$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/826F7220690211F09A1AA882C4F9AE02.roa File: 826F7220690211F09A1AA882C4F9AE02.roa (raw, json) Hash identifier: uPcB+snQeAMOy3uNn8k96BI4301OFchjsfbi0h1r2Ak= Subject key identifier: E3:52:A8:F3:15:6A:7F:79:4A:A8:1D:1A:FE:9B:68:88:43:9E:1B:40 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0DEB Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/826F7220690211F09A1AA882C4F9AE02.roa Signing time: Fri 01 Aug 2025 10:33:27 +0000 ROA not before: Fri 01 Aug 2025 10:33:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45814 IP address blocks: 14.192.131.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.149.0/24 maxlen: 24 14.192.150.0/24 maxlen: 24 14.192.151.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.133.0/24 maxlen: 24 111.92.128.0/19 maxlen: 19 2403:7980::/32 maxlen: 32 2403:7980::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3563 (0xdeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Aug 1 10:33:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688c97f6-51a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:8c:0a:d1:77:3e:6f:b2:75:59:1d:47:67: 0a:58:65:46:61:fc:8d:ae:41:1f:df:ae:a5:81:6c: 93:ed:ff:5f:b4:99:f8:23:8b:e2:39:f2:a6:1b:0f: ee:9f:a4:cf:89:3b:9f:6a:8c:04:cb:50:25:a4:9f: 97:7a:ae:ef:73:37:6d:9c:54:80:76:6a:ce:23:e3: b9:4a:e6:ae:d4:27:76:04:a1:c7:6f:52:e2:db:14: c3:58:29:3d:b1:fa:22:5a:7a:18:ed:55:4c:9a:d7: fb:91:ee:b1:3f:e4:4e:f0:72:fe:bd:c2:75:6f:f8: ad:7b:6e:87:32:43:6f:0a:79:6f:6a:ef:75:21:96: 63:28:69:ef:bd:c9:63:56:6f:07:bf:3f:ab:ad:25: 45:b9:2e:cb:40:0a:43:fb:45:8c:46:f3:b8:72:63: 8e:c5:b8:e2:c2:c8:45:c3:b6:eb:74:0c:e5:97:a9: c3:ec:34:ed:06:45:8f:34:13:e6:46:25:0d:b1:c4: 53:20:b4:d2:58:12:db:f1:33:20:c5:19:78:1d:f8: 6f:16:44:df:0e:27:fb:a9:e8:ee:bc:02:11:15:e2: 49:c6:f8:f7:de:19:f4:36:30:38:5b:4b:7f:34:5f: 88:e5:cd:b5:ba:7b:2b:3d:98:79:d7:69:a3:80:3b: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:A8:F3:15:6A:7F:79:4A:A8:1D:1A:FE:9B:68:88:43:9E:1B:40 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/826F7220690211F09A1AA882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.131.0-14.192.132.255 14.192.148.0/22 14.192.154.0/23 43.247.122.0/23 103.20.133.0/24 111.92.128.0/19 IPv6: 2403:7980::/32 Signature Algorithm: sha256WithRSAEncryption 73:c3:78:69:7c:a5:e5:67:63:96:47:2b:6b:a5:52:d6:9d:7b: 8f:44:36:8d:b8:d9:63:79:ba:cb:c5:1a:7b:00:da:d6:84:f9: 87:99:88:a6:95:91:f7:55:13:c0:2d:88:5a:b1:c3:13:9a:60: 77:04:30:57:0e:b6:2b:42:8b:d3:46:92:a3:cf:3c:39:39:66: 9f:13:cd:72:34:1d:a3:a6:b2:ec:27:8a:31:3a:96:43:44:67: 9a:16:52:eb:0a:d2:39:cf:f8:01:f5:51:83:25:b5:6f:a9:ac: 8c:0b:59:8f:ec:ce:69:65:fa:18:db:2c:d5:ce:f6:6f:01:18: bb:0d:b3:d5:50:5a:5c:b0:7d:37:a0:41:53:a1:c9:44:d1:1f: c3:22:36:29:6e:95:a1:6b:5b:ca:8a:aa:1b:e5:54:21:0a:b7: 74:f0:25:5e:fc:2a:9a:c8:6a:05:f4:08:e5:1f:8a:94:70:74: f2:77:2b:ce:28:e2:3b:46:5f:22:9e:6f:2f:9c:6a:e0:04:26: 25:d8:43:c2:cc:7f:70:2f:2a:ef:17:fe:fd:f1:7c:7f:b5:5a: 4d:a3:d1:85:2c:87:0a:8f:54:d0:71:6e:ef:24:dc:30:cb:a9: 4a:c5:e2:63:71:b0:37:90:c5:a0:6c:a7:31:a7:31:9b:31:0a: be:b5:f0:a4 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICDeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwODAxMTAzMzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjOTdmNi01MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JaMCtF3Pm+ydVkdR2cKWGVGYfyNrkEf366lgWyT7f9ftJn4I4viOfKmGw/u n6TPiTufaowEy1AlpJ+Xeq7vczdtnFSAdmrOI+O5Suau1Cd2BKHHb1Li2xTDWCk9 sfoiWnoY7VVMmtf7ke6xP+RO8HL+vcJ1b/ite26HMkNvCnlvau91IZZjKGnvvclj Vm8Hvz+rrSVFuS7LQApD+0WMRvO4cmOOxbjiwshFw7brdAzll6nD7DTtBkWPNBPm RiUNscRTILTSWBLb8TMgxRl4HfhvFkTfDif7qejuvAIRFeJJxvj33hn0NjA4W0t/ NF+I5c21unsrPZh512mjgDtgfQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFONSqPMV an95SqgdGv6baIhDnhtAMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvODI2RjcyMjA2 OTAyMTFGMDlBMUFBODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDIEAgABMCwwDAMEAA7AgwMEAA7AhAMEAg7AlAMEAQ7AmgMEASv3egMEAGcU hQMEBW9cgDANBAIAAjAHAwUAJAN5gDANBgkqhkiG9w0BAQsFAAOCAQEAc8N4aXyl 5Wdjlkcra6VS1p17j0Q2jbjZY3m6y8UaewDa1oT5h5mIppWR91UTwC2IWrHDE5pg dwQwVw62K0KL00aSo888OTlmnxPNcjQdo6ay7CeKMTqWQ0RnmhZS6wrSOc/4AfVR gyW1b6msjAtZj+zOaWX6GNss1c72bwEYuw2z1VBaXLB9N6BBU6HJRNEfwyI2KW6V oWtbyoqqG+VUIQq3dPAlXvwqmshqBfQI5R+KlHB08ncrzijiO0ZfIp5vL5xq4AQm JdhDwsx/cC8q7xf+/fF8f7VaTaPRhSyHCo9U0HFu7yTcMMupSsXiY3GwN5DFoGyn MacxmzEKvrXwpA== -----END CERTIFICATE-----Generated at Wed Aug 13 00:29:42 2025 by rpki-client