$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa File: 919E2B20E52811ED863E8C34C4F9AE02.roa (raw, json) Hash identifier: eYjiRhM0OSOXgSZFBjXv9B3HoCIslAFyNtlJUrBFZyY= Subject key identifier: 26:F5:6C:C8:9B:80:DB:76:60:A1:D7:5B:46:6D:BC:3D:01:A9:B4:CD Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 071E Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa Signing time: Tue 01 Jul 2025 05:16:54 +0000 ROA not before: Tue 01 Jul 2025 05:16:54 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 42960 IP address blocks: 43.254.164.0/22 maxlen: 24 43.255.120.0/22 maxlen: 24 43.255.156.0/23 maxlen: 24 43.255.159.0/24 maxlen: 24 103.30.76.0/22 maxlen: 24 103.171.34.0/23 maxlen: 24 2001:df7:3480::/48 maxlen: 48 2401:2660:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1822 (0x71e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Jul 1 05:16:54 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68636f46-861a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2b:d9:18:2c:b9:b7:9c:52:49:1d:4b:ad:ca: 16:7c:4f:05:69:94:aa:c2:14:d1:e6:63:d9:68:87: 8c:eb:61:e3:53:3c:e5:0e:b9:2b:45:06:d7:2f:f6: 01:0a:1b:fb:46:1a:8f:6d:e9:71:10:98:f5:a0:b9: 25:58:78:c6:69:b0:14:24:64:dd:23:1a:db:3c:17: 3e:f4:1f:16:bb:80:54:19:2d:2e:2d:fd:d4:c5:eb: 98:be:48:66:52:98:57:b3:fd:be:b7:f0:2d:33:96: 0e:c0:6d:56:3e:7c:ad:25:58:f9:ad:58:0a:70:45: f7:84:f0:17:81:0c:f4:3e:77:5e:bf:1d:c6:0d:16: 9d:aa:09:8b:26:9d:07:e5:72:83:99:71:67:98:ea: d3:5e:8a:44:69:74:e2:99:47:d8:c2:b4:f5:38:22: 9c:87:7b:b2:1d:da:4f:cc:19:f8:f5:02:7f:3d:b0: c6:f4:b4:c8:95:c8:48:b6:03:07:53:56:ed:56:40: 50:58:2e:38:74:b6:d0:27:d1:24:48:17:ba:94:42: 72:9c:c4:76:df:42:c3:da:c9:0e:76:92:a7:42:4a: f1:0d:b4:bf:83:87:6d:07:0f:e7:0f:9b:13:ac:5b: 6f:8b:7a:34:f1:83:fb:7c:58:5b:4c:ce:2f:06:a2: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:6C:C8:9B:80:DB:76:60:A1:D7:5B:46:6D:BC:3D:01:A9:B4:CD X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/919E2B20E52811ED863E8C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.164.0/22 43.255.120.0/22 43.255.156.0/23 43.255.159.0/24 103.30.76.0/22 103.171.34.0/23 IPv6: 2001:df7:3480::/48 2401:2660:1000::/36 Signature Algorithm: sha256WithRSAEncryption 34:af:0b:98:08:8e:d9:a0:75:ea:c3:e5:f9:93:d5:f7:62:56: 28:0a:b1:39:a4:17:fa:95:1b:3a:66:07:3c:9f:10:35:19:70: 7d:ce:4d:63:0c:80:0d:b8:c2:e0:43:25:20:2d:fc:75:e4:31: 32:17:6e:86:5e:89:b3:ce:ce:a4:4a:db:05:48:b6:9e:e7:93: 50:0f:43:e1:22:8e:b1:98:f9:77:31:ed:c5:e7:8c:7d:7c:5e: 78:84:54:ce:47:00:46:ce:9f:bf:50:38:8a:f6:4c:22:a5:db: 70:87:cd:d0:b4:e9:05:a7:2b:e6:1d:0a:4c:c4:0a:7c:b5:ee: e3:77:1d:1d:be:dc:22:5a:e1:0f:78:3e:01:d6:cb:98:16:4a: bf:0e:c4:e9:d0:0e:b1:95:1a:af:67:e7:57:0b:0e:ad:67:d5: 58:86:79:b3:16:a3:b4:5b:8c:83:8d:18:1c:e6:55:99:5a:18: 17:4d:53:bf:58:66:2e:ea:ba:87:5c:67:b0:b6:d6:eb:7a:a6: 12:30:ac:8a:15:e1:92:e5:44:78:c7:36:76:d5:fc:25:53:68: b5:17:cc:ef:a5:62:0b:bf:a8:56:60:c5:c2:09:4a:88:e1:f8: 38:f2:28:81:95:95:3b:e9:2d:f9:04:aa:52:6d:43:c0:5c:ab: 30:b6:27:93 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwNzAxMDUxNjU0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNmY0Ni04NjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9CvZGCy5t5xSSR1LrcoWfE8FaZSqwhTR5mPZaIeM62HjUzzlDrkrRQbXL/YB Chv7RhqPbelxEJj1oLklWHjGabAUJGTdIxrbPBc+9B8Wu4BUGS0uLf3UxeuYvkhm UphXs/2+t/AtM5YOwG1WPnytJVj5rVgKcEX3hPAXgQz0Pndevx3GDRadqgmLJp0H 5XKDmXFnmOrTXopEaXTimUfYwrT1OCKch3uyHdpPzBn49QJ/PbDG9LTIlchItgMH U1btVkBQWC44dLbQJ9EkSBe6lEJynMR230LD2skOdpKnQkrxDbS/g4dtBw/nD5sT rFtvi3o08YP7fFhbTM4vBqKGFQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFCb1bMib gNt2YKHXW0ZtvD0BqbTNMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvOTE5RTJCMjBF NTI4MTFFRDg2M0U4QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMCoEAgABMCQDBAIr/qQDBAIr/3gDBAEr/5wDBAAr/58DBAJnHkwDBAFnqyIw FwQCAAIwEQMHACABDfc0gAMGBCQBJmAQMA0GCSqGSIb3DQEBCwUAA4IBAQA0rwuY CI7ZoHXqw+X5k9X3YlYoCrE5pBf6lRs6Zgc8nxA1GXB9zk1jDIANuMLgQyUgLfx1 5DEyF26GXomzzs6kStsFSLae55NQD0PhIo6xmPl3Me3F54x9fF54hFTORwBGzp+/ UDiK9kwipdtwh83QtOkFpyvmHQpMxAp8te7jdx0dvtwiWuEPeD4B1suYFkq/DsTp 0A6xlRqvZ+dXCw6tZ9VYhnmzFqO0W4yDjRgc5lWZWhgXTVO/WGYu6rqHXGewttbr eqYSMKyKFeGS5UR4xzZ21fwlU2i1F8zvpWILv6hWYMXCCUqI4fg48iiBlZU76S35 BKpSbUPAXKswtieT -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:01 2025 by rpki-client