$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/10676C34517211F0AB672330C4F9AE02.roa File: 10676C34517211F0AB672330C4F9AE02.roa (raw, json) Hash identifier: iNwtEE4vpbgtamGh9Rt3zwBDGCds5c6NdLwqNO9h0fg= Subject key identifier: 72:26:26:51:A7:83:4E:A5:EE:26:3C:02:21:E8:84:D7:D6:60:C5:13 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 04 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/10676C34517211F0AB672330C4F9AE02.roa Signing time: Wed 25 Jun 2025 03:14:06 +0000 ROA not before: Wed 25 Jun 2025 03:14:06 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135027 IP address blocks: 123.100.153.0/24 maxlen: 24 123.100.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Jun 25 03:14:06 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=685b697e-12e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:34:37:ca:fe:2a:65:7b:62:0a:7b:b1:e4: 4c:80:11:1c:b8:bf:97:68:6d:33:99:82:94:04:95: 31:05:e2:69:75:63:01:a9:dd:42:d2:88:80:16:44: 3e:8a:0e:cd:98:c5:ec:77:8c:c4:18:64:f6:b1:0f: f3:c5:d2:e2:a1:e6:41:36:b4:d0:83:8d:d9:44:23: ae:88:94:e7:12:d5:91:1b:21:55:86:4f:bf:cf:9c: 9f:fb:4e:d0:ce:92:91:fc:6a:4b:e5:85:ff:b0:24: b2:b2:f6:c1:ed:8a:f0:7b:a3:e3:a8:63:9d:0b:91: 19:92:65:da:b7:19:e2:67:be:41:67:46:19:96:65: 71:a8:8d:50:bd:ce:53:55:05:26:b1:de:e6:0f:b3: 0c:2b:1a:d1:d3:d7:ba:dd:12:98:5d:e1:57:ac:0c: 71:d7:44:47:aa:39:bc:64:ca:ac:7a:84:9c:7d:c0: c8:45:94:ad:58:87:ed:43:ee:8a:dd:d4:19:93:df: ed:25:ad:45:9f:91:6a:30:58:c4:2b:7b:b3:4c:bf: 85:e5:ca:27:d0:cd:e4:c4:2d:ab:24:5c:27:e4:c1: 8b:40:df:92:d4:46:17:d6:ae:cc:d0:c5:e3:94:0d: 83:c9:dc:29:d9:7a:55:af:5b:b3:ca:39:35:39:6c: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:26:26:51:A7:83:4E:A5:EE:26:3C:02:21:E8:84:D7:D6:60:C5:13 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/10676C34517211F0AB672330C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.100.153.0-123.100.155.255 Signature Algorithm: sha256WithRSAEncryption 98:ab:8f:74:40:5d:2c:01:b5:b6:b8:30:28:59:f8:b8:10:2b: 4b:8a:2f:f0:37:88:ba:19:41:d5:4f:9f:3a:8e:b8:0c:b5:8c: 09:fe:26:bc:6a:ef:13:dd:95:89:2e:fd:21:b5:df:b9:1b:7c: d6:48:69:09:bb:fb:63:55:9a:e7:bd:92:f9:58:e7:56:c2:a5: d0:0d:4a:e8:c0:eb:95:53:0f:c3:6f:17:af:b9:b4:53:0a:31: 41:d8:f3:7d:e5:46:10:2a:0f:ef:24:78:55:e4:03:6d:9c:d3: f2:9e:37:c8:b3:c4:8d:83:e2:01:b2:a3:3f:ad:d9:96:e3:8a: 1e:63:e5:87:a8:8f:6e:70:94:25:f2:60:32:7f:b7:f6:0c:96: 83:12:65:63:3f:3b:22:a4:31:34:94:40:95:f4:3d:dc:4a:2e: b7:7c:ae:36:da:7c:47:7e:b3:49:ba:4e:0c:58:95:25:7f:31: fb:f4:fd:a8:6f:a3:83:27:a4:f4:4c:d8:0b:ba:11:60:27:ab: c7:7f:9b:a2:99:72:aa:53:9d:a2:ec:8f:1e:5b:47:49:88:4a: 46:3b:e1:65:69:d9:ec:4a:01:7e:f7:06:c3:c7:69:26:a7:83: 23:65:df:40:ed:36:3c:7d:9d:49:0f:28:07:82:2b:ac:f2:c2: 21:c5:c2:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTA2MjUwMzE0MDZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWI2OTdlLTEyZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD/jQ3yv4qZXtiCnux5EyAERy4v5dobTOZgpQElTEF4ml1YwGp3ULSiIAWRD6K Ds2Yxex3jMQYZPaxD/PF0uKh5kE2tNCDjdlEI66IlOcS1ZEbIVWGT7/PnJ/7TtDO kpH8akvlhf+wJLKy9sHtivB7o+OoY50LkRmSZdq3GeJnvkFnRhmWZXGojVC9zlNV BSax3uYPswwrGtHT17rdEphd4VesDHHXREeqObxkyqx6hJx9wMhFlK1Yh+1D7ord 1BmT3+0lrUWfkWowWMQre7NMv4XlyifQzeTELaskXCfkwYtA35LURhfWrszQxeOU DYPJ3CnZelWvW7PKOTU5bNSvAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUciYmUaeD TqXuJjwCIeiE19ZgxRMwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi8xMDY3NkMzNDUx NzIxMUYwQUI2NzIzMzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQAe2SZAwQCe2SYMA0GCSqGSIb3DQEBCwUAA4IBAQCYq490 QF0sAbW2uDAoWfi4ECtLii/wN4i6GUHVT586jrgMtYwJ/ia8au8T3ZWJLv0htd+5 G3zWSGkJu/tjVZrnvZL5WOdWwqXQDUrowOuVUw/DbxevubRTCjFB2PN95UYQKg/v JHhV5ANtnNPynjfIs8SNg+IBsqM/rdmW44oeY+WHqI9ucJQl8mAyf7f2DJaDEmVj PzsipDE0lECV9D3cSi63fK422nxHfrNJuk4MWJUlfzH79P2ob6ODJ6T0TNgLuhFg J6vHf5uimXKqU52i7I8eW0dJiEpGO+FladnsSgF+9wbDx2kmp4MjZd9A7TY8fZ1J DygHgius8sIhxcKD -----END CERTIFICATE-----Generated at Thu Jul 3 23:16:06 2025 by rpki-client