$ rpki-client -vvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa File: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (raw, json) Hash identifier: hKjX0zsnF+JxyQ67GvVtZs4r7c+HClMF5ggV839fcgo= Subject key identifier: B5:7B:A9:D2:EC:92:3B:45:96:86:0E:A7:F5:B9:99:0A:FE:C7:39:5B Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Certificate serial: 08AB Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa Signing time: Sat 30 Aug 2025 21:12:14 +0000 ROA not before: Sat 30 Aug 2025 21:12:14 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140898 IP address blocks: 103.153.28.0/23 maxlen: 24 2001:df4:2b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669 Validity Not Before: Aug 30 21:12:14 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3692e-9e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:b6:02:2d:9e:ec:2d:7d:5c:aa:74:e6:73: 09:ac:28:95:57:e0:bd:44:74:05:1e:18:a0:22:3f: 64:61:f0:c2:31:6b:38:25:f6:37:41:3c:28:58:9a: 80:c5:3b:ba:f8:59:5f:c6:4c:43:b3:fc:df:b2:ed: 10:d5:64:69:1b:5b:84:ad:7e:80:9d:52:39:a2:60: 6f:c9:38:a3:1c:39:6b:fb:e6:ac:80:27:b0:67:6b: e9:17:8d:4e:1a:f8:97:3a:e3:37:bc:ee:5a:c6:f8: 20:d0:90:c6:76:a3:71:c7:8f:48:bc:e7:72:39:4e: 67:e1:34:8f:c2:37:0b:0d:fe:92:79:1e:10:11:15: b6:bb:3d:84:6c:db:80:4d:f4:a0:5b:ff:ed:e4:91: 1f:f9:a4:24:c1:b2:a6:61:93:09:1d:be:d4:c6:9a: 78:33:bd:04:22:c6:10:e0:f7:58:22:c9:bb:bc:23: eb:45:b6:bc:4b:f6:47:7a:27:65:d9:0d:f9:04:ce: 15:fe:39:10:00:f8:43:4b:af:24:1b:fe:cb:a9:7a: 58:7f:fb:83:0c:8c:7c:2c:18:6f:34:86:be:b5:f2: 88:de:ea:19:99:20:d0:89:01:c2:ab:c7:8d:9a:c6: 51:4b:a0:fc:3e:d5:d3:a2:31:29:75:43:84:95:65: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:A9:D2:EC:92:3B:45:96:86:0E:A7:F5:B9:99:0A:FE:C7:39:5B X509v3 Authority Key Identifier: keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.28.0/23 IPv6: 2001:df4:2b80::/48 Signature Algorithm: sha256WithRSAEncryption 80:8b:a4:7a:b2:c2:fb:56:f2:b8:d7:d1:d9:b2:5a:35:42:48: 66:8e:09:10:d3:e9:75:39:38:bb:55:d4:21:5a:b0:7a:a8:68: 3f:fa:48:79:7e:54:c8:d8:b4:aa:8e:d6:b4:d5:68:ea:c5:fc: a1:4a:e8:7a:82:76:20:f7:7b:51:3d:0f:92:92:65:68:ff:b2: a9:a5:9c:63:02:de:ec:61:b7:37:29:54:1c:0a:ec:10:3d:58: a4:c6:6b:99:cc:0c:6e:f9:54:b7:7c:9c:e1:ea:79:f8:3f:f9: 95:55:dd:63:7a:bb:c1:de:c4:cb:a6:29:ed:be:2f:81:84:4b: 10:61:03:a6:21:fd:9d:9d:65:89:2c:4c:30:ab:79:ed:f9:63: 49:9a:73:a5:cd:4d:63:83:35:b9:23:d3:69:a4:36:b1:cd:54: 48:f1:f7:22:81:42:e8:ea:4d:1f:5d:a3:e1:ce:f6:98:d1:7c: 79:3d:91:cc:7b:b5:23:4a:58:31:14:3a:cb:88:ee:04:18:7b: ca:62:df:fb:dc:af:22:91:3e:8e:8b:ba:d5:de:4e:12:39:31: 2d:ce:c4:1e:33:b5:e9:db:6e:74:30:ed:4b:52:e1:74:bf:26: 77:41:8d:5b:bd:d4:28:43:f0:e0:ce:be:38:06:0c:e8:e8:44: 74:42:3d:8b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNjUxMTAvBgNVBAUTKERBMDQyMjhEM0VFQjQ1MUZDMEYyMjMzNjY5NzE3MDU3 RjhBQjM2NjkwHhcNMjUwODMwMjExMjE0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNjkyZS05ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb62Ai2e7C19XKp05nMJrCiVV+C9RHQFHhigIj9kYfDCMWs4JfY3QTwoWJqA xTu6+FlfxkxDs/zfsu0Q1WRpG1uErX6AnVI5omBvyTijHDlr++asgCewZ2vpF41O GviXOuM3vO5axvgg0JDGdqNxx49IvOdyOU5n4TSPwjcLDf6SeR4QERW2uz2EbNuA TfSgW//t5JEf+aQkwbKmYZMJHb7Uxpp4M70EIsYQ4PdYIsm7vCPrRba8S/ZHeidl 2Q35BM4V/jkQAPhDS68kG/7LqXpYf/uDDIx8LBhvNIa+tfKI3uoZmSDQiQHCq8eN msZRS6D8PtXTojEpdUOElWVa5wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLV7qdLs kjtFloYOp/W5mQr+xzlbMB8GA1UdIwQYMBaAFNoEIo0+60UfwPIjNmlxcFf4qzZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE2NS82QTNFQjhCNkMy QjExMUVBOTIwQkI5NEFDNEY5QUUwMi8yZ1FpalQ3clJSX0E4aU0yYVhGd1ZfaXJO bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnUWlqVDdyUlJfQThpTTJhWEZ3Vl9pck5tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIxNjUvNkEzRUI4QjZDMkIxMTFFQTkyMEJCOTRBQzRGOUFFMDIvMjZBRUNEOTJD MkIyMTFFQUJCRDBFRDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmRwwDwQCAAIwCQMHACABDfQrgDANBgkqhkiG9w0BAQsF AAOCAQEAgIukerLC+1byuNfR2bJaNUJIZo4JENPpdTk4u1XUIVqweqhoP/pIeX5U yNi0qo7WtNVo6sX8oUroeoJ2IPd7UT0PkpJlaP+yqaWcYwLe7GG3NylUHArsED1Y pMZrmcwMbvlUt3yc4ep5+D/5lVXdY3q7wd7Ey6Yp7b4vgYRLEGEDpiH9nZ1liSxM MKt57fljSZpzpc1NY4M1uSPTaaQ2sc1USPH3IoFC6OpNH12j4c72mNF8eT2RzHu1 I0pYMRQ6y4juBBh7ymLf+9yvIpE+jou61d5OEjkxLc7EHjO16dtudDDtS1LhdL8m d0GNW73UKEPw4M6+OAYM6OhEdEI9iw== -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:20 2025 by rpki-client