$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/A16739B2F89011EE9EB9D42BC4F9AE02.roa File: A16739B2F89011EE9EB9D42BC4F9AE02.roa (raw, json) Hash identifier: qFmlcQmaGTom3kI0l7herxvgj9hJZC1uCK8qoKPxQHc= Subject key identifier: 1A:BE:BA:B3:A8:6F:2B:3A:31:62:28:E3:DE:D6:07:E8:CE:8B:79:8D Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: F2 Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/A16739B2F89011EE9EB9D42BC4F9AE02.roa Signing time: Thu 10 Jul 2025 04:17:10 +0000 ROA not before: Thu 10 Jul 2025 04:17:10 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140956 IP address blocks: 103.153.194.0/23 maxlen: 23 103.153.194.0/24 maxlen: 24 103.153.195.0/24 maxlen: 24 2001:df4:5780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Jul 10 04:17:10 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=686f3ec5-92c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:d2:b6:cb:3f:b9:25:99:a8:f7:6f:c8:db: 9d:07:d5:df:00:16:c5:5a:6a:7c:5f:59:c7:ba:e5: 71:ef:69:cb:50:0e:48:26:16:fd:c6:70:92:cf:44: af:55:06:a5:f4:56:a8:6f:da:51:58:f9:a8:ff:0e: c9:70:a7:7b:75:67:07:9a:b8:47:d8:c4:f0:96:11: b8:bd:46:21:4f:c3:32:99:e7:b3:52:56:38:2f:04: 13:11:61:84:80:79:41:b3:be:e2:fc:1f:ce:19:2d: a2:bd:54:1d:30:fd:fd:67:a6:20:e1:6a:d7:7d:9d: 35:24:f0:b3:bc:6e:5d:36:62:dc:89:b9:24:7e:b3: 43:56:c1:50:94:8e:75:3d:31:19:cc:96:5c:94:4c: 83:0b:da:f8:04:57:a5:63:63:47:66:70:1f:07:b5: 0f:a5:5b:9f:37:ef:5b:ed:42:f6:a4:3b:74:b4:12: eb:94:f7:30:b6:70:18:89:fe:82:e8:db:7d:d5:52: 58:f2:77:2f:c9:e5:b2:e2:fc:f3:7c:f6:48:19:0d: e6:37:cb:f1:49:70:f8:52:fe:59:c5:6a:3e:87:94: 7c:23:00:be:e3:42:0e:a5:c2:05:eb:de:5c:d2:83: c5:c3:05:d6:02:b5:19:f2:b4:43:fd:11:2a:be:c5: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:BA:B3:A8:6F:2B:3A:31:62:28:E3:DE:D6:07:E8:CE:8B:79:8D X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/A16739B2F89011EE9EB9D42BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.194.0/23 IPv6: 2001:df4:5780::/48 Signature Algorithm: sha256WithRSAEncryption 7b:ef:3f:7b:95:2c:d2:c9:37:93:da:04:88:e2:ac:b0:79:76: a3:7c:cc:bc:dc:6b:f3:f2:8f:ac:ba:75:e5:93:e1:c7:45:2a: e2:8f:79:63:2c:61:73:bc:6c:32:bc:89:78:d7:04:28:44:1f: 7e:75:03:98:0b:d9:cc:e7:59:ba:c6:45:a3:4f:eb:e5:73:8c: 34:f0:79:70:4c:bf:ae:c6:ad:6c:5a:66:cc:dc:19:04:80:22: 73:2e:c3:db:49:73:38:f6:fc:fd:c2:fa:b2:66:c2:c5:e9:7e: 65:17:6e:e9:fc:40:08:55:6a:b3:71:61:d7:9a:e8:7f:1d:80: 34:b9:76:5b:77:81:7c:b7:53:a1:99:de:61:79:21:46:d7:6a: 0c:82:58:11:d2:a1:bc:aa:4e:6f:a8:1d:59:a2:fb:d6:48:1d: 27:ee:4f:f6:0c:3d:c1:be:0f:c1:0e:d5:7b:95:13:f9:49:63: 2b:82:50:0a:75:cb:93:b0:8e:d4:4e:d9:8c:77:35:60:7d:6f: 90:ae:09:f4:3e:2b:31:be:b9:ea:20:cc:f6:04:bb:81:c7:fb: a4:12:3f:19:58:2b:62:a9:89:f6:fb:ae:22:d3:24:62:88:63: 5b:a1:21:50:8d:d8:33:f7:8a:b8:d1:82:6f:53:4a:71:89:ea: ef:74:26:97 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUwNzEwMDQxNzEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmM2VjNS05MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9l7Stss/uSWZqPdvyNudB9XfABbFWmp8X1nHuuVx72nLUA5IJhb9xnCSz0Sv VQal9Faob9pRWPmo/w7JcKd7dWcHmrhH2MTwlhG4vUYhT8MymeezUlY4LwQTEWGE gHlBs77i/B/OGS2ivVQdMP39Z6Yg4WrXfZ01JPCzvG5dNmLcibkkfrNDVsFQlI51 PTEZzJZclEyDC9r4BFelY2NHZnAfB7UPpVufN+9b7UL2pDt0tBLrlPcwtnAYif6C 6Nt91VJY8ncvyeWy4vzzfPZIGQ3mN8vxSXD4Uv5ZxWo+h5R8IwC+40IOpcIF695c 0oPFwwXWArUZ8rRD/REqvsVeQwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBq+urOo bys6MWIo497WB+jOi3mNMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUyNEIvQjUxMDIyRDZGODhGMTFFRTk3NkMxRTJBQzRGOUFFMDIvQTE2NzM5QjJG ODkwMTFFRTlFQjlENDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmcIwDwQCAAIwCQMHACABDfRXgDANBgkqhkiG9w0BAQsF AAOCAQEAe+8/e5Us0sk3k9oEiOKssHl2o3zMvNxr8/KPrLp15ZPhx0Uq4o95Yyxh c7xsMryJeNcEKEQffnUDmAvZzOdZusZFo0/r5XOMNPB5cEy/rsatbFpmzNwZBIAi cy7D20lzOPb8/cL6smbCxel+ZRdu6fxACFVqs3Fh15rofx2ANLl2W3eBfLdToZne YXkhRtdqDIJYEdKhvKpOb6gdWaL71kgdJ+5P9gw9wb4PwQ7Ve5UT+UljK4JQCnXL k7CO1E7ZjHc1YH1vkK4J9D4rMb656iDM9gS7gcf7pBI/GVgrYqmJ9vuuItMkYohj W6EhUI3YM/eKuNGCb1NKcYnq73Qmlw== -----END CERTIFICATE-----Generated at Sun Jul 20 11:37:48 2025 by rpki-client