$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa File: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (raw, json) Hash identifier: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc= Subject key identifier: B2:04:FE:18:B8:73:C0:02:19:D5:42:65:70:2C:EB:60:13:7F:F5:AF Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 23A5 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa Signing time: Wed 22 Jan 2025 15:52:55 +0000 ROA not before: Wed 22 Jan 2025 15:52:55 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133092 IP address blocks: 103.65.200.0/23 maxlen: 23 103.65.200.0/24 maxlen: 24 103.65.201.0/24 maxlen: 24 103.233.182.0/24 maxlen: 24 103.255.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9125 (0x23a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Jan 22 15:52:55 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67911456-11cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:59:dd:16:93:78:83:2e:01:d2:c9:74:8a: 9f:d4:fb:27:ac:60:04:8b:4d:2d:17:b4:42:d2:21: 70:82:1e:3e:d7:58:fb:da:ff:f2:a2:ef:69:43:5a: 45:b4:f3:53:fc:a2:98:f7:97:05:a2:8e:bb:b4:c9: f0:42:6e:dd:c6:35:af:0a:ca:1a:80:fa:92:a5:6f: 2b:ad:24:54:32:35:cf:18:a8:ae:89:2e:fa:ae:b4: 07:4e:2c:a6:65:5c:e0:07:db:9f:0d:6e:a3:11:54: 17:22:46:12:fe:8d:3e:4c:db:c3:d4:f2:1b:38:4c: 8d:fd:ce:68:55:4a:59:6c:5f:87:83:ef:33:cb:6f: 02:97:05:61:10:de:69:c2:ae:42:14:77:12:64:cd: 31:43:a5:9a:e2:65:2f:35:b0:f7:97:4e:3c:01:c6: 12:a3:5c:97:ca:7b:60:44:5e:50:8d:05:18:8a:17: ab:6b:ad:9d:a4:99:9d:71:36:98:bc:05:5b:23:98: bf:29:d7:6a:cc:a9:cf:6b:4a:f1:c2:90:6b:19:ea: 7e:43:63:8a:da:f8:21:40:df:7e:5a:95:0d:45:03: 08:d9:99:a2:2c:8e:c6:ac:a8:09:e0:49:3a:08:dc: 09:73:fa:aa:4a:14:e8:1d:b7:c5:64:43:71:66:4e: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:04:FE:18:B8:73:C0:02:19:D5:42:65:70:2C:EB:60:13:7F:F5:AF X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/F26DAE0AB10D11E5894F4D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.200.0/23 103.233.182.0/24 103.255.126.0/24 Signature Algorithm: sha256WithRSAEncryption 11:20:06:ae:4e:66:65:42:51:55:51:d2:20:a4:ac:d7:d9:c3: e4:d8:35:19:9f:7b:2f:17:2c:0f:e4:fd:b0:1a:e5:1c:9f:ab: c5:d8:8c:2b:a5:08:1f:fc:bf:79:58:19:20:7e:be:a6:a9:d6: 6f:8e:0b:3f:e0:a9:ae:07:e2:12:73:cb:f8:5c:55:c7:c6:12: c7:81:f0:0a:2c:31:c9:36:1f:b9:2c:5c:44:89:4c:c8:96:ea: 31:58:7d:ed:ba:71:c3:21:56:ee:ba:d1:d7:17:ca:26:e6:2b: 6c:20:b8:64:d8:bb:95:61:ea:f8:8f:e0:e2:ca:91:10:ef:36: 49:18:bb:a4:85:3a:de:95:f3:8e:e3:ac:19:a4:ab:04:85:d1: ad:2c:65:ea:5c:77:af:d0:f4:91:b7:e8:91:fd:fc:0d:09:c0: 94:84:8d:df:67:20:c3:3d:11:c7:86:95:b0:81:f4:5d:eb:01: 71:9b:e6:d1:59:1f:22:85:62:bb:17:98:4b:c6:70:76:d1:b5: 43:c1:07:2b:c9:1e:21:3d:22:da:64:24:4c:f7:7a:53:02:10: 11:62:cd:8f:47:ac:93:c5:21:b0:9f:db:e2:c2:e7:b3:f4:53: 4e:85:92:ab:c4:37:3c:0d:5c:1e:fa:e0:8b:b4:9b:60:ee:b0: b1:fc:ce:e8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICI6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjUwMTIyMTU1MjU1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxMTQ1Ni0xMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnc1Z3RaTeIMuAdLJdIqf1PsnrGAEi00tF7RC0iFwgh4+11j72v/you9pQ1pF tPNT/KKY95cFoo67tMnwQm7dxjWvCsoagPqSpW8rrSRUMjXPGKiuiS76rrQHTiym ZVzgB9ufDW6jEVQXIkYS/o0+TNvD1PIbOEyN/c5oVUpZbF+Hg+8zy28ClwVhEN5p wq5CFHcSZM0xQ6Wa4mUvNbD3l048AcYSo1yXyntgRF5QjQUYihera62dpJmdcTaY vAVbI5i/KddqzKnPa0rxwpBrGep+Q2OK2vghQN9+WpUNRQMI2ZmiLI7GrKgJ4Ek6 CNwJc/qqShToHbfFZENxZk7cpQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLIE/hi4 c8ACGdVCZXAs62ATf/WvMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDcyNTkvQTg4QzFBOEE2NzVBMTFFNTk5RjMzMDFGQzRGOUFFMDIvRjI2REFFMEFC MTBEMTFFNTg5NEY0RDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnQcgDBABn6bYDBABn/34wDQYJKoZIhvcNAQELBQADggEB ABEgBq5OZmVCUVVR0iCkrNfZw+TYNRmfey8XLA/k/bAa5Ryfq8XYjCulCB/8v3lY GSB+vqap1m+OCz/gqa4H4hJzy/hcVcfGEseB8AosMck2H7ksXESJTMiW6jFYfe26 ccMhVu660dcXyibmK2wguGTYu5Vh6viP4OLKkRDvNkkYu6SFOt6V847jrBmkqwSF 0a0sZepcd6/Q9JG36JH9/A0JwJSEjd9nIMM9EceGlbCB9F3rAXGb5tFZHyKFYrsX mEvGcHbRtUPBByvJHiE9ItpkJEz3elMCEBFizY9HrJPFIbCf2+LC57P0U06FkqvE NzwNXB764Iu0m2DusLH8zug= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:17 2025 by rpki-client