$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa File: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (raw, json) Hash identifier: 5dFzBEhRX2qpf3v3P5WZEcaB5fBRXl7gbbBm5x4xFTk= Subject key identifier: 93:C7:42:71:44:6D:CA:8D:B5:3B:30:DE:83:1D:5D:3B:01:DF:EC:26 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0127 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:28 +0000 ROA not before: Sat 21 Jun 2025 04:33:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18013 IP address blocks: 14.192.4.0/22 maxlen: 23 103.215.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Jun 21 04:33:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563618-3fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:80:5e:20:26:31:d5:c5:ba:6f:1c:e2:1c: 1c:9a:a5:16:96:5c:86:d1:95:90:24:9e:fa:42:ae: 78:f6:df:b9:4f:fc:a0:1e:23:8e:7a:7b:cb:5b:cb: 0a:da:13:73:43:3b:b6:fc:86:4b:35:5a:1d:61:63: f0:1a:75:b7:82:1c:7a:c5:c4:aa:5b:d3:87:93:78: b9:35:ea:f9:79:61:c5:23:33:6b:07:e2:24:f6:95: d1:75:55:4d:41:a0:34:14:49:99:5f:79:cb:11:23: 33:92:06:cb:0f:9c:2c:ad:35:a4:36:80:e7:ac:eb: 4e:c0:96:b7:a1:34:e4:c8:ea:09:93:6c:79:18:c2: 84:fc:ce:c4:58:57:af:c2:5e:4e:58:fe:24:1e:a8: a3:fd:f7:cc:7f:80:b0:99:2c:e3:4d:e0:b8:84:bd: e3:67:43:65:a2:cc:7d:fb:bb:cf:3d:a8:f7:ac:8f: 2f:ce:51:62:99:99:e2:fc:f8:d4:e1:0d:bb:33:73: dd:ec:31:2f:37:8b:fe:6d:8e:71:4c:44:7d:67:64: 35:a1:22:06:c9:8a:0d:80:4b:1a:1a:a8:e0:cd:fb: 45:bf:8c:2d:a0:a1:4f:51:52:59:c7:9f:22:3e:0b: b2:1d:4c:60:46:95:92:35:77:38:39:66:53:5e:f9: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:42:71:44:6D:CA:8D:B5:3B:30:DE:83:1D:5D:3B:01:DF:EC:26 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1328B7DCBA6711EE9A63996FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.4.0/22 103.215.78.0/24 Signature Algorithm: sha256WithRSAEncryption 50:82:da:43:b7:6a:ec:6f:61:f2:1c:f8:16:cf:15:f4:0b:71: 2e:a9:a5:c9:35:35:c4:9e:44:d2:15:a4:3a:1f:15:3c:8e:2a: 37:e8:61:91:c7:e0:42:df:21:55:ee:b3:2b:1e:5a:38:e6:24: 2a:24:06:12:43:20:4e:2b:7a:5e:2c:de:6b:4a:f8:a2:f7:15: 40:47:fa:a8:77:36:47:7a:c3:33:cd:f7:2d:d7:64:f6:9a:22: 17:55:f5:7d:65:a9:65:4f:2f:21:ac:db:8d:86:a0:b4:8d:7a: ea:60:b3:f0:db:32:97:8a:bc:5d:eb:78:90:d6:46:ef:b8:e1: 57:7d:75:85:89:37:2d:96:99:97:bc:88:52:db:c9:c2:b2:56: 87:a3:b3:b5:e2:9b:e9:8e:6a:ad:eb:49:e1:7a:da:50:2f:94: 71:da:73:47:9f:3c:86:e9:bd:92:d4:39:91:08:06:18:21:0e: cb:e6:a2:f9:08:60:2d:b9:69:bd:52:f2:12:00:08:c6:ca:41: 7b:02:a0:bd:33:2b:1c:8c:53:1a:c9:f4:21:42:5d:39:0a:15: 1a:c4:39:4b:9c:48:1d:f6:89:37:3b:cb:1e:95:0f:14:d0:40: 5a:04:6f:84:fd:ac:68:5c:30:95:91:18:cf:91:d1:9f:e8:de: d1:a9:e4:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNjIxMDQzMzI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxOC0zZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ICAXiAmMdXFum8c4hwcmqUWllyG0ZWQJJ76Qq549t+5T/ygHiOOenvLW8sK 2hNzQzu2/IZLNVodYWPwGnW3ghx6xcSqW9OHk3i5Ner5eWHFIzNrB+Ik9pXRdVVN QaA0FEmZX3nLESMzkgbLD5wsrTWkNoDnrOtOwJa3oTTkyOoJk2x5GMKE/M7EWFev wl5OWP4kHqij/ffMf4CwmSzjTeC4hL3jZ0Nlosx9+7vPPaj3rI8vzlFimZni/PjU 4Q27M3Pd7DEvN4v+bY5xTER9Z2Q1oSIGyYoNgEsaGqjgzftFv4wtoKFPUVJZx58i PguyHUxgRpWSNXc4OWZTXvnNpwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJPHQnFE bcqNtTsw3oMdXTsB3+wmMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvMTMyOEI3RENC QTY3MTFFRTlBNjM5OTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIOwAQDBABn104wDQYJKoZIhvcNAQELBQADggEBAFCC2kO3 auxvYfIc+BbPFfQLcS6ppck1NcSeRNIVpDofFTyOKjfoYZHH4ELfIVXusyseWjjm JCokBhJDIE4rel4s3mtK+KL3FUBH+qh3Nkd6wzPN9y3XZPaaIhdV9X1lqWVPLyGs 242GoLSNeupgs/DbMpeKvF3reJDWRu+44Vd9dYWJNy2WmZe8iFLbycKyVoejs7Xi m+mOaq3rSeF62lAvlHHac0efPIbpvZLUOZEIBhghDsvmovkIYC25ab1S8hIACMbK QXsCoL0zKxyMUxrJ9CFCXTkKFRrEOUucSB32iTc7yx6VDxTQQFoEb4T9rGhcMJWR GM+R0Z/o3tGp5Ms= -----END CERTIFICATE-----Generated at Wed Jul 2 20:03:07 2025 by rpki-client