$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa File: 903E0F1652BD11F0A9261F57C4F9AE02.roa (raw, json) Hash identifier: wehugKaizIxEhZtf3yJWa3v9WBxQforOS0s0qf27ViE= Subject key identifier: 60:E6:48:BA:03:AF:3C:01:D2:41:C1:3E:06:C3:9E:A6:D5:35:8D:2C Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 4C Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa Signing time: Thu 26 Jun 2025 18:44:17 +0000 ROA not before: Thu 26 Jun 2025 18:44:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 16552 IP address blocks: 203.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Jun 26 18:44:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=685d9501-3d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:56:f3:1f:ce:7f:c3:4f:bc:4f:48:0b:5c: 59:a4:35:70:21:1b:8d:cc:07:68:04:13:85:3e:62: 9e:a7:97:2e:65:3a:e1:08:54:ce:d5:be:a9:a1:a3: 99:43:e3:6c:2d:41:80:1a:34:25:84:2c:10:14:b8: 97:1b:99:74:87:c5:91:ea:e9:58:57:8f:89:5f:1c: 5a:8c:b5:4e:cb:93:36:0a:9c:d4:90:a4:b4:cd:9c: af:9e:68:79:b1:26:29:fb:87:89:2b:7e:34:8a:ee: d3:8e:9a:1f:9e:7f:25:29:6c:5c:94:b4:99:2a:af: 45:02:c2:9a:2d:f1:0c:d4:b8:7e:81:c0:fe:c6:6a: 5f:3d:c0:98:b3:d4:f6:d2:19:12:7c:f5:80:10:5c: 44:78:3f:01:ec:55:3f:95:31:2e:b7:38:de:b9:df: c7:e2:ff:97:c8:04:3e:59:ec:7e:93:ee:47:87:e2: 41:ac:83:e9:93:08:fd:96:98:d6:7b:48:5e:12:b0: f5:2e:39:8f:6a:60:cd:46:3b:81:2f:59:c8:2e:24: d0:93:ce:60:f0:e2:64:c1:63:50:97:18:c9:bc:d3: b7:9d:da:38:fe:69:f6:77:86:d9:c8:ac:dc:26:30: b7:4c:21:ab:ac:ee:ad:52:d1:8b:a7:dc:14:3d:c0: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:48:BA:03:AF:3C:01:D2:41:C1:3E:06:C3:9E:A6:D5:35:8D:2C X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.15.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ba:f4:d3:81:ce:ec:9b:d6:6f:39:53:da:9b:04:bb:cb:b1: 0a:01:b3:d0:82:c5:9c:67:04:be:d0:22:d9:3f:c4:fc:d4:73: 9b:63:89:90:c1:a1:be:3e:c6:10:74:95:f6:6d:80:66:c3:ea: 34:45:cb:7b:65:01:89:b0:50:c5:83:4d:bc:4e:5b:fe:ae:73: 15:2e:89:e4:56:1f:06:de:ee:ae:dc:38:5c:65:a2:4b:4a:ec: d2:dd:77:cf:61:d1:1e:88:45:87:d3:5e:65:26:44:7a:05:ad: e9:e2:b2:74:bd:a5:64:12:9a:f7:35:a4:10:a5:1b:0e:da:5c: 6d:16:7b:55:07:a2:4d:92:6f:82:7c:e0:f7:d5:07:41:ca:31: e4:29:f9:5f:5c:5e:e7:dd:5f:ef:65:df:24:8d:5d:1b:97:50: 53:5b:51:10:c2:16:80:68:67:31:2c:2e:14:02:f8:33:fc:31: 31:52:77:56:99:0d:f7:b6:49:9c:4e:29:bf:84:ca:05:73:e0: 2e:41:48:11:61:18:da:34:4a:ad:a2:94:7f:30:8b:65:ca:88: bc:00:37:50:db:45:ab:35:4f:04:ca:6d:a6:e2:e0:fc:62:12: 16:05:39:70:70:9f:76:00:86:6b:43:00:d7:0a:92:17:e3:99: a3:a4:3b:76 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NENCNzExMC8GA1UEBRMoQTI5ODA1OUYwNjUzN0RGOEMwOEI4OTI1NUY3OTU5NDFB MzFDMTgwMDAeFw0yNTA2MjYxODQ0MTdaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWQ5NTAxLTNkMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTQVbzH85/w0+8T0gLXFmkNXAhG43MB2gEE4U+Yp6nly5lOuEIVM7Vvqmho5lD 42wtQYAaNCWELBAUuJcbmXSHxZHq6VhXj4lfHFqMtU7LkzYKnNSQpLTNnK+eaHmx Jin7h4krfjSK7tOOmh+efyUpbFyUtJkqr0UCwpot8QzUuH6BwP7Gal89wJiz1PbS GRJ89YAQXER4PwHsVT+VMS63ON6538fi/5fIBD5Z7H6T7keH4kGsg+mTCP2WmNZ7 SF4SsPUuOY9qYM1GO4EvWcguJNCTzmDw4mTBY1CXGMm807ed2jj+afZ3htnIrNwm MLdMIaus7q1S0Yun3BQ9wDz7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUYOZIugOv PAHSQcE+BsOeptU1jSwwHwYDVR0jBBgwFoAUopgFnwZTffjAi4klX3lZQaMcGAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0Q0I3LzhDOTNGNzZDRTE3 NjExRUZCNzk4MUIxOUM0RjlBRTAyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BnRm53WlRmZmpBaTRrbFgzbFpRYU1jR0FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi85MDNFMEYxNjUy QkQxMUYwQTkyNjFGNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMt3DzANBgkqhkiG9w0BAQsFAAOCAQEAFLr004HO7JvWbzlT 2psEu8uxCgGz0ILFnGcEvtAi2T/E/NRzm2OJkMGhvj7GEHSV9m2AZsPqNEXLe2UB ibBQxYNNvE5b/q5zFS6J5FYfBt7urtw4XGWiS0rs0t13z2HRHohFh9NeZSZEegWt 6eKydL2lZBKa9zWkEKUbDtpcbRZ7VQeiTZJvgnzg99UHQcox5Cn5X1xe591f72Xf JI1dG5dQU1tREMIWgGhnMSwuFAL4M/wxMVJ3VpkN97ZJnE4pv4TKBXPgLkFIEWEY 2jRKraKUfzCLZcqIvAA3UNtFqzVPBMptpuLg/GISFgU5cHCfdgCGa0MA1wqSF+OZ o6Q7dg== -----END CERTIFICATE-----Generated at Thu Jul 3 12:42:15 2025 by rpki-client