$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa File: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (raw, json) Hash identifier: xLYaayOa6ljsfyz0Fl5EAR812aBmAL1bIciZu3m45qA= Subject key identifier: 2A:DD:ED:9B:CE:D8:C4:C1:4C:FD:56:0D:9B:C1:39:3C:A9:37:A2:01 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0129 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:29 +0000 ROA not before: Sat 21 Jun 2025 04:33:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55020 IP address blocks: 14.192.4.0/22 maxlen: 23 43.224.224.0/22 maxlen: 23 103.215.77.0/24 maxlen: 24 103.215.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Jun 21 04:33:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563619-a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:09:a8:f4:a9:8b:0d:bb:b0:1d:b5:64:b7: 58:0b:72:7d:7a:5f:b3:8b:6a:f6:1a:39:bd:c5:e1: e2:55:05:50:d8:28:ba:e9:d4:ba:93:a1:cc:45:ce: 1b:3b:47:0d:0b:dd:cf:ca:6f:71:09:9f:b8:2f:af: 48:f1:bb:8f:d7:60:1b:16:25:46:24:18:a6:5f:48: f9:26:c2:14:57:a2:c0:ba:79:09:c4:2c:46:07:85: d4:72:04:6f:21:7b:90:61:7d:7d:43:82:59:69:ad: d8:24:02:2c:f6:86:2e:37:97:8f:17:63:e7:1b:0a: df:04:34:bb:d8:fb:5e:1b:f1:d3:f2:ac:8b:69:ff: 93:93:ac:41:9b:5e:ef:6d:ab:28:20:b6:15:ca:74: 44:01:16:8d:06:08:b2:f8:c1:ac:74:a4:4d:1e:c6: db:a4:04:96:37:e5:55:0b:4f:ac:6b:32:f4:be:77: ec:a7:9f:70:12:fb:bc:92:f4:a1:74:3a:85:2f:08: c9:be:c7:eb:7b:b9:62:65:00:1b:b4:42:51:56:37: 94:4f:54:67:8e:80:1d:2d:ad:df:9e:d8:c6:1d:0c: 06:5c:04:bd:37:ae:5e:b7:ec:09:67:55:eb:49:27: e9:5b:e1:84:6a:e6:58:6c:c3:63:34:e9:f5:eb:31: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:ED:9B:CE:D8:C4:C1:4C:FD:56:0D:9B:C1:39:3C:A9:37:A2:01 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.4.0/22 43.224.224.0/22 103.215.77.0-103.215.78.255 Signature Algorithm: sha256WithRSAEncryption 30:69:aa:d3:a1:30:9d:44:e4:21:71:7d:6e:07:25:0c:85:15: 2a:a6:c2:4b:28:4b:50:02:7e:47:0a:95:6c:88:9f:02:42:e6: bf:0b:a3:4c:07:84:e4:80:e4:3c:85:3d:6d:12:42:80:cd:8a: b7:2d:85:e7:31:e1:18:b7:d8:8d:ba:85:6a:82:5a:02:8f:e0: 26:67:4d:5a:0f:8c:09:22:00:af:83:24:81:8f:3d:e5:03:05: e1:b3:00:c7:b1:72:4d:5c:b1:de:b2:e0:9f:72:71:16:99:e5: 2f:b4:33:f7:04:27:5d:08:f5:f0:a6:d7:51:6d:54:2c:5e:2c: e7:f9:2c:1f:f3:90:9b:7c:ae:3d:a0:be:78:36:1c:f6:c2:b4: 8b:4d:12:85:cf:63:78:43:fd:3a:63:15:f2:6b:73:5f:cf:3e: 8b:e6:e8:20:bb:76:dc:77:af:0d:ee:fd:df:1e:e0:43:73:d5: ca:c3:5b:3d:50:4e:e6:be:c4:1b:1c:8a:43:a8:09:a9:28:52: e4:e3:c0:27:2e:74:07:b9:36:5e:bd:9b:96:b2:11:3b:21:6f: d6:51:e5:c1:a3:6c:e3:e3:6a:a0:b3:79:3a:de:42:0a:96:7a: d1:e9:1d:1e:00:31:71:cb:1d:92:2c:65:c7:33:48:4e:14:77: 79:73:4f:3f -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNjIxMDQzMzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxOS1hMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYoJqPSpiw27sB21ZLdYC3J9el+zi2r2Gjm9xeHiVQVQ2Ci66dS6k6HMRc4b O0cNC93Pym9xCZ+4L69I8buP12AbFiVGJBimX0j5JsIUV6LAunkJxCxGB4XUcgRv IXuQYX19Q4JZaa3YJAIs9oYuN5ePF2PnGwrfBDS72PteG/HT8qyLaf+Tk6xBm17v basoILYVynREARaNBgiy+MGsdKRNHsbbpASWN+VVC0+sazL0vnfsp59wEvu8kvSh dDqFLwjJvsfre7liZQAbtEJRVjeUT1RnjoAdLa3fntjGHQwGXAS9N65et+wJZ1Xr SSfpW+GEauZYbMNjNOn16zFcbQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFCrd7ZvO 2MTBTP1WDZvBOTypN6IBMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvRDhCRkNCMjZC QTY2MTFFRTgxQTkyRTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAIOwAQDBAIr4OAwDAMEAGfXTQMEAGfXTjANBgkqhkiG9w0B AQsFAAOCAQEAMGmq06EwnUTkIXF9bgclDIUVKqbCSyhLUAJ+RwqVbIifAkLmvwuj TAeE5IDkPIU9bRJCgM2Kty2F5zHhGLfYjbqFaoJaAo/gJmdNWg+MCSIAr4MkgY89 5QMF4bMAx7FyTVyx3rLgn3JxFpnlL7Qz9wQnXQj18KbXUW1ULF4s5/ksH/OQm3yu PaC+eDYc9sK0i00Shc9jeEP9OmMV8mtzX88+i+boILt23HevDe793x7gQ3PVysNb PVBO5r7EGxyKQ6gJqShS5OPAJy50B7k2Xr2blrIROyFv1lHlwaNs4+NqoLN5Ot5C CpZ60ekdHgAxccsdkixlxzNIThR3eXNPPw== -----END CERTIFICATE-----Generated at Thu Jul 3 14:49:22 2025 by rpki-client