$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa File: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (raw, json) Hash identifier: CflewuJJQLOVI4jXL6xo2HYtqxMI6JgFaMC4x6qkLdc= Subject key identifier: 95:38:CA:D2:6A:9E:B8:12:76:01:D5:AA:51:40:94:AC:0B:34:73:F6 Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07A0 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa Signing time: Mon 30 Jun 2025 21:57:48 +0000 ROA not before: Mon 30 Jun 2025 21:57:48 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 132825 IP address blocks: 43.249.252.0/24 maxlen: 24 43.249.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jun 30 21:57:48 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=6863085c-297f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:16:74:f0:c4:ae:2f:80:38:79:2c:04:6c: b6:d2:e1:6f:c9:9c:74:46:7c:82:b5:28:08:1b:fc: a2:bc:12:39:78:c3:0c:76:d3:34:f2:03:e0:c1:cf: e8:6f:95:cc:f5:70:c6:2a:2b:29:e6:18:47:76:93: 58:bc:45:90:6d:49:7c:37:89:c4:0f:76:08:89:9a: ea:17:25:91:75:ff:bb:d7:72:6f:78:a7:d7:eb:b4: 4d:39:2f:ea:21:c0:fa:ec:fb:cf:b2:b8:cb:c0:fb: f2:48:6d:a7:09:c2:22:7e:3b:ba:7f:1b:dc:fd:30: 85:07:da:bd:14:88:a2:ee:dc:42:b2:d5:d8:fa:c9: 3f:7d:0b:1f:75:72:a7:47:9b:4f:f2:f5:b0:01:d9: a8:85:33:26:ed:ed:0f:7d:09:ea:e2:cf:b9:f1:40: b3:71:66:36:78:82:03:94:31:f0:0e:02:08:b0:41: 36:17:89:4a:29:99:d3:1e:f9:27:9f:c8:33:97:5e: 54:a2:fc:42:e9:aa:b4:0b:77:e3:71:e9:31:f7:80: 31:ae:f3:5e:3c:cd:4a:8c:62:55:3b:85:e6:06:e1: 5b:eb:ac:35:cb:95:0c:25:b5:9b:5b:04:ca:78:7a: ac:0f:7e:ee:53:56:65:2f:f2:27:f9:54:86:fd:a2: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:CA:D2:6A:9E:B8:12:76:01:D5:AA:51:40:94:AC:0B:34:73:F6 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.252.0/23 Signature Algorithm: sha256WithRSAEncryption b7:b1:0c:ee:9c:f2:e8:50:64:d0:8c:38:93:68:4f:f4:b3:94: 39:e6:81:e1:4b:3d:18:d1:e6:ba:c6:4e:26:e7:19:58:57:a3: f9:b3:65:fb:61:b1:6c:d5:8f:bc:22:92:4a:06:5b:72:46:eb: e7:2c:55:07:68:64:2b:cc:e8:16:7f:4c:ac:fe:92:ba:ee:0b: 1b:2e:37:34:f9:16:ed:2a:92:60:83:66:2b:14:88:71:e9:8c: ed:32:26:d8:53:ce:80:35:b3:29:61:e8:bc:cd:68:7d:a4:e3: df:ad:1d:4e:21:d6:cb:c0:da:8c:97:ab:4a:fc:3c:5e:9d:24: bb:27:7e:cd:97:31:b4:4b:e4:c3:8d:9f:d0:45:44:5e:97:7e: 6e:c4:6f:62:21:e6:5f:f3:f2:b4:e9:79:22:d8:d0:37:f5:fd: c8:2f:96:c8:20:dd:db:0e:12:d0:2d:17:3e:50:34:af:91:ba: 81:e1:1c:85:81:60:c5:d2:af:af:c6:7c:6a:02:14:e6:e9:f6: 41:8f:8c:92:58:2e:2c:b3:25:d1:60:71:72:70:9f:c4:d3:67: 2e:b9:eb:8f:8c:c3:2a:1a:4c:2d:4d:f6:fe:90:e8:02:fa:ef: 3d:ac:68:9e:9a:13:b8:50:00:dd:c5:7b:bc:47:ac:ef:2e:9d: cd:f4:38:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNjMwMjE1NzQ4WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMDg1Yy0yOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GYWdPDEri+AOHksBGy20uFvyZx0RnyCtSgIG/yivBI5eMMMdtM08gPgwc/o b5XM9XDGKisp5hhHdpNYvEWQbUl8N4nED3YIiZrqFyWRdf+713JveKfX67RNOS/q IcD67PvPsrjLwPvySG2nCcIifju6fxvc/TCFB9q9FIii7txCstXY+sk/fQsfdXKn R5tP8vWwAdmohTMm7e0PfQnq4s+58UCzcWY2eIIDlDHwDgIIsEE2F4lKKZnTHvkn n8gzl15UovxC6aq0C3fjcekx94AxrvNePM1KjGJVO4XmBuFb66w1y5UMJbWbWwTK eHqsD37uU1ZlL/In+VSG/aJy7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJU4ytJq nrgSdgHVqlFAlKwLNHP2MB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvMDIyNkQ1N0Ew Q0NCMTFFRjhBRTYyNzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+fwwDQYJKoZIhvcNAQELBQADggEBALexDO6c8uhQZNCM OJNoT/SzlDnmgeFLPRjR5rrGTibnGVhXo/mzZfthsWzVj7wikkoGW3JG6+csVQdo ZCvM6BZ/TKz+krruCxsuNzT5Fu0qkmCDZisUiHHpjO0yJthTzoA1sylh6LzNaH2k 49+tHU4h1svA2oyXq0r8PF6dJLsnfs2XMbRL5MONn9BFRF6Xfm7Eb2Ih5l/z8rTp eSLY0Df1/cgvlsgg3dsOEtAtFz5QNK+RuoHhHIWBYMXSr6/GfGoCFObp9kGPjJJY LiyzJdFgcXJwn8TTZy6564+MwyoaTC1N9v6Q6AL67z2saJ6aE7hQAN3Fe7xHrO8u nc30OD8= -----END CERTIFICATE-----Generated at Thu Jul 3 00:24:17 2025 by rpki-client