$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/7D948498482811F08D5B032CC4F9AE02.roa File: 7D948498482811F08D5B032CC4F9AE02.roa (raw, json) Hash identifier: Q3B0r62p0wljyTvmkYtkgQKpAOlHYKPL1sy/l8g4QRM= Subject key identifier: 11:AE:98:59:AA:29:BA:28:6A:80:56:0C:92:24:79:92:AE:04:AB:EB Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 0197 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/7D948498482811F08D5B032CC4F9AE02.roa Signing time: Fri 13 Jun 2025 07:31:59 +0000 ROA not before: Fri 13 Jun 2025 07:31:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38832 IP address blocks: 103.212.67.0/24 maxlen: 24 119.15.64.0/24 maxlen: 24 119.15.66.0/24 maxlen: 24 119.15.68.0/23 maxlen: 24 119.15.70.0/23 maxlen: 24 203.3.70.0/24 maxlen: 24 203.5.59.0/24 maxlen: 24 203.26.51.0/24 maxlen: 24 203.26.177.0/24 maxlen: 24 203.27.199.0/24 maxlen: 24 203.31.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Jun 13 07:31:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=684bd3ef-495d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:ce:ce:f6:cc:a4:36:37:b3:dc:bd:64:ad: 2e:44:d6:ae:40:69:00:85:35:44:e0:95:04:52:c0: 25:ee:6f:9a:4f:54:8b:48:40:3a:46:ef:d3:77:df: 58:9b:6d:b3:93:80:8b:87:12:f7:6c:62:41:1a:80: 92:91:a5:fb:27:5d:75:69:32:24:cd:80:55:d9:6a: d8:be:0c:3f:8a:a8:b5:d5:b5:67:34:92:d6:89:9d: 54:91:73:1f:57:ee:b6:d5:05:5a:88:30:3c:2e:e1: 56:75:c1:8f:c7:30:ba:51:d2:9b:e5:b6:fc:3f:d0: 89:ce:04:35:dd:0c:16:43:0b:e9:c6:f3:3e:5a:42: f7:02:5f:07:9f:6c:00:1f:80:59:65:8d:1d:46:a3: 23:89:d8:fb:74:62:37:33:18:5c:41:22:eb:b5:32: bb:45:73:b0:ca:b4:bc:9f:f0:ea:3b:71:e3:9b:ed: 04:5f:5f:aa:25:73:65:01:b3:67:cb:f5:13:4c:7b: 18:88:77:57:20:f2:d5:4e:32:76:c9:ef:19:2d:1d: e4:8b:b2:7c:bc:59:65:74:2a:ff:d7:21:a0:ff:e9: e1:3e:11:bb:b6:97:e7:c3:bc:57:2c:05:50:08:2a: 25:0e:99:e2:72:a0:ca:5c:be:00:ab:83:bc:4d:79: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AE:98:59:AA:29:BA:28:6A:80:56:0C:92:24:79:92:AE:04:AB:EB X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/7D948498482811F08D5B032CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.67.0/24 119.15.64.0/24 119.15.66.0/24 119.15.68.0/22 203.3.70.0/24 203.5.59.0/24 203.26.51.0/24 203.26.177.0/24 203.27.199.0/24 203.31.75.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:06:2f:e0:ca:16:ce:fa:30:d9:46:44:88:ee:4c:f0:80:dc: 6f:14:fd:c0:b7:8e:24:1e:99:23:14:d6:4f:a1:f1:59:72:62: 53:ab:33:3e:40:44:80:b7:d1:cf:05:87:26:f7:d4:9c:cb:b6: 32:dd:6d:96:c3:94:c9:09:41:b6:6b:b7:76:d9:e9:a1:a4:5e: 37:f0:57:6f:fd:b9:5b:af:9b:f2:68:75:a4:d7:33:4b:5c:cb: 0c:75:dc:00:a6:85:ba:57:27:1e:2f:99:aa:ad:b0:7b:74:f9: 32:6f:d0:00:3e:f9:26:1a:96:c6:98:48:4f:35:5f:e2:87:30: 4a:0e:12:a1:5b:67:5f:db:3b:03:0c:c3:65:70:3f:63:37:69: 40:3c:82:d3:53:28:8d:8e:08:a6:e4:0c:3d:cf:f5:6b:e0:bf: 2a:03:f3:cc:e9:40:cc:25:31:2b:77:bb:b8:d8:0f:88:05:bc: 8e:41:e3:91:8c:12:b2:94:ad:c2:95:09:61:1d:3a:d6:dc:60: b2:71:0f:dd:60:ab:36:46:05:d3:de:5f:7f:42:21:24:12:e0: 2e:3e:54:fb:7d:e7:8d:2d:c3:6f:16:9a:45:e4:ef:df:fb:77: bc:ea:f3:19:48:62:f2:e8:5c:ff:fe:63:50:c4:ef:23:d7:bd: 4c:fe:c1:c9 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUwNjEzMDczMTU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiZDNlZi00OTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtTOzvbMpDY3s9y9ZK0uRNauQGkAhTVE4JUEUsAl7m+aT1SLSEA6Ru/Td99Y m22zk4CLhxL3bGJBGoCSkaX7J111aTIkzYBV2WrYvgw/iqi11bVnNJLWiZ1UkXMf V+621QVaiDA8LuFWdcGPxzC6UdKb5bb8P9CJzgQ13QwWQwvpxvM+WkL3Al8Hn2wA H4BZZY0dRqMjidj7dGI3MxhcQSLrtTK7RXOwyrS8n/DqO3Hjm+0EX1+qJXNlAbNn y/UTTHsYiHdXIPLVTjJ2ye8ZLR3ki7J8vFlldCr/1yGg/+nhPhG7tpfnw7xXLAVQ CColDpnicqDKXL4Aq4O8TXlDaQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFBGumFmq KbooaoBWDJIkeZKuBKvrMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk5NjkvQ0YzOTVDMzgxQzZBMTFFRUJGNjJBQzBEQzRGOUFFMDIvN0Q5NDg0OTg0 ODI4MTFGMDhENUIwMzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBABn1EMDBAB3D0ADBAB3D0IDBAJ3D0QDBADLA0YDBADLBTsD BADLGjMDBADLGrEDBADLG8cDBADLH0swDQYJKoZIhvcNAQELBQADggEBAE8GL+DK Fs76MNlGRIjuTPCA3G8U/cC3jiQemSMU1k+h8VlyYlOrMz5ARIC30c8Fhyb31JzL tjLdbZbDlMkJQbZrt3bZ6aGkXjfwV2/9uVuvm/JodaTXM0tcywx13ACmhbpXJx4v maqtsHt0+TJv0AA++SYalsaYSE81X+KHMEoOEqFbZ1/bOwMMw2VwP2M3aUA8gtNT KI2OCKbkDD3P9WvgvyoD88zpQMwlMSt3u7jYD4gFvI5B45GMErKUrcKVCWEdOtbc YLJxD91gqzZGBdPeX39CISQS4C4+VPt9540tw28WmkXk79/7d7zq8xlIYvLoXP/+ Y1DE7yPXvUz+wck= -----END CERTIFICATE-----Generated at Wed Jun 18 11:40:47 2025 by rpki-client