$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/26BB8306A4B111EC86D73A56C4F9AE02.roa File: 26BB8306A4B111EC86D73A56C4F9AE02.roa (raw, json) Hash identifier: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I= Subject key identifier: FC:32:EE:35:B7:AA:BE:25:DC:A7:D6:D4:5D:28:5D:98:A1:E1:89:C3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 25F8 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/26BB8306A4B111EC86D73A56C4F9AE02.roa Signing time: Sun 02 Mar 2025 16:02:45 +0000 ROA not before: Sun 02 Mar 2025 16:02:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133954 IP address blocks: 43.230.120.0/22 maxlen: 24 103.49.168.0/22 maxlen: 24 103.85.240.0/22 maxlen: 24 116.204.154.0/23 maxlen: 24 119.15.154.0/23 maxlen: 24 2401:ff80::/32 maxlen: 36 2401:ff80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9720 (0x25f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558 Validity Not Before: Mar 2 16:02:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c48125-e386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:e3:9b:52:74:86:b6:a0:6e:52:4d:9a:a1: f3:8c:76:ff:c5:3a:5d:3e:24:cf:70:6e:d3:9d:7b: eb:03:ee:b9:95:f8:2d:5b:92:3d:1a:2e:61:53:4e: 96:2a:a2:bc:f3:53:ad:39:a3:d4:b6:87:95:10:55: 2f:ae:aa:bd:a6:8f:62:78:3d:11:16:71:28:8f:5e: 3d:3d:9f:65:fa:0e:f9:81:12:56:a4:7a:d4:a0:8b: b5:78:7b:cb:97:2e:58:ea:ef:94:d1:87:10:77:33: ff:10:23:bb:8a:e9:27:f9:39:33:f8:a8:1a:45:22: 66:3c:3c:ce:3f:0e:e4:1c:30:cb:c5:6e:43:72:a5: 69:4d:8b:7b:b2:d7:39:bf:4b:a9:b7:99:c5:0c:62: b1:15:d2:75:91:ec:66:65:9d:6a:e8:0e:84:60:b0: 97:77:06:a9:9b:84:20:f3:89:65:b7:a1:b8:7e:23: 34:60:87:e5:0f:ea:e7:92:a7:15:c2:40:34:8a:b5: dd:8b:ca:fd:b5:41:ee:72:65:58:3f:c7:fe:dc:2f: ea:69:d7:7f:3d:6a:37:52:f8:20:92:88:26:f1:9f: fe:44:ea:9c:8d:bb:78:24:d7:cc:d6:16:05:0d:c7: 20:08:ec:5b:c4:d5:52:2c:42:5e:58:60:f3:f4:62: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:32:EE:35:B7:AA:BE:25:DC:A7:D6:D4:5D:28:5D:98:A1:E1:89:C3 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/26BB8306A4B111EC86D73A56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.120.0/22 103.49.168.0/22 103.85.240.0/22 116.204.154.0/23 119.15.154.0/23 IPv6: 2401:ff80::/32 Signature Algorithm: sha256WithRSAEncryption ba:ea:bf:15:9d:6d:3c:0a:ed:67:6a:59:27:91:9a:ab:ec:db: 2f:f9:a9:ee:c5:aa:a3:ce:04:d0:69:61:93:e9:cc:c9:e1:c9: 58:be:ed:5f:b0:7f:6d:88:46:32:25:ea:1d:fa:2b:90:1b:a1: b3:ea:06:f7:78:cd:a1:68:04:60:24:a8:47:bc:d1:84:60:72: 81:66:73:67:4e:03:36:c5:bb:b0:ff:9b:b9:55:fd:84:e4:34: 64:85:dc:d1:9c:10:32:d5:10:fa:48:ec:55:e9:7d:da:c4:24: 7f:fc:c0:f2:c5:21:c7:5b:29:43:e2:ef:1f:df:43:28:9f:54: f8:a7:3c:9e:8c:46:59:15:0d:1c:e3:15:11:0b:a5:7b:3d:02: 74:37:b7:7b:3e:cd:49:b8:0d:6f:8f:96:ea:51:36:c0:60:0b: 8e:4c:60:61:10:68:68:78:49:87:7e:33:7b:d7:8b:e6:bd:8f: f0:63:1c:6c:03:fe:20:e0:5b:5e:ec:21:e8:db:ab:2f:60:df: 09:53:d1:15:16:13:ea:6b:1a:11:e0:8d:b0:79:9b:cc:5a:42: 26:1c:bb:a9:b1:ea:0c:82:a7:ea:bb:56:78:16:2b:fb:05:ab: 66:57:ce:49:69:f8:57:d8:ed:a1:73:d4:10:0e:d6:b1:17:ed: 1f:ef:bc:39 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICJfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwMzAyMTYwMjQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M0ODEyNS1lMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/7jm1J0hragblJNmqHzjHb/xTpdPiTPcG7TnXvrA+65lfgtW5I9Gi5hU06W KqK881OtOaPUtoeVEFUvrqq9po9ieD0RFnEoj149PZ9l+g75gRJWpHrUoIu1eHvL ly5Y6u+U0YcQdzP/ECO7iukn+Tkz+KgaRSJmPDzOPw7kHDDLxW5DcqVpTYt7stc5 v0upt5nFDGKxFdJ1kexmZZ1q6A6EYLCXdwapm4Qg84llt6G4fiM0YIflD+rnkqcV wkA0irXdi8r9tUHucmVYP8f+3C/qadd/PWo3Uvggkogm8Z/+ROqcjbt4JNfM1hYF DccgCOxbxNVSLEJeWGDz9GJyJQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFPwy7jW3 qr4l3KfW1F0oXZih4YnDMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDg1NTgvMUZBM0RBQjhGQUI5MTFFNEE3RTE1MDVFQzRGOUFFMDIvMjZCQjgzMDZB NEIxMTFFQzg2RDczQTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr5ngDBAJnMagDBAJnVfADBAF0zJoDBAF3D5owDQQCAAIw BwMFACQB/4AwDQYJKoZIhvcNAQELBQADggEBALrqvxWdbTwK7WdqWSeRmqvs2y/5 qe7FqqPOBNBpYZPpzMnhyVi+7V+wf22IRjIl6h36K5AbobPqBvd4zaFoBGAkqEe8 0YRgcoFmc2dOAzbFu7D/m7lV/YTkNGSF3NGcEDLVEPpI7FXpfdrEJH/8wPLFIcdb KUPi7x/fQyifVPinPJ6MRlkVDRzjFRELpXs9AnQ3t3s+zUm4DW+PlupRNsBgC45M YGEQaGh4SYd+M3vXi+a9j/BjHGwD/iDgW17sIejbqy9g3wlT0RUWE+prGhHgjbB5 m8xaQiYcu6mx6gyCp+q7VngWK/sFq2ZXzklp+FfY7aFz1BAO1rEX7R/vvDk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:09:11 2025 by rpki-client