$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/FE836A62B19D11EC86ADF246C4F9AE02.roa File: FE836A62B19D11EC86ADF246C4F9AE02.roa (raw, json) Hash identifier: GwwP8IDRreAQ5Nv9uamFq9DGquD+BWtdJPdVB793Iq8= Subject key identifier: AF:0D:77:91:61:41:CB:B0:59:5A:F4:F4:2A:A4:6F:73:A3:A9:B9:7B Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0AEE Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/FE836A62B19D11EC86ADF246C4F9AE02.roa Signing time: Mon 31 Mar 2025 19:49:06 +0000 ROA not before: Mon 31 Mar 2025 19:49:06 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 140071 IP address blocks: 103.148.26.0/23 maxlen: 23 103.148.26.0/24 maxlen: 24 103.148.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Mar 31 19:49:06 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67eaf1b2-739c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:31:bd:40:db:09:99:67:70:28:a9:93:cd: bf:67:a7:5f:52:34:c7:25:c1:ae:b9:b4:19:86:d3: 01:ef:90:f2:14:71:36:c1:84:a9:d5:90:de:e0:2e: d2:98:21:5b:99:5b:6f:a2:00:ab:14:27:d8:e3:16: dc:4f:2e:53:1a:30:12:f6:62:4c:31:f3:bd:76:43: b9:20:29:77:5f:95:75:c4:07:76:28:c9:75:64:f7: 19:30:c5:48:ad:a5:c0:4a:29:44:88:4b:3c:d3:d7: 37:ab:01:8c:8b:8b:7a:9e:ee:52:a0:34:73:a0:f1: 8e:10:4a:67:0d:a6:34:11:b4:65:0d:8e:f5:14:56: 92:8c:e3:06:87:23:ee:37:78:3b:d0:7c:47:da:f9: 68:65:f3:f1:ee:f5:5d:47:11:94:02:ed:35:ec:2c: 8e:cc:6b:81:8b:c6:e9:63:8b:73:45:17:a9:61:4b: 4b:51:d7:21:be:71:b7:74:1e:50:68:4f:98:ca:df: 06:7e:92:c6:db:42:78:4c:45:b8:d5:5e:84:73:4c: ed:93:a2:b4:a2:61:c3:f8:41:7d:b1:2a:80:20:41: 54:24:63:44:7c:5c:1c:b0:1e:df:3d:44:d2:dc:5a: 44:78:53:8f:0b:aa:6c:01:6e:8e:5d:ca:ec:0a:6e: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0D:77:91:61:41:CB:B0:59:5A:F4:F4:2A:A4:6F:73:A3:A9:B9:7B X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/FE836A62B19D11EC86ADF246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.26.0/23 Signature Algorithm: sha256WithRSAEncryption 72:10:4a:6c:fb:ac:e2:1c:ef:97:25:b4:49:16:6f:98:ec:43: fa:6c:90:7b:42:92:74:76:6a:ad:7d:eb:14:93:af:50:0a:ea: 46:b1:d8:d8:ca:04:8f:ce:68:10:93:cd:45:17:49:fe:bc:6e: 99:e3:09:c5:e0:d2:78:5a:aa:d4:ea:f0:5d:e8:0b:99:1f:44: 01:79:2b:1f:76:dc:6d:31:3a:63:2f:a0:24:e4:3b:a2:10:e0: 24:68:12:c5:a6:79:19:e1:15:3d:5b:75:02:40:95:c9:30:00: 47:7d:c6:09:99:ee:dd:b0:5d:b9:b2:ea:c8:2d:5b:78:a9:47: 60:27:a3:ab:1d:75:df:5a:7a:7c:84:31:5a:ab:47:30:af:52: b2:19:d9:ba:f2:3c:14:e0:0a:bb:ce:98:12:a9:ce:9b:8b:f1: 5e:bf:ab:e4:fa:d7:5c:5c:e3:fc:f5:d7:f1:cf:68:52:d6:29: 58:22:34:4e:ed:fe:eb:1a:09:6d:c7:10:54:79:e9:d8:7a:45: 2a:86:14:f7:f7:97:80:10:4d:34:a3:9d:f9:88:61:45:6b:90: 77:41:a9:dd:34:15:dd:ee:22:89:50:ae:d4:1c:ad:64:4e:40: b0:11:57:1e:c2:9d:5b:05:2e:97:71:52:c1:e5:81:4a:0f:c5: 98:f2:50:a2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwMzMxMTk0OTA2WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZjFiMi03MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXUxvUDbCZlncCipk82/Z6dfUjTHJcGuubQZhtMB75DyFHE2wYSp1ZDe4C7S mCFbmVtvogCrFCfY4xbcTy5TGjAS9mJMMfO9dkO5ICl3X5V1xAd2KMl1ZPcZMMVI raXASilEiEs809c3qwGMi4t6nu5SoDRzoPGOEEpnDaY0EbRlDY71FFaSjOMGhyPu N3g70HxH2vloZfPx7vVdRxGUAu017CyOzGuBi8bpY4tzRRepYUtLUdchvnG3dB5Q aE+Yyt8GfpLG20J4TEW41V6Ec0ztk6K0omHD+EF9sSqAIEFUJGNEfFwcsB7fPUTS 3FpEeFOPC6psAW6OXcrsCm7KmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8Nd5Fh QcuwWVr09Cqkb3Ojqbl7MB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjFDRUYvOUNFNTEyNTg0NTkxMTFFQUJFNkI5MzFCQzRGOUFFMDIvRkU4MzZBNjJC MTlEMTFFQzg2QURGMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlBowDQYJKoZIhvcNAQELBQADggEBAHIQSmz7rOIc75cl tEkWb5jsQ/pskHtCknR2aq196xSTr1AK6kax2NjKBI/OaBCTzUUXSf68bpnjCcXg 0nhaqtTq8F3oC5kfRAF5Kx923G0xOmMvoCTkO6IQ4CRoEsWmeRnhFT1bdQJAlckw AEd9xgmZ7t2wXbmy6sgtW3ipR2Ano6sddd9aenyEMVqrRzCvUrIZ2bryPBTgCrvO mBKpzpuL8V6/q+T611xc4/z11/HPaFLWKVgiNE7t/usaCW3HEFR56dh6RSqGFPf3 l4AQTTSjnfmIYUVrkHdBqd00Fd3uIolQrtQcrWROQLARVx7CnVsFLpdxUsHlgUoP xZjyUKI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:18 2025 by rpki-client