$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa File: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (raw, json) Hash identifier: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU= Subject key identifier: F1:9E:44:3F:87:69:6B:A0:2B:6A:28:85:5F:D5:77:43:11:7A:1F:9A Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07AB Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa Signing time: Mon 14 Jul 2025 22:02:46 +0000 ROA not before: Mon 14 Jul 2025 22:02:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.249.252.0/24 maxlen: 24 43.249.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 14 22:02:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68757e85-f1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:51:38:fb:01:1d:b7:af:1d:1a:a8:e9:43: ce:94:75:1c:9b:a8:7c:78:c3:83:ca:d0:56:31:3f: 0f:a8:04:cd:e6:66:7c:76:2a:51:72:5e:d1:91:a4: 5f:79:a1:5f:4e:5a:6c:87:97:ec:90:9a:df:c3:92: 37:33:b1:72:23:70:f7:cb:a6:74:31:df:68:7c:66: 37:9e:90:44:a5:fd:26:82:17:8f:f0:bc:75:02:80: 27:4c:07:20:f0:87:b7:dc:5d:72:ae:ec:82:d9:b3: f5:97:3b:a4:77:9d:2f:ef:55:43:93:6c:8f:52:c6: f2:a1:0d:95:76:71:10:a8:b8:92:7b:9f:73:d4:35: 01:0c:e0:40:bb:a7:4c:be:f1:e6:6b:56:4b:c8:26: 1b:91:bf:25:35:23:c4:70:d3:cb:d7:54:9d:13:7d: 45:b8:c8:48:d1:64:07:37:bd:8f:09:97:e9:3f:16: 84:f3:93:36:11:f2:57:ab:dc:36:a4:0a:ff:f1:5b: ea:91:5f:ab:53:ae:0e:4d:bb:ac:84:89:ba:75:96: bf:3a:eb:10:fc:dc:68:06:fd:66:ee:a1:dd:c0:79: 16:44:dd:c0:de:96:b1:fd:7d:0b:fc:21:ed:e9:c1: b9:76:1a:93:00:b4:a1:2b:d4:5d:9d:3f:28:9c:27: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9E:44:3F:87:69:6B:A0:2B:6A:28:85:5F:D5:77:43:11:7A:1F:9A X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/0226D57A0CCB11EF8AE6276FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.252.0/23 Signature Algorithm: sha256WithRSAEncryption 26:54:ff:01:8a:39:7d:5d:d1:eb:44:01:02:6b:9f:e5:43:cf: cf:c8:f4:81:9f:50:e8:91:9a:2e:ad:3c:fd:8e:4b:96:eb:9a: ab:f7:fc:e8:75:f2:f2:0a:c9:58:8d:e1:52:5b:1b:f4:d9:4a: 36:e3:01:38:50:71:4a:d9:28:58:90:03:fa:d5:0d:d2:5c:82: a7:e2:8c:bf:2b:56:09:46:af:09:61:29:25:35:de:52:a3:ed: f0:9d:b4:27:d6:b4:73:76:ea:68:db:10:cf:9e:ed:83:44:f2: 68:ac:d8:96:f0:46:0c:91:0f:a1:b4:b4:c3:6e:f3:e2:2f:88: 91:07:f9:8c:a3:10:bc:02:81:99:65:5f:17:e7:93:69:20:f9: 27:c3:fd:41:38:85:d3:1e:ac:3e:b1:5f:a8:f7:ba:07:de:7a: de:cd:ec:4c:ac:eb:dd:48:3f:6b:97:44:cd:e3:fc:2e:f1:ba: 18:e8:11:42:6c:7a:e9:be:f3:1f:72:d1:fd:aa:fa:2b:b3:0d: df:49:cf:fc:bc:4f:56:20:5c:be:32:04:c1:0b:ff:93:fe:d2: 57:7a:13:68:8e:cf:a7:8e:02:c7:07:3d:2c:77:c2:6b:03:68: cc:db:9b:c0:65:65:0d:7e:4c:0b:b7:b9:ac:8f:e0:57:cd:70: d1:24:a2:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNzE0MjIwMjQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1N2U4NS1mMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt65ROPsBHbevHRqo6UPOlHUcm6h8eMODytBWMT8PqATN5mZ8dipRcl7RkaRf eaFfTlpsh5fskJrfw5I3M7FyI3D3y6Z0Md9ofGY3npBEpf0mgheP8Lx1AoAnTAcg 8Ie33F1yruyC2bP1lzukd50v71VDk2yPUsbyoQ2VdnEQqLiSe59z1DUBDOBAu6dM vvHma1ZLyCYbkb8lNSPEcNPL11SdE31FuMhI0WQHN72PCZfpPxaE85M2EfJXq9w2 pAr/8VvqkV+rU64OTbushIm6dZa/OusQ/NxoBv1m7qHdwHkWRN3A3pax/X0L/CHt 6cG5dhqTALShK9RdnT8onCeGqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPGeRD+H aWugK2oohV/Vd0MReh+aMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvMDIyNkQ1N0Ew Q0NCMTFFRjhBRTYyNzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+fwwDQYJKoZIhvcNAQELBQADggEBACZU/wGKOX1d0etE AQJrn+VDz8/I9IGfUOiRmi6tPP2OS5brmqv3/Oh18vIKyViN4VJbG/TZSjbjAThQ cUrZKFiQA/rVDdJcgqfijL8rVglGrwlhKSU13lKj7fCdtCfWtHN26mjbEM+e7YNE 8mis2JbwRgyRD6G0tMNu8+IviJEH+YyjELwCgZllXxfnk2kg+SfD/UE4hdMerD6x X6j3ugfeet7N7Eys691IP2uXRM3j/C7xuhjoEUJseum+8x9y0f2q+iuzDd9Jz/y8 T1YgXL4yBMEL/5P+0ld6E2iOz6eOAscHPSx3wmsDaMzbm8BlZQ1+TAu3uayP4FfN cNEkot4= -----END CERTIFICATE-----Generated at Sun Jul 20 11:33:02 2025 by rpki-client