$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EA2E8FA819811EFBCB7403CC4F9AE02.roa File: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (raw, json) Hash identifier: 1DbRY7Dt+Gln8rSAGnsKUeRj0Sm0DLBT94bWpJpOtoQ= Subject key identifier: 2B:3A:CC:9E:37:F3:06:14:6E:BD:59:7D:E4:35:DD:42:CF:0A:26:14 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 074E Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EA2E8FA819811EFBCB7403CC4F9AE02.roa Signing time: Tue 02 Sep 2025 23:44:19 +0000 ROA not before: Tue 02 Sep 2025 23:44:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147293 IP address blocks: 103.24.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 2 23:44:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b78153-0537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:c1:e6:5e:fa:1d:3b:81:ed:d4:7b:54:07: d5:74:4f:47:fc:a1:1c:fd:88:41:a0:47:60:86:cd: 61:9d:4f:a3:34:57:bd:28:f7:4b:4b:1f:e5:58:92: 36:9e:35:b4:c2:56:83:2d:7f:31:c4:03:d0:e7:21: 63:03:3e:97:cd:ae:87:58:52:d7:a4:bf:41:f2:18: 76:26:b0:69:58:ae:5e:b9:27:21:05:2e:4e:0d:87: 01:6c:69:89:92:16:e3:bd:12:f9:6b:0d:d5:85:b6: 54:7b:37:1e:c9:a7:74:3a:3b:11:99:de:82:b7:7c: de:98:93:d5:13:8a:66:fd:a7:17:31:bb:9b:ca:3b: 9b:5c:4c:6c:d3:b4:02:c1:31:e8:49:4d:10:3b:d0: 02:07:fe:e0:c4:e6:9f:d2:9e:40:d1:75:2c:88:b9: 8e:62:52:39:0e:1d:da:44:64:b2:46:55:3a:c7:bc: 55:bf:13:24:78:9e:0f:8f:6c:78:2a:58:e9:22:a4: 75:32:32:7e:9c:8b:b1:33:ff:28:45:c4:b9:a6:c7: 2d:fc:db:f2:44:c1:88:cc:36:1b:9e:83:a1:eb:aa: 94:61:53:92:04:f5:45:13:85:ef:79:28:f5:87:c1: 8a:bb:40:21:19:2d:97:9a:9d:51:90:67:a6:38:37: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:CC:9E:37:F3:06:14:6E:BD:59:7D:E4:35:DD:42:CF:0A:26:14 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/1EA2E8FA819811EFBCB7403CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:58:5f:0e:7f:59:d5:99:bc:56:3b:eb:c0:0b:cd:da:91:35: b7:d9:61:ee:65:29:33:d5:6a:27:3c:1c:9c:cb:fb:a2:1e:69: 8a:3e:2b:f8:90:f0:73:43:4b:86:01:8f:33:a1:3a:af:cd:20: 07:37:a8:ee:fc:5b:0d:7e:ed:4f:9f:19:20:91:4e:2b:1a:d7: 2e:b3:19:f2:7a:a9:0f:d4:fd:0e:2a:13:09:60:39:30:ff:22: 28:7b:6b:03:e0:f6:c9:02:d0:7f:a0:2c:c0:fb:cf:aa:9e:a2: cf:f1:a8:b1:cf:1d:78:3c:b4:a6:c7:92:7b:e8:65:bf:7d:42: 9f:21:d8:ba:cd:57:b2:d2:76:c9:59:6b:8e:56:03:8a:f3:fb: dc:05:b4:dc:1f:67:d9:d7:69:c8:f1:e0:c2:91:68:5c:41:8e: 77:28:b5:aa:82:0c:dd:64:46:4b:f2:b5:c3:57:2f:64:f2:fc: 57:cc:b4:78:2a:1f:ef:cb:74:6c:a4:35:a6:e4:0f:12:e1:fe: 4e:f3:dc:9d:a7:3c:45:65:ac:e8:6e:10:6a:d9:65:fb:a0:e8: 94:1f:7a:be:05:65:d8:e3:a2:2f:62:2f:4e:4a:51:bb:81:46: dc:6b:9c:c3:9a:e2:c5:a4:01:d9:07:60:55:03:4c:58:48:42: 8c:cd:38:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwOTAyMjM0NDE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODE1My0wNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EvB5l76HTuB7dR7VAfVdE9H/KEc/YhBoEdghs1hnU+jNFe9KPdLSx/lWJI2 njW0wlaDLX8xxAPQ5yFjAz6Xza6HWFLXpL9B8hh2JrBpWK5euSchBS5ODYcBbGmJ khbjvRL5aw3VhbZUezceyad0OjsRmd6Ct3zemJPVE4pm/acXMbubyjubXExs07QC wTHoSU0QO9ACB/7gxOaf0p5A0XUsiLmOYlI5Dh3aRGSyRlU6x7xVvxMkeJ4Pj2x4 KljpIqR1MjJ+nIuxM/8oRcS5psct/NvyRMGIzDYbnoOh66qUYVOSBPVFE4XveSj1 h8GKu0AhGS2Xmp1RkGemODeOnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCs6zJ43 8wYUbr1ZfeQ13ULPCiYUMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvMUVBMkU4RkE4 MTk4MTFFRkJDQjc0MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGNkwDQYJKoZIhvcNAQELBQADggEBAD1YXw5/WdWZvFY7 68ALzdqRNbfZYe5lKTPVaic8HJzL+6IeaYo+K/iQ8HNDS4YBjzOhOq/NIAc3qO78 Ww1+7U+fGSCRTisa1y6zGfJ6qQ/U/Q4qEwlgOTD/Iih7awPg9skC0H+gLMD7z6qe os/xqLHPHXg8tKbHknvoZb99Qp8h2LrNV7LSdslZa45WA4rz+9wFtNwfZ9nXacjx 4MKRaFxBjncotaqCDN1kRkvytcNXL2Ty/FfMtHgqH+/LdGykNabkDxLh/k7z3J2n PEVlrOhuEGrZZfug6JQfer4FZdjjoi9iL05KUbuBRtxrnMOa4sWkAdkHYFUDTFhI QozNOGE= -----END CERTIFICATE-----Generated at Sun Sep 7 11:03:21 2025 by rpki-client