$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa File: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (raw, json) Hash identifier: a+Zi9iESugqvqoTYb4WkQmUuVNUV8p+uqNbSEtnaZ8o= Subject key identifier: BA:45:96:FE:3B:6F:BD:CE:0A:88:09:42:4B:DC:73:31:51:85:FA:AB Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0B16 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa Signing time: Fri 18 Apr 2025 19:41:29 +0000 ROA not before: Fri 18 Apr 2025 19:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134204 IP address blocks: 103.211.28.0/22 maxlen: 22 103.211.28.0/24 maxlen: 24 103.211.29.0/24 maxlen: 24 103.211.30.0/24 maxlen: 24 103.211.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Apr 18 19:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6802aae9-093f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:cb:ea:7e:a6:62:9d:0f:74:da:c8:1d:a5: 20:54:e9:8c:b9:6d:cf:4a:f8:fc:b5:8b:cd:37:98: 2e:a0:0d:3c:d4:84:22:27:2b:5a:04:dc:04:4a:1b: 3b:25:b8:27:6e:0a:02:b3:36:0a:0f:47:89:a6:e0: 98:2b:76:24:a7:e4:91:77:75:fc:af:00:04:f3:cc: 83:4e:f7:02:7f:9c:85:79:c8:89:9b:ee:d1:7e:0e: 71:ea:cf:da:0a:8c:c1:0d:c2:ad:0f:c4:e7:8b:07: 9f:7a:30:91:d3:cc:47:e6:51:2e:44:23:53:92:0b: a6:45:02:ba:bc:93:5b:a9:a5:85:44:2c:69:c3:78: a3:20:24:5d:77:08:22:51:6f:7a:9a:bf:f6:c1:e8: 48:9e:8b:ac:94:4e:7b:89:28:26:57:d8:cf:9e:fb: a9:63:19:24:b4:3d:b2:42:c4:41:1a:82:f4:67:06: f7:17:5b:a7:43:80:6d:c9:2d:fa:ec:35:94:24:12: b4:d2:5b:ac:3e:74:a6:a5:86:8c:09:3e:57:52:98: 0a:93:fa:d1:5e:9f:ac:e8:58:a4:79:83:8d:42:7b: bf:3a:20:98:43:68:86:a6:ca:3c:85:31:d1:d3:6f: 0b:c9:a6:8c:64:ef:af:49:4a:d2:2b:4a:05:1a:fe: a7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:45:96:FE:3B:6F:BD:CE:0A:88:09:42:4B:DC:73:31:51:85:FA:AB X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.28.0/22 Signature Algorithm: sha256WithRSAEncryption 57:c3:dd:4b:c0:3b:5d:02:da:ed:0b:38:53:05:30:16:a3:87: 50:d4:b8:73:62:c9:9c:c9:a8:3d:3a:75:53:c5:86:23:76:3d: 25:9d:f2:c0:ff:de:2c:9d:b8:76:e9:bc:4f:5a:d8:70:71:60: fb:93:ee:d5:60:64:cb:9c:02:b0:01:c8:49:8d:f7:70:12:c4: 3e:37:5c:b8:10:5c:f8:f3:56:a4:bf:f7:cc:f3:58:07:29:cb: a8:04:17:c1:06:8c:47:f5:2b:cd:70:26:c9:b5:53:1f:8f:4d: ce:1d:21:44:a7:52:e6:48:71:da:4a:44:05:20:dd:ed:36:62: 5c:f7:5b:67:72:1b:39:59:7d:71:0d:a0:1e:fe:22:68:07:c9: ff:7b:a4:a5:b7:77:60:40:14:fb:1e:a2:9b:43:9b:d3:71:06: 35:59:07:bc:f3:0c:91:1e:d3:79:5c:16:e2:05:be:c9:90:59: 5c:8c:24:fd:c0:2d:e5:c9:29:8e:80:f0:9f:08:e2:a6:03:3b: e2:a7:b5:4d:50:cf:b1:85:d3:2e:f0:16:d8:31:54:ee:8c:d1: 30:b5:dc:75:46:98:a5:47:05:61:54:46:25:76:ef:89:55:0a: 3c:00:4f:dc:38:e8:fc:68:9e:8c:4e:09:5b:d3:8b:c0:4c:96: 5b:36:ed:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjUwNDE4MTk0MTI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyYWFlOS0wOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvPL6n6mYp0PdNrIHaUgVOmMuW3PSvj8tYvNN5guoA081IQiJytaBNwEShs7 JbgnbgoCszYKD0eJpuCYK3Ykp+SRd3X8rwAE88yDTvcCf5yFeciJm+7Rfg5x6s/a CozBDcKtD8TniwefejCR08xH5lEuRCNTkgumRQK6vJNbqaWFRCxpw3ijICRddwgi UW96mr/2wehInouslE57iSgmV9jPnvupYxkktD2yQsRBGoL0Zwb3F1unQ4BtyS36 7DWUJBK00lusPnSmpYaMCT5XUpgKk/rRXp+s6FikeYONQnu/OiCYQ2iGpso8hTHR 028LyaaMZO+vSUrSK0oFGv6nvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLpFlv47 b73OCogJQkvcczFRhfqrMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA2RjIvOEI4QzRERDIzRjQ3MTFFQThFNURBODdDQzRGOUFFMDIvOEIzN0QyQzQw RDI1MTFFRkEyRTREOTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn0xwwDQYJKoZIhvcNAQELBQADggEBAFfD3UvAO10C2u0L OFMFMBajh1DUuHNiyZzJqD06dVPFhiN2PSWd8sD/3iyduHbpvE9a2HBxYPuT7tVg ZMucArAByEmN93ASxD43XLgQXPjzVqS/98zzWAcpy6gEF8EGjEf1K81wJsm1Ux+P Tc4dIUSnUuZIcdpKRAUg3e02Ylz3W2dyGzlZfXENoB7+ImgHyf97pKW3d2BAFPse optDm9NxBjVZB7zzDJEe03lcFuIFvsmQWVyMJP3ALeXJKY6A8J8I4qYDO+KntU1Q z7GF0y7wFtgxVO6M0TC13HVGmKVHBWFURiV274lVCjwAT9w46PxonoxOCVvTi8BM lls27Qo= -----END CERTIFICATE-----Generated at Sat Apr 26 05:56:35 2025 by rpki-client