$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/1268CB8C4E3E11EF891FC80CC4F9AE02.roa File: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (raw, json) Hash identifier: 6CR+TZUsylxtx0zLgY8M428FtFKBQUPpWUog06aspTA= Subject key identifier: 32:D7:38:1D:6F:A5:05:AE:E7:7C:0E:22:21:B6:BA:E3:2D:D3:D4:A9 Certificate issuer: /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212 Certificate serial: A3 Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/1268CB8C4E3E11EF891FC80CC4F9AE02.roa Signing time: Thu 22 May 2025 17:27:57 +0000 ROA not before: Thu 22 May 2025 17:27:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137578 IP address blocks: 103.114.10.0/23 maxlen: 23 103.114.10.0/24 maxlen: 24 103.114.11.0/24 maxlen: 24 2405:4440::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609, serialNumber=02E28F9D460511137B21478823A7B48339565212 Validity Not Before: May 22 17:27:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682f5e9d-a934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:f7:2a:b0:92:36:3d:a2:44:42:a8:bf:69: 63:bb:c2:c9:0e:51:39:e4:06:85:49:90:08:fb:d9: d2:bd:10:4b:1d:4b:1f:0f:3d:e1:39:2b:19:82:13: 44:48:1d:07:e5:c9:4d:a0:6e:d1:6b:74:cd:7b:be: 7a:be:8b:42:ee:1c:7b:93:9e:49:6b:6b:5f:67:a2: f0:df:ad:f1:35:94:2c:ef:ef:87:90:9b:6c:e4:72: 8c:1c:43:3f:21:7f:35:09:03:69:0d:cd:67:3d:1c: 9d:d3:06:a2:a1:a9:9d:92:61:5a:ca:98:e8:a1:f5: 69:5a:8b:91:f4:5f:19:3c:68:65:cf:23:bb:2e:3b: 77:99:a6:61:42:ec:f7:74:d4:74:24:d8:f7:10:de: f8:bf:49:71:3a:e8:77:a8:af:05:49:b7:77:e4:a4: 50:36:36:92:9f:2a:2c:4f:9b:c8:48:45:52:1d:e6: b1:94:fb:da:6e:e3:ad:96:5a:df:c8:d3:c7:1d:7a: cd:cb:33:c1:02:1b:d2:0d:d2:80:6b:41:93:4f:49: 18:00:3e:e8:f5:94:ab:c8:e2:53:c3:75:19:e5:8e: 3d:a9:f2:67:c8:a4:f0:cd:34:97:f2:ed:02:f5:76: 7f:5d:1d:15:19:e6:c6:9a:49:d7:b6:c9:62:34:11: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:38:1D:6F:A5:05:AE:E7:7C:0E:22:21:B6:BA:E3:2D:D3:D4:A9 X509v3 Authority Key Identifier: keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/1268CB8C4E3E11EF891FC80CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.10.0/23 IPv6: 2405:4440::/32 Signature Algorithm: sha256WithRSAEncryption 64:de:8c:15:02:a2:dc:76:dc:a4:59:61:ac:f0:ed:4f:be:c6: 50:63:29:b0:30:6e:0e:64:84:85:d9:b1:e5:fb:9d:ac:56:a8: 27:4c:49:32:ce:b3:f7:45:82:ed:ae:db:af:c4:55:90:03:16: 01:4e:a0:ad:96:10:e1:56:72:94:8e:35:d7:57:1e:f4:80:7d: 81:ae:58:2e:32:1a:79:68:a5:36:16:b6:da:f4:ad:f8:b1:95: 16:2c:43:76:79:4c:3f:e4:d8:d9:44:7c:b2:27:22:64:b9:a4: b2:eb:ca:d4:f3:1d:b5:0f:89:25:0c:05:a9:29:53:b5:43:88: 10:07:65:b6:5c:16:ac:71:66:20:59:c4:80:e4:d9:4b:b9:09: 45:98:23:46:0b:aa:3d:5e:cc:4c:ae:8a:0e:c0:04:5b:d6:b3: 0e:5f:f9:78:64:34:d0:2e:dd:0a:6d:fa:b6:2c:6b:c7:00:da: 0c:a1:ce:0d:a3:bf:8f:2c:b8:f0:bf:7f:af:ff:71:ca:c4:48: d1:b6:30:b5:0b:b9:12:30:7a:4e:8e:d0:86:66:35:66:2a:df: 1f:af:34:c9:a4:b2:5e:02:9a:22:2b:f2:42:29:59:9b:a2:dc: 63:00:0c:10:e3:53:42:6c:f5:60:e8:47:ea:1c:6b:e8:84:58: 4d:b1:c6:dd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2MDkxMTAvBgNVBAUTKDAyRTI4RjlENDYwNTExMTM3QjIxNDc4ODIzQTdCNDgz Mzk1NjUyMTIwHhcNMjUwNTIyMTcyNzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmNWU5ZC1hOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVj3KrCSNj2iREKov2lju8LJDlE55AaFSZAI+9nSvRBLHUsfDz3hOSsZghNE SB0H5clNoG7Ra3TNe756votC7hx7k55Ja2tfZ6Lw363xNZQs7++HkJts5HKMHEM/ IX81CQNpDc1nPRyd0waioamdkmFaypjoofVpWouR9F8ZPGhlzyO7Ljt3maZhQuz3 dNR0JNj3EN74v0lxOuh3qK8FSbd35KRQNjaSnyosT5vISEVSHeaxlPvabuOtllrf yNPHHXrNyzPBAhvSDdKAa0GTT0kYAD7o9ZSryOJTw3UZ5Y49qfJnyKTwzTSX8u0C 9XZ/XR0VGebGmknXtsliNBFmqwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDLXOB1v pQWu53wOIiG2uuMt09SpMB8GA1UdIwQYMBaAFALij51GBRETeyFHiCOntIM5VlIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0 MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9BdUtQblVZRkVSTjdJVWVJSTZlMGd6bFdV aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1S1BuVVlGRVJON0lVZUlJNmUwZ3psV1VoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc2MDkvNjMyQzMwQUU0NDBFMTFFODkwM0QzQTVCQzRGOUFFMDIvMTI2OENCOEM0 RTNFMTFFRjg5MUZDODBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFncgowDQQCAAIwBwMFACQFREAwDQYJKoZIhvcNAQELBQAD ggEBAGTejBUCotx23KRZYazw7U++xlBjKbAwbg5khIXZseX7naxWqCdMSTLOs/dF gu2u26/EVZADFgFOoK2WEOFWcpSONddXHvSAfYGuWC4yGnlopTYWttr0rfixlRYs Q3Z5TD/k2NlEfLInImS5pLLrytTzHbUPiSUMBakpU7VDiBAHZbZcFqxxZiBZxIDk 2Uu5CUWYI0YLqj1ezEyuig7ABFvWsw5f+XhkNNAu3Qpt+rYsa8cA2gyhzg2jv48s uPC/f6//ccrESNG2MLULuRIwek6O0IZmNWYq3x+vNMmksl4CmiIr8kIpWZui3GMA DBDjU0Js9WDoR+oca+iEWE2xxt0= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:55 2025 by rpki-client