$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa File: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (raw, json) Hash identifier: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0= Subject key identifier: 1C:75:9C:E3:66:A2:F7:B5:BC:E7:76:4D:48:89:94:64:F5:A0:A7:48 Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07AC Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa Signing time: Mon 14 Jul 2025 22:02:47 +0000 ROA not before: Mon 14 Jul 2025 22:02:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55720 IP address blocks: 43.249.254.0/24 maxlen: 24 43.249.255.0/24 maxlen: 24 103.229.144.0/24 maxlen: 24 103.229.145.0/24 maxlen: 24 103.229.146.0/24 maxlen: 24 103.229.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 14 22:02:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68757e86-3a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:75:e6:2a:4f:8a:b5:97:25:b5:a0:e1:8d: 3c:4c:3a:98:2c:6a:e8:11:7f:ca:21:df:9c:89:ea: 12:34:77:cc:ff:ad:81:1f:0e:47:99:a8:3c:0f:e7: 78:f4:c0:ad:28:ee:17:92:69:60:d9:9b:23:92:27: ea:99:2a:95:15:31:73:32:66:12:bf:8f:00:41:15: 8d:31:7f:04:7d:43:cc:d1:5e:c2:c9:14:aa:fe:e8: 56:dd:d4:33:8f:7b:c5:fa:dd:f0:3b:44:5b:d8:4f: f0:48:c7:44:ef:d1:dd:26:0c:c5:2c:ad:a7:87:65: 9d:b2:33:47:2e:1a:8f:82:f8:d3:17:cd:82:10:76: 9b:26:62:f6:e5:60:dd:14:cf:72:c9:80:da:d4:01: dc:47:c6:50:32:12:07:95:46:d7:49:60:b7:9c:74: 70:e1:2b:f2:63:2a:50:0c:86:a6:10:a7:ea:42:f0: 49:38:7f:c5:94:f1:11:21:75:fd:a4:74:5c:a8:c5: 13:e4:3b:9f:d6:85:4c:63:24:01:4b:0e:b7:0f:04: 6d:aa:98:98:2c:64:e2:d4:fe:1a:69:ff:38:22:29: 2b:5e:2d:68:f5:28:43:08:33:83:eb:36:5f:22:ca: 13:a9:9d:01:f2:83:3a:94:f4:37:c8:7b:83:68:dd: 01:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:75:9C:E3:66:A2:F7:B5:BC:E7:76:4D:48:89:94:64:F5:A0:A7:48 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.254.0/23 103.229.144.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:bd:89:c1:8e:e5:2d:4e:e4:cf:2b:d4:c8:6e:77:85:a1:66: 03:37:72:f9:d9:e4:cf:55:e6:d5:4e:3d:01:70:02:a6:19:3e: 8c:7d:98:71:20:e0:cb:85:05:28:81:40:8f:a5:9a:0d:e7:b3: 53:27:f9:e0:d8:40:8d:91:f8:eb:3e:1c:7a:e6:4d:aa:72:fd: 44:99:3d:20:ba:e9:c2:a3:22:ac:81:51:b8:cb:9c:e3:e7:cc: c0:fd:f3:f8:ef:48:82:d5:a2:16:06:94:bd:c5:e5:fb:54:e2: cb:42:ba:10:22:c4:cf:4d:f8:b5:c3:25:ef:03:b8:11:00:58: 54:61:59:3c:8e:38:1b:0e:98:b6:5d:57:3e:54:18:9b:b1:ef: 94:07:b1:ad:38:1b:c9:69:66:f9:63:77:da:ae:dd:84:bb:53: f6:8d:25:ab:72:96:26:04:c9:4f:60:e7:e0:f6:c3:c6:87:29: a3:e2:3b:28:45:8a:bb:61:c6:94:fe:a9:2b:1c:3b:5c:8a:72: 32:9b:d4:fc:dc:cd:8e:25:81:0e:6a:11:14:bb:a7:98:31:9e: c9:ae:eb:0f:78:cd:78:20:1e:63:c9:62:9a:2c:a0:ef:2d:d2: af:8e:f8:6c:4d:06:76:2c:c3:89:17:31:c6:c4:4a:ca:df:c2: b1:03:af:6c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNzE0MjIwMjQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1N2U4Ni0zYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3d15ipPirWXJbWg4Y08TDqYLGroEX/KId+cieoSNHfM/62BHw5Hmag8D+d4 9MCtKO4Xkmlg2ZsjkifqmSqVFTFzMmYSv48AQRWNMX8EfUPM0V7CyRSq/uhW3dQz j3vF+t3wO0Rb2E/wSMdE79HdJgzFLK2nh2WdsjNHLhqPgvjTF82CEHabJmL25WDd FM9yyYDa1AHcR8ZQMhIHlUbXSWC3nHRw4SvyYypQDIamEKfqQvBJOH/FlPERIXX9 pHRcqMUT5Duf1oVMYyQBSw63DwRtqpiYLGTi1P4aaf84IikrXi1o9ShDCDOD6zZf IsoTqZ0B8oM6lPQ3yHuDaN0BuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBx1nONm ove1vOd2TUiJlGT1oKdIMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFMDkvMDFBNTgzN0EwRjY0MTFFQjlGRDUzNzQ5QzRGOUFFMDIvQkUzNUVERDgw Q0NBMTFFRjlBRURCOTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+f4DBAJn5ZAwDQYJKoZIhvcNAQELBQADggEBAI29icGO 5S1O5M8r1Mhud4WhZgM3cvnZ5M9V5tVOPQFwAqYZPox9mHEg4MuFBSiBQI+lmg3n s1Mn+eDYQI2R+Os+HHrmTapy/USZPSC66cKjIqyBUbjLnOPnzMD98/jvSILVohYG lL3F5ftU4stCuhAixM9N+LXDJe8DuBEAWFRhWTyOOBsOmLZdVz5UGJux75QHsa04 G8lpZvljd9qu3YS7U/aNJatyliYEyU9g5+D2w8aHKaPiOyhFirthxpT+qSscO1yK cjKb1PzczY4lgQ5qERS7p5gxnsmu6w94zXggHmPJYposoO8t0q+O+GxNBnYsw4kX McbESsrfwrEDr2w= -----END CERTIFICATE-----Generated at Sun Jul 20 09:42:34 2025 by rpki-client