$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa File: BE26B9DA097711F08C05FC5AC4F9AE02.roa (raw, json) Hash identifier: yMcE3tmH7UIpO9OkxwhmXmOUyw6usE3KWg2f35Z4/C0= Subject key identifier: A7:63:0A:9C:F8:F9:AA:72:F7:AF:12:A0:3A:B2:16:B8:ED:82:1E:79 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1ED8 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa Signing time: Sat 30 Aug 2025 16:08:34 +0000 ROA not before: Sat 30 Aug 2025 16:08:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 399502 IP address blocks: 103.70.137.0/24 maxlen: 24 2001:df3:b200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7896 (0x1ed8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Aug 30 16:08:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b32201-8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ad:dd:10:9f:f4:f0:38:a4:a7:6f:c6:9c:76: a1:98:7f:1e:ba:ef:2d:0a:b8:1f:0e:37:3f:02:ae: 09:c8:54:30:41:ee:5b:a3:12:61:b3:cd:5d:c7:13: 13:be:86:3c:d4:69:c8:f3:4f:8a:58:aa:ca:43:9f: 89:2c:55:b9:02:bb:31:fc:7c:67:3c:ef:e1:30:b5: 75:28:6e:c2:d9:d6:00:21:4b:04:8a:74:c0:f1:2a: 7d:6d:1a:ed:85:75:bf:f9:d4:2d:93:e9:c9:a2:39: da:1d:cd:5f:49:56:5f:17:4a:ac:ba:33:98:2d:2a: ea:1f:55:43:41:d2:33:fd:e7:b0:68:95:0c:63:1e: 60:c1:36:d2:9f:bb:4f:a6:91:41:bb:75:a1:ee:5b: 56:eb:90:12:f8:a5:9e:4a:94:03:56:36:e1:ff:02: 28:3c:9a:07:70:97:86:9c:75:59:54:58:b5:46:1d: e6:d5:39:6e:ce:b3:e2:6c:03:20:2c:3f:33:69:67: a9:3d:f4:35:05:3d:93:39:58:46:1a:02:e1:be:01: bd:37:6e:28:95:47:24:3c:92:2e:57:5d:8e:5a:64: d7:e4:f6:18:1f:3c:e5:26:ce:7a:55:9b:0c:92:34: 22:29:93:86:e8:0d:36:33:3e:29:99:80:95:90:9c: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:63:0A:9C:F8:F9:AA:72:F7:AF:12:A0:3A:B2:16:B8:ED:82:1E:79 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.137.0/24 IPv6: 2001:df3:b200::/48 Signature Algorithm: sha256WithRSAEncryption 65:33:63:bd:28:4c:69:73:0e:a7:23:6d:bf:f6:6a:2c:fd:11: 6c:3d:ad:de:82:7e:9a:91:0f:f9:69:fb:a3:7e:51:c7:a0:25: ac:80:81:0b:7a:54:42:ef:22:fe:fb:d6:f9:27:19:1e:4d:63: 7a:6a:6f:d1:65:98:ab:06:28:f3:0f:a5:1d:ca:cc:fb:e4:6d: 20:f6:85:da:5c:89:94:cd:9b:bb:22:b2:ae:c1:1b:69:de:fd: 91:e5:04:b3:0c:5e:7d:be:f3:a9:43:ab:95:35:94:4c:80:2a: bd:06:f5:73:b5:4f:42:f5:cf:ab:a3:6c:20:1c:22:82:a1:62: 2b:8e:72:e0:34:d1:41:5c:a8:b6:51:54:95:a7:36:94:ad:24: 11:1b:02:33:ab:75:34:c0:1a:dd:38:4d:d6:3d:05:0e:f8:28: 9e:45:64:ac:dd:bc:b3:b9:61:6c:da:b1:51:2e:d4:fe:a4:45: 59:ea:4c:7a:c1:e3:48:92:5f:47:e0:fc:0f:73:12:77:5e:2c: 5e:58:e4:db:02:35:a6:40:3b:2a:65:f2:66:a1:20:92:78:27: 8e:aa:00:b1:34:ea:5c:60:68:4b:2c:93:24:37:e3:00:33:7b: 49:f0:b9:39:23:42:4c:69:6c:af:6b:12:21:d5:e5:e7:ca:18: 6a:0d:33:4b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjUwODMwMTYwODMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzMjIwMS04ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8a3dEJ/08Dikp2/GnHahmH8euu8tCrgfDjc/Aq4JyFQwQe5boxJhs81dxxMT voY81GnI80+KWKrKQ5+JLFW5Arsx/HxnPO/hMLV1KG7C2dYAIUsEinTA8Sp9bRrt hXW/+dQtk+nJojnaHc1fSVZfF0qsujOYLSrqH1VDQdIz/eewaJUMYx5gwTbSn7tP ppFBu3Wh7ltW65AS+KWeSpQDVjbh/wIoPJoHcJeGnHVZVFi1Rh3m1TluzrPibAMg LD8zaWepPfQ1BT2TOVhGGgLhvgG9N24olUckPJIuV12OWmTX5PYYHzzlJs56VZsM kjQiKZOG6A02Mz4pmYCVkJwQ7QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKdjCpz4 +apy968SoDqyFrjtgh55MB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MzNzMvQ0ZDQUM2MTA2RkY1MTFFNjlGMkIxMDIzQzRGOUFFMDIvQkUyNkI5REEw OTc3MTFGMDhDMDVGQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnRokwDwQCAAIwCQMHACABDfOyADANBgkqhkiG9w0BAQsF AAOCAQEAZTNjvShMaXMOpyNtv/ZqLP0RbD2t3oJ+mpEP+Wn7o35Rx6AlrICBC3pU Qu8i/vvW+ScZHk1jempv0WWYqwYo8w+lHcrM++RtIPaF2lyJlM2buyKyrsEbad79 keUEswxefb7zqUOrlTWUTIAqvQb1c7VPQvXPq6NsIBwigqFiK45y4DTRQVyotlFU lac2lK0kERsCM6t1NMAa3ThN1j0FDvgonkVkrN28s7lhbNqxUS7U/qRFWepMesHj SJJfR+D8D3MSd14sXljk2wI1pkA7KmXyZqEgkngnjqoAsTTqXGBoSyyTJDfjADN7 SfC5OSNCTGlsr2sSIdXl58oYag0zSw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:39 2025 by rpki-client