$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/A59866188BC311E88445685EC4F9AE02.roa File: A59866188BC311E88445685EC4F9AE02.roa (raw, json) Hash identifier: ttQKVIA3bhQ3yn0h9mDnukLDStF7uBzvZvWVyzWWSJo= Subject key identifier: 73:86:E7:72:EC:6C:07:8B:EB:34:75:04:48:5F:88:34:90:29:F3:0A Certificate issuer: /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Certificate serial: 13E6 Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/A59866188BC311E88445685EC4F9AE02.roa Signing time: Thu 24 Jul 2025 17:26:11 +0000 ROA not before: Thu 24 Jul 2025 17:26:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137912 IP address blocks: 103.117.21.0/24 maxlen: 24 103.118.123.0/24 maxlen: 24 103.118.154.0/23 maxlen: 23 2001:df5:9500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5094 (0x13e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849 Validity Not Before: Jul 24 17:26:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68826cb3-425d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c3:f8:b8:5d:83:a3:3a:45:b3:81:c1:4d:1f: 28:f6:93:fa:6d:52:ff:fb:64:85:c9:ea:b7:e2:7f: ee:7f:35:c7:3c:7c:5c:01:94:bf:7a:1c:0e:f1:3d: ce:4d:05:ba:1e:f6:6b:aa:ca:f9:b1:0c:fe:fb:1f: 16:80:2d:c9:d5:d5:1b:ec:35:91:c4:42:11:7e:a1: a1:d6:4c:2f:8e:fb:12:35:42:d0:b3:78:cd:79:28: 5d:e7:3d:2d:1b:f7:4a:b5:b1:91:8a:49:fe:cc:ee: d1:61:3b:cc:a9:c2:a7:11:9f:d4:40:ec:38:50:31: bf:5b:d8:04:5e:3b:3d:57:0c:c1:1a:80:b3:f4:ba: 42:41:d1:14:ee:58:e8:46:97:53:e8:3d:a8:40:41: f5:b1:72:f7:43:b2:49:9a:90:ea:dc:82:b6:ce:e5: 1e:48:fb:27:6e:a0:66:55:70:db:c1:f1:8b:83:5c: 87:c2:16:f1:14:1d:34:b0:77:7c:56:a4:fe:a4:bd: a6:53:ee:8a:9e:38:34:ca:38:f8:e2:50:04:cf:8a: 99:fe:f1:88:62:ba:14:ee:fd:10:5c:f0:ce:51:55: 07:e4:58:20:5d:6e:81:24:cb:3d:e2:01:5e:3b:d4: 8c:e7:a2:97:80:ea:09:f0:e2:0d:d5:91:da:00:05: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:86:E7:72:EC:6C:07:8B:EB:34:75:04:48:5F:88:34:90:29:F3:0A X509v3 Authority Key Identifier: keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/A59866188BC311E88445685EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.21.0/24 103.118.123.0/24 103.118.154.0/23 IPv6: 2001:df5:9500::/48 Signature Algorithm: sha256WithRSAEncryption 9a:f3:5e:35:ed:a4:c9:6e:9c:41:d2:1a:67:f6:05:fc:bb:99: 3b:03:14:18:95:e9:3f:ea:e4:b5:fa:03:9f:7b:d0:ff:54:e3: 2d:d4:2c:7f:b9:7e:6c:0a:96:53:06:e1:0d:fe:44:5e:98:10: 9d:15:7b:4d:2a:bd:51:18:f6:2b:53:46:d1:b5:57:93:3f:1f: 70:74:83:0b:0d:d5:77:57:83:ea:38:dc:eb:3f:28:4d:23:c6: 06:96:0e:08:51:5d:0a:80:09:7e:11:e1:2e:c5:3e:6c:15:46: ee:6c:c0:9b:12:99:c9:80:7b:02:49:f8:0b:d3:0d:05:a6:97: 85:b4:1d:24:16:28:ac:c1:ce:c7:da:11:64:8f:63:56:28:0f: 57:fa:13:af:d6:82:23:3e:a6:d9:a1:60:b9:ff:d3:e7:c4:19: 3c:69:f1:e1:6a:e6:45:be:03:58:58:6d:4d:df:89:3e:67:c0: 59:a2:6f:55:bf:eb:86:e7:13:22:44:20:f6:07:0d:c6:e4:10: 03:14:10:90:9d:1c:0d:b5:58:2f:96:ea:52:ae:cc:34:4d:81: b3:a7:b9:58:99:b3:7c:c3:e4:0e:30:76:d4:97:25:77:ad:11: 30:a0:9f:c7:c9:5a:10:b4:bb:64:21:c9:87:b6:ea:11:b5:7e: f4:cd:f2:83 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICE+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEQjExMTAvBgNVBAUTKDY2QzJDRDFEMkJBQzc4MjY0ODUyRjEyRDE4QjIxOEMw NUU0NDg4NDkwHhcNMjUwNzI0MTcyNjExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNmNiMy00MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MP4uF2DozpFs4HBTR8o9pP6bVL/+2SFyeq34n/ufzXHPHxcAZS/ehwO8T3O TQW6HvZrqsr5sQz++x8WgC3J1dUb7DWRxEIRfqGh1kwvjvsSNULQs3jNeShd5z0t G/dKtbGRikn+zO7RYTvMqcKnEZ/UQOw4UDG/W9gEXjs9VwzBGoCz9LpCQdEU7ljo RpdT6D2oQEH1sXL3Q7JJmpDq3IK2zuUeSPsnbqBmVXDbwfGLg1yHwhbxFB00sHd8 VqT+pL2mU+6Knjg0yjj44lAEz4qZ/vGIYroU7v0QXPDOUVUH5FggXW6BJMs94gFe O9SM56KXgOoJ8OIN1ZHaAAW0xwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHOG53Ls bAeL6zR1BEhfiDSQKfMKMB8GA1UdIwQYMBaAFGbCzR0rrHgmSFLxLRiyGMBeRIhJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0RCMS9EQTJBNDJCRThC QzAxMUU4OTdDNzkxNTZDNEY5QUUwMi9ac0xOSFN1c2VDWklVdkV0R0xJWXdGNUVp RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTE5IU3VzZUNaSVV2RXRHTElZd0Y1RWlFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNEQjEvREEyQTQyQkU4QkMwMTFFODk3Qzc5MTU2QzRGOUFFMDIvQTU5ODY2MTg4 QkMzMTFFODg0NDU2ODVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABndRUDBABndnsDBAFndpowDwQCAAIwCQMHACABDfWVADAN BgkqhkiG9w0BAQsFAAOCAQEAmvNeNe2kyW6cQdIaZ/YF/LuZOwMUGJXpP+rktfoD n3vQ/1TjLdQsf7l+bAqWUwbhDf5EXpgQnRV7TSq9URj2K1NG0bVXkz8fcHSDCw3V d1eD6jjc6z8oTSPGBpYOCFFdCoAJfhHhLsU+bBVG7mzAmxKZyYB7Akn4C9MNBaaX hbQdJBYorMHOx9oRZI9jVigPV/oTr9aCIz6m2aFguf/T58QZPGnx4WrmRb4DWFht Td+JPmfAWaJvVb/rhucTIkQg9gcNxuQQAxQQkJ0cDbVYL5bqUq7MNE2Bs6e5WJmz fMPkDjB21Jcld60RMKCfx8laELS7ZCHJh7bqEbV+9M3ygw== -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:26 2025 by rpki-client