$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/DCAC0B64C22011EB9C4C3B31C4F9AE02.roa File: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (raw, json) Hash identifier: PfaYVep9sxHm2ekMoNsSTDKRElztgb9iT+RAJOOQJNA= Subject key identifier: 1C:A7:6C:7C:E2:2F:B2:83:32:DF:55:E7:62:A4:0C:72:83:2A:CD:AA Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 05DB Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/DCAC0B64C22011EB9C4C3B31C4F9AE02.roa Signing time: Wed 09 Jul 2025 00:04:42 +0000 ROA not before: Wed 09 Jul 2025 00:04:42 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142299 IP address blocks: 103.167.192.0/24 maxlen: 24 103.167.193.0/24 maxlen: 24 2407:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1499 (0x5db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94, serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Jul 9 00:04:42 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686db219-f738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:df:74:f8:ea:a3:eb:a4:66:10:b4:d7:da: c4:cd:8d:1c:64:99:98:01:75:fe:86:15:c4:d5:7b: ad:77:8d:be:b8:3a:53:02:50:6f:ed:73:ef:28:51: 5d:de:b6:63:b6:68:9d:0c:bd:27:8e:ae:ad:c8:cc: 6a:87:d7:80:b5:d2:73:46:4b:2e:27:72:6d:6b:12: 34:bd:27:71:24:68:c0:05:53:18:f5:0e:cf:ff:ae: e5:9b:45:45:ed:19:7d:15:cf:6b:7f:54:1f:ba:9c: 85:28:da:04:4f:00:5f:03:34:94:0e:ac:45:62:47: bf:2f:e1:bf:f9:d8:07:9f:d6:61:d6:a7:a0:62:0b: 7e:b5:00:d7:4c:82:2b:85:fe:25:0f:69:51:ce:b8: a9:9f:61:02:09:74:68:d5:7c:37:af:b9:25:1e:1d: e2:9e:16:8f:f7:87:2a:bb:58:95:d6:45:2c:f4:cf: 75:34:39:13:6c:a4:55:b2:f0:d2:39:fe:fa:bf:e4: 12:a9:1b:8f:1f:bf:7e:79:c4:7f:07:20:84:1b:e8: a9:16:15:6e:70:e8:a2:15:6d:7e:bc:bf:9c:fe:12: 8c:92:37:b5:ba:3a:f3:6b:9a:93:5e:4d:52:03:d2: 4d:9b:04:d5:4e:7d:57:0a:4a:29:31:f3:4c:f7:00: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:6C:7C:E2:2F:B2:83:32:DF:55:E7:62:A4:0C:72:83:2A:CD:AA X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/DCAC0B64C22011EB9C4C3B31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.192.0/23 IPv6: 2407:7040::/32 Signature Algorithm: sha256WithRSAEncryption 24:9e:18:fe:f4:45:05:23:1a:69:25:78:a6:ea:35:41:27:36: 39:fa:91:08:b0:69:25:7f:a7:0d:8a:41:9c:25:42:02:4a:47: 7a:2a:05:98:00:25:0a:32:66:62:ef:a7:46:fe:72:8f:9e:a9: a0:96:58:f6:61:c6:29:fb:23:58:75:f9:a3:ed:1b:58:37:65: f1:50:79:f8:3d:4b:c6:08:e0:fe:cf:2d:22:6f:87:b6:83:5f: 1b:a7:9b:8f:b1:a2:34:31:6b:f9:1b:86:0a:5c:d7:2d:c7:5d: c3:19:9b:ad:0c:16:ae:38:20:9d:ab:d0:98:6e:d0:20:83:68: 57:b3:d8:b0:d8:3f:db:66:35:7a:9f:c6:4f:48:0d:09:97:06: 1e:7a:6d:f7:13:cf:3e:b2:71:0c:b5:64:60:5f:ce:91:76:f3: 42:17:e2:00:b4:f3:fc:46:2d:df:78:09:e1:7b:e2:31:3d:a9: 51:d8:78:69:03:a0:48:d9:09:36:9e:25:97:bb:4f:5e:ad:53: e7:47:d1:ff:ee:5b:45:6e:78:c3:00:21:37:0a:8b:94:9b:66: 69:35:7b:6b:69:cf:77:99:75:52:19:a9:5e:53:b9:06:3e:62: 6c:4f:ea:fb:2f:2d:cb:8c:52:bf:f9:86:9e:39:4c:bc:b4:f8: 86:ad:e2:ba -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjUwNzA5MDAwNDQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkYjIxOS1mNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHPfdPjqo+ukZhC019rEzY0cZJmYAXX+hhXE1Xutd42+uDpTAlBv7XPvKFFd 3rZjtmidDL0njq6tyMxqh9eAtdJzRksuJ3JtaxI0vSdxJGjABVMY9Q7P/67lm0VF 7Rl9Fc9rf1QfupyFKNoETwBfAzSUDqxFYke/L+G/+dgHn9Zh1qegYgt+tQDXTIIr hf4lD2lRzripn2ECCXRo1Xw3r7klHh3inhaP94cqu1iV1kUs9M91NDkTbKRVsvDS Of76v+QSqRuPH79+ecR/ByCEG+ipFhVucOiiFW1+vL+c/hKMkje1ujrza5qTXk1S A9JNmwTVTn1XCkopMfNM9wBfzQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBynbHzi L7KDMt9V52KkDHKDKs2qMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdDOTQvQkQwRkQzNUNDMjFDMTFFQkE1MUVDMjI5QzRGOUFFMDIvRENBQzBCNjRD MjIwMTFFQjlDNEMzQjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnp8AwDQQCAAIwBwMFACQHcEAwDQYJKoZIhvcNAQELBQAD ggEBACSeGP70RQUjGmkleKbqNUEnNjn6kQiwaSV/pw2KQZwlQgJKR3oqBZgAJQoy ZmLvp0b+co+eqaCWWPZhxin7I1h1+aPtG1g3ZfFQefg9S8YI4P7PLSJvh7aDXxun m4+xojQxa/kbhgpc1y3HXcMZm60MFq44IJ2r0Jhu0CCDaFez2LDYP9tmNXqfxk9I DQmXBh56bfcTzz6ycQy1ZGBfzpF280IX4gC08/xGLd94CeF74jE9qVHYeGkDoEjZ CTaeJZe7T16tU+dH0f/uW0VueMMAITcKi5SbZmk1e2tpz3eZdVIZqV5TuQY+YmxP 6vsvLcuMUr/5hp45TLy0+Iat4ro= -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:03 2025 by rpki-client