$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa File: AF22E83C2C1711EC817C5912C4F9AE02.roa (raw, json) Hash identifier: HFOpeRCt7KhrBfeMokpcxjR3KWcuUKe5Td59DEe/ljE= Subject key identifier: A2:65:3D:3C:7C:B5:F4:2E:52:CE:C9:9B:0C:EB:12:33:53:E0:F7:6A Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 04EE Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa Signing time: Fri 29 Aug 2025 00:16:54 +0000 ROA not before: Fri 29 Aug 2025 00:16:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139204 IP address blocks: 103.170.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Aug 29 00:16:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b0f176-a28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:52:65:f2:21:1f:58:f9:2b:54:f4:9c:3d: 06:81:dc:61:e9:67:ab:d7:4d:e6:52:be:29:93:7d: c1:0d:4c:a2:e3:67:0b:c1:3f:f3:92:cc:d9:a9:ae: 6d:25:6f:cc:48:ea:23:9e:64:7f:4e:47:1c:64:c0: f8:61:57:b5:d6:fa:57:7c:25:b3:d8:b1:68:23:f6: f7:12:78:59:ca:fb:73:19:ad:cd:45:bc:0c:bf:d3: 81:6b:ee:d5:bb:d4:5c:8d:61:d8:15:3a:e9:23:eb: 32:6e:37:be:34:4c:96:86:3a:78:14:98:cf:79:8e: 72:29:38:ab:4b:6f:43:24:fa:72:67:1c:69:6e:25: 4d:cb:d0:1e:4a:26:05:db:d9:36:aa:01:9f:b8:82: d6:fc:f3:ae:63:25:62:ca:d3:c4:4a:3f:03:2a:87: 7c:99:ed:1b:15:4b:e3:35:7c:df:7f:73:1d:e4:9e: cf:f8:9e:cc:09:b4:56:d9:48:27:7e:29:28:64:a3: 8a:91:1b:61:49:cc:3f:3e:59:6b:67:fc:7e:37:73: 5c:ac:22:88:27:16:d4:1b:d2:73:fa:f6:49:f4:5b: bf:83:dc:c1:02:12:bc:73:dc:5c:af:c5:35:ed:74: 39:90:dd:c8:4d:16:43:8e:49:a4:6a:6e:58:9e:d2: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:3D:3C:7C:B5:F4:2E:52:CE:C9:9B:0C:EB:12:33:53:E0:F7:6A X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/AF22E83C2C1711EC817C5912C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.126.0/24 Signature Algorithm: sha256WithRSAEncryption b0:7f:d9:23:37:e3:26:08:e0:38:69:12:32:74:9e:19:23:e1: e7:dd:1a:28:e9:12:13:c6:14:a8:e0:41:bf:09:07:14:62:e1: 15:1e:ec:5b:e4:ff:65:ac:f2:d5:01:d1:2b:d5:44:58:73:36: c1:af:99:b3:ba:6e:bb:77:6b:c6:57:b0:2f:22:c2:e9:a6:ac: fb:f2:4e:5b:d5:dd:43:e1:dd:3a:83:7e:60:3b:88:05:34:cf: 1e:aa:46:36:df:cc:50:da:c0:5f:4f:36:21:1d:db:33:87:82: c7:7f:fe:22:d9:b6:fb:4b:d3:f0:4f:28:24:68:34:b1:d7:65: 71:df:da:89:10:c7:29:30:33:5c:80:78:13:3a:1a:43:43:15: 5a:96:40:a4:62:58:27:82:1f:31:15:89:4a:70:c3:9e:d3:0d: 40:29:29:d6:14:9b:5c:d4:24:f2:92:fb:48:b9:bc:12:6d:78: 3c:77:7e:af:cc:55:8d:9e:5b:42:2f:2a:68:9e:62:6b:7c:59: 51:a0:f8:74:e7:05:1f:bf:a7:39:9c:9c:b4:28:44:56:1a:c3: 9d:50:9a:09:93:eb:30:a4:22:5f:fa:b5:b2:fe:a2:fe:e1:54: 7c:78:99:bc:21:60:3d:17:cf:83:22:63:f5:f3:e0:ab:76:8b: cd:8b:b7:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjUwODI5MDAxNjU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwZjE3Ni1hMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fdSZfIhH1j5K1T0nD0Ggdxh6Wer103mUr4pk33BDUyi42cLwT/zkszZqa5t JW/MSOojnmR/TkccZMD4YVe11vpXfCWz2LFoI/b3EnhZyvtzGa3NRbwMv9OBa+7V u9RcjWHYFTrpI+sybje+NEyWhjp4FJjPeY5yKTirS29DJPpyZxxpbiVNy9AeSiYF 29k2qgGfuILW/POuYyViytPESj8DKod8me0bFUvjNXzff3Md5J7P+J7MCbRW2Ugn fikoZKOKkRthScw/PllrZ/x+N3NcrCKIJxbUG9Jz+vZJ9Fu/g9zBAhK8c9xcr8U1 7XQ5kN3ITRZDjkmkam5YntLbDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKJlPTx8 tfQuUs7JmwzrEjNT4PdqMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlDRUYvQzQwMTlEMjQyQzEzMTFFQ0I0NTgwODQyQzRGOUFFMDIvQUYyMkU4M0My QzE3MTFFQzgxN0M1OTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqn4wDQYJKoZIhvcNAQELBQADggEBALB/2SM34yYI4Dhp EjJ0nhkj4efdGijpEhPGFKjgQb8JBxRi4RUe7Fvk/2Ws8tUB0SvVRFhzNsGvmbO6 brt3a8ZXsC8iwummrPvyTlvV3UPh3TqDfmA7iAU0zx6qRjbfzFDawF9PNiEd2zOH gsd//iLZtvtL0/BPKCRoNLHXZXHf2okQxykwM1yAeBM6GkNDFVqWQKRiWCeCHzEV iUpww57TDUApKdYUm1zUJPKS+0i5vBJteDx3fq/MVY2eW0IvKmieYmt8WVGg+HTn BR+/pzmcnLQoRFYaw51QmgmT6zCkIl/6tbL+ov7hVHx4mbwhYD0Xz4MiY/Xz4Kt2 i82Lt+c= -----END CERTIFICATE-----Generated at Sat Sep 20 00:44:20 2025 by rpki-client