$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F26B9A6BDF311EAA14C6611C4F9AE02.roa File: 9F26B9A6BDF311EAA14C6611C4F9AE02.roa (raw, json) Hash identifier: sfcTpdAo791Jcl2JMTP21xPCucx+IN7cnVv87qVe9O0= Subject key identifier: 68:0E:83:88:D1:61:D7:FF:3D:1D:03:66:24:AB:44:6C:AB:5B:3B:90 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B387 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F26B9A6BDF311EAA14C6611C4F9AE02.roa Signing time: Thu 08 May 2025 16:05:30 +0000 ROA not before: Thu 08 May 2025 16:05:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135814 IP address blocks: 123.253.156.0/24 maxlen: 24 123.253.157.0/24 maxlen: 24 2403:44c0::/32 maxlen: 32 2403:44c0:1::/48 maxlen: 48 2403:44c0:2::/48 maxlen: 48 2403:44c0:3::/48 maxlen: 48 2403:44c0:4::/48 maxlen: 48 2403:44c0:5::/48 maxlen: 48 2403:44c0:6::/48 maxlen: 48 2403:44c0:7::/48 maxlen: 48 2403:44c0:8::/48 maxlen: 48 2403:44c0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45959 (0xb387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd64a-9f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:23:d2:7d:b2:a7:3a:e2:08:37:7f:03:64: 66:a8:35:96:9d:75:55:9b:ce:fd:f4:90:7d:5c:61: 1e:c5:16:57:5c:5f:c3:27:1b:5a:f9:ab:e8:03:3f: 3a:3b:0f:b5:f6:ca:2c:aa:93:a8:6d:f2:70:c6:b1: 92:f0:2a:2d:fc:4d:1e:19:ea:df:9c:e9:f6:a2:a1: eb:32:dc:e4:e3:78:d6:10:3a:da:88:5d:55:49:00: 69:c7:a4:63:5c:2e:b1:84:60:fe:6f:00:a8:75:05: 33:c6:b3:2e:a1:f4:b1:e4:aa:3c:3b:8f:27:6a:e6: 6f:f4:28:b0:6a:15:17:b8:7d:82:f2:47:33:fe:d8: 19:b5:4e:6b:58:89:ca:db:ad:4b:d4:70:a4:c3:f8: fb:65:cc:a0:ff:e3:5b:2d:8c:87:9d:20:e5:77:45: 65:88:4a:e4:8b:e7:ac:ae:65:04:a3:f3:b0:0f:66: c5:d0:d5:e6:c8:2c:33:78:16:20:6b:de:bf:22:ef: 59:51:0b:62:82:c7:20:c9:0a:77:cd:c8:0d:b7:24: 85:94:de:78:c4:fc:e4:9a:15:ab:61:07:fb:1d:d8: 99:76:67:01:0f:02:28:6b:97:d2:1c:d2:88:f9:f1: 19:bf:d4:6f:41:36:02:9e:c5:3d:56:a6:8c:23:ee: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:83:88:D1:61:D7:FF:3D:1D:03:66:24:AB:44:6C:AB:5B:3B:90 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F26B9A6BDF311EAA14C6611C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.156.0/23 IPv6: 2403:44c0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:ce:8b:d0:94:45:03:68:b3:5d:a7:34:59:2e:f7:82:06:bd: 79:9f:38:a7:12:9b:4c:fc:bb:b0:41:b7:e9:1a:57:98:83:c4: da:f5:75:ad:de:15:07:00:40:7f:cb:de:f6:1d:4f:06:d4:2b: 53:09:9b:e6:4d:30:c5:ff:d7:be:dc:d3:bd:b1:6c:33:09:61: df:bc:6c:ad:ad:14:31:ff:19:eb:ef:1f:e7:09:e2:39:8c:9a: 40:6e:02:b8:34:f7:f5:e4:28:e6:dc:c8:b3:d8:20:32:83:26: fb:b3:3f:12:b6:df:5f:20:d5:2b:d5:c4:bf:9c:0c:e6:73:5d: c0:3f:e4:47:c7:28:24:cb:7b:47:20:56:87:f8:f9:d2:b3:12: cc:5b:dd:71:3b:82:0d:ed:18:4d:e7:e5:b1:e7:c8:5c:9a:e4: 77:74:83:5d:db:ba:43:0b:e8:22:05:86:4d:9e:8d:b5:22:5a: 76:c9:d2:ad:9e:a1:31:ba:97:d2:00:c7:9c:ac:6a:8d:0e:3c: c9:a9:9b:f9:2e:93:da:4c:35:4d:ec:9b:41:16:4d:a5:67:29: 39:9e:1a:9f:d2:68:9d:e0:8e:a1:11:ce:8b:dc:30:c1:88:72: d9:91:dd:7b:e5:5d:ac:7c:ea:26:d7:4e:05:c4:bc:cd:47:94: b4:91:fb:3a -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALOHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUzMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NGEtOWY3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRfI9J9sqc64gg3fwNkZqg1lp11VZvO/fSQfVxhHsUWV1xfwycbWvmr6AM/ OjsPtfbKLKqTqG3ycMaxkvAqLfxNHhnq35zp9qKh6zLc5ON41hA62ohdVUkAacek Y1wusYRg/m8AqHUFM8azLqH0seSqPDuPJ2rmb/QosGoVF7h9gvJHM/7YGbVOa1iJ ytutS9RwpMP4+2XMoP/jWy2Mh50g5XdFZYhK5IvnrK5lBKPzsA9mxdDV5sgsM3gW IGvevyLvWVELYoLHIMkKd83IDbckhZTeeMT85JoVq2EH+x3YmXZnAQ8CKGuX0hzS iPnxGb/Ub0E2Ap7FPVamjCPuBIcCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRoDoOI 0WHX/z0dA2Ykq0Rsq1s7kDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGMjZCOUE2 QkRGMzExRUFBMTRDNjYxMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBe/2cMA0EAgACMAcDBQAkA0TAMA0GCSqGSIb3DQEBCwUA A4IBAQBtzovQlEUDaLNdpzRZLveCBr15nzinEptM/LuwQbfpGleYg8Ta9XWt3hUH AEB/y972HU8G1CtTCZvmTTDF/9e+3NO9sWwzCWHfvGytrRQx/xnr7x/nCeI5jJpA bgK4NPf15Cjm3Miz2CAygyb7sz8Stt9fINUr1cS/nAzmc13AP+RHxygky3tHIFaH +PnSsxLMW91xO4IN7RhN5+Wx58hcmuR3dINd27pDC+giBYZNno21Ilp2ydKtnqEx upfSAMecrGqNDjzJqZv5LpPaTDVN7JtBFk2lZyk5nhqf0mid4I6hEc6L3DDBiHLZ kd175V2sfOom104FxLzNR5S0kfs6 -----END CERTIFICATE-----Generated at Tue May 13 00:09:23 2025 by rpki-client