBJrgQCBGi2axYeMNQIvalR17uWJDAZbc0XGdD6fBy4TOXVzFhYl98lCuXjK0y/ uOM3rgo= -----END CERTIFICATE-----Generated at Sat Apr 26 09:30:40 2025 by rpki-client