$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/FD557922606A11EF8B9F6820C4F9AE02.roa File: FD557922606A11EF8B9F6820C4F9AE02.roa (raw, json) Hash identifier: WK09suWPiJTW5VawW56fPInSd31p6Tm1C+edtUFR9pU= Subject key identifier: 65:6D:F6:3B:19:E2:03:CE:34:75:59:66:B0:DE:4D:AC:42:E5:D9:BA Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Certificate serial: A4 Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/FD557922606A11EF8B9F6820C4F9AE02.roa Signing time: Tue 01 Jul 2025 07:11:30 +0000 ROA not before: Tue 01 Jul 2025 07:11:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56229 IP address blocks: 103.224.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1 Validity Not Before: Jul 1 07:11:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68638a22-9889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:71:15:a2:f8:53:74:70:fb:e9:43:31:14: 2f:2b:46:c4:5d:3e:2f:bb:f3:09:bc:48:a7:e9:99: 2d:e3:a9:22:1e:57:6e:27:12:04:da:cf:b5:c6:29: ce:98:78:21:3b:04:d3:15:ce:51:6e:7a:60:91:a9: e8:81:98:24:af:5b:73:28:28:91:a1:55:cf:3a:e0: d5:17:bd:2c:93:0e:0e:41:1b:20:dd:69:d7:80:d3: c0:63:1e:70:78:91:81:08:ad:d8:21:c3:26:0c:82: 59:8f:dc:77:06:13:04:f4:e6:57:21:b6:d1:ad:e0: c7:9f:22:8e:e8:30:f2:c7:42:1a:8c:c0:ad:19:4a: 1e:e0:44:c6:f4:c8:3e:90:62:cf:29:76:d3:f3:e7: c0:48:0c:92:bb:c8:42:cc:41:3d:df:bb:bb:4a:1a: f0:79:68:f6:f2:7d:08:23:06:37:28:0e:99:97:4c: 34:a2:68:c2:9d:12:f9:1b:b7:af:4d:f9:91:eb:23: c2:da:db:ec:5e:03:f9:b3:77:67:0e:ae:b5:ed:15: 05:43:c0:48:f2:77:af:5d:6e:8d:25:6e:64:9d:a4: 68:09:a6:62:f8:d3:56:f3:16:69:43:89:43:6c:4b: e4:48:9b:80:e6:c7:85:da:fb:46:88:87:eb:7b:04: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6D:F6:3B:19:E2:03:CE:34:75:59:66:B0:DE:4D:AC:42:E5:D9:BA X509v3 Authority Key Identifier: keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/FD557922606A11EF8B9F6820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.19.0/24 Signature Algorithm: sha256WithRSAEncryption bb:14:0c:fd:48:3d:7c:1f:2e:65:68:7d:f8:e8:01:a7:b5:da: 29:03:24:9a:28:c1:65:ff:a8:24:ce:f8:88:a7:a8:31:1b:5f: 97:75:3f:53:23:3a:c1:90:74:8b:45:5f:ce:2f:a4:38:56:cd: 7b:f8:f6:94:1c:75:fb:60:76:62:a5:ed:05:1f:a6:f4:38:43: e3:cc:d5:0e:46:5b:56:09:5f:48:79:8e:ac:b9:eb:81:54:48: 93:80:ae:32:d1:f2:f4:90:b6:11:86:c2:84:ba:c8:94:ef:a1: 4e:50:d2:89:07:96:f8:27:c3:c7:b6:a9:46:0e:49:0b:d8:2e: 20:0f:1b:25:59:fd:b2:77:15:62:2f:b4:b7:f4:c2:79:20:24: 7b:3b:b0:d5:50:f2:cc:e1:d5:dc:71:52:7d:3e:de:a1:52:05: 1e:68:dd:c7:71:31:3c:65:e8:3f:f3:ff:e8:21:8d:8b:50:7d: 6e:2a:ad:c7:b4:39:42:e5:19:f5:7c:a8:45:7a:85:34:ad:04: 16:35:d1:cd:7e:ec:7f:ad:0d:3b:67:13:d1:48:16:c4:55:6a: 9f:75:7a:8f:3d:7b:c2:9f:82:a9:8b:27:ea:87:ba:b3:c9:5f: c0:9a:3d:f4:2c:22:d0:c7:02:92:dd:75:8b:5e:1e:78:ad:cf: d3:4e:1a:b6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ5NzMxMTAvBgNVBAUTKEQ2MDAzNTA3MzdFQTQyNEI0MDFCMjQ4MTA1M0QyQkMy OTE2Q0JBRDEwHhcNMjUwNzAxMDcxMTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzOGEyMi05ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjRxFaL4U3Rw++lDMRQvK0bEXT4vu/MJvEin6Zkt46kiHlduJxIE2s+1xinO mHghOwTTFc5RbnpgkanogZgkr1tzKCiRoVXPOuDVF70skw4OQRsg3WnXgNPAYx5w eJGBCK3YIcMmDIJZj9x3BhME9OZXIbbRreDHnyKO6DDyx0IajMCtGUoe4ETG9Mg+ kGLPKXbT8+fASAySu8hCzEE937u7ShrweWj28n0IIwY3KA6Zl0w0omjCnRL5G7ev TfmR6yPC2tvsXgP5s3dnDq617RUFQ8BI8nevXW6NJW5knaRoCaZi+NNW8xZpQ4lD bEvkSJuA5seF2vtGiIfrewSEywIDAQABo4IClTCCApEwHQYDVR0OBBYEFGVt9jsZ 4gPONHVZZrDeTaxC5dm6MB8GA1UdIwQYMBaAFNYANQc36kJLQBskgQU9K8KRbLrR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDk3My9BNjVCQzYyNjYw NkExMUVGODk4RURCMUZDNEY5QUUwMi8xZ0ExQnpmcVFrdEFHeVNCQlQwcndwRnN1 dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFnQTFCemZxUWt0QUd5U0JCVDByd3BGc3V0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ5NzMvQTY1QkM2MjY2MDZBMTFFRjg5OEVEQjFGQzRGOUFFMDIvRkQ1NTc5MjI2 MDZBMTFFRjhCOUY2ODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn4BMwDQYJKoZIhvcNAQELBQADggEBALsUDP1IPXwfLmVo ffjoAae12ikDJJoowWX/qCTO+IinqDEbX5d1P1MjOsGQdItFX84vpDhWzXv49pQc dftgdmKl7QUfpvQ4Q+PM1Q5GW1YJX0h5jqy564FUSJOArjLR8vSQthGGwoS6yJTv oU5Q0okHlvgnw8e2qUYOSQvYLiAPGyVZ/bJ3FWIvtLf0wnkgJHs7sNVQ8szh1dxx Un0+3qFSBR5o3cdxMTxl6D/z/+ghjYtQfW4qrce0OULlGfV8qEV6hTStBBY10c1+ 7H+tDTtnE9FIFsRVap91eo89e8KfgqmLJ+qHurPJX8CaPfQsItDHApLddYteHnit z9NOGrY= -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:46 2025 by rpki-client