$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa File: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (raw, json) Hash identifier: zTZf+V2KLsZguuHAsoXhlZlHVMGYryza/1ncRZFtAAQ= Subject key identifier: 44:9A:A5:CF:30:3E:7D:A9:75:5D:BA:3C:0B:C1:EB:9A:33:25:14:7B Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Certificate serial: 1526 Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa Signing time: Tue 02 Sep 2025 17:06:12 +0000 ROA not before: Tue 02 Sep 2025 17:06:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 0 IP address blocks: 203.159.68.0/23 maxlen: 23 2001:df5:b881::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5414 (0x1526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6 Validity Not Before: Sep 2 17:06:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b72404-dcbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:d4:96:80:73:c4:97:a1:58:01:e3:b9:e6: 0e:8e:09:ae:bd:68:c5:0f:df:30:7e:80:8e:d6:89: dd:d2:48:8d:e7:34:63:bb:24:6f:7a:2d:1a:d6:1e: fc:9e:cd:ac:8e:bf:0f:56:9d:c0:6b:cd:b3:9b:f8: 26:6b:d0:20:57:67:4b:67:42:ba:83:c9:71:ff:fc: 00:ed:05:c1:9c:6d:6d:1f:dd:64:37:61:06:ce:03: 8c:72:17:d3:3f:c7:7b:6a:8d:81:83:64:2e:69:12: 6e:5d:cd:22:34:f8:c0:76:b1:e6:f8:a7:c8:d1:c2: 89:ba:1b:66:c8:70:d3:cb:ef:49:5f:1e:bd:6f:29: 8d:d9:ae:71:d5:71:6c:ab:e0:a8:35:ff:0b:19:b8: c3:fb:ff:2a:fe:95:03:71:5b:61:fd:77:0c:a8:da: cd:29:ee:af:d4:9b:23:e0:74:21:71:d9:32:2c:b6: 15:a6:ba:3f:a5:d6:9a:11:bb:f3:7c:73:88:1d:c3: 7b:a2:a7:44:ac:ad:ba:0b:78:fc:59:cc:dc:ce:15: 89:eb:77:39:90:4d:c3:63:21:76:e3:09:0e:88:5e: 6b:34:dc:7d:a0:bf:ae:35:53:0b:c5:ac:a4:75:95: 5a:3a:a4:c6:5d:1e:c3:c3:cf:a9:9d:c9:16:18:49: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9A:A5:CF:30:3E:7D:A9:75:5D:BA:3C:0B:C1:EB:9A:33:25:14:7B X509v3 Authority Key Identifier: keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/026DBC9A4A2711E9A05D2324C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.159.68.0/23 IPv6: 2001:df5:b881::/48 Signature Algorithm: sha256WithRSAEncryption 96:b2:36:df:bb:63:f0:21:5e:76:06:3b:8c:6b:2a:e5:d0:d3: ba:8a:dc:74:25:fc:2c:c1:3c:9f:71:26:e1:97:4a:82:d8:c2: 9a:34:a9:ea:c1:00:95:a7:5d:38:3f:6b:3a:32:45:94:27:88: 6d:f3:c0:b6:da:d1:fb:5d:33:dc:9c:6e:44:45:c0:e8:07:b1: ea:0a:26:35:62:17:fc:e0:a9:a0:15:d6:26:f0:0c:79:77:20: 93:51:44:c9:bd:b0:4b:2c:ce:fc:26:b5:0b:06:71:34:b2:a8: 89:64:ec:61:81:1f:e7:cb:3d:ea:91:01:25:68:e5:86:39:19: 5d:cc:ed:55:cd:72:3b:c8:cb:9b:01:1a:d3:78:df:c2:93:c9: 6e:7a:1d:8d:37:6b:fa:7f:ca:d1:b9:1a:1d:8b:97:93:86:4f: 99:66:cb:1b:93:87:96:a0:33:ba:bb:4f:4d:dd:2f:3f:c2:3e: cb:38:1d:7d:2a:4a:0d:05:bf:4a:69:18:7f:b0:f1:83:b4:e1: 4e:ce:c8:38:56:39:ef:4d:be:e4:b0:a5:5c:e3:63:14:29:0a: 6a:1f:61:96:1d:c2:0b:b7:b8:93:88:4a:2b:87:dd:79:76:d3: f0:ec:4e:a2:34:fa:c0:ce:30:b3:c3:90:69:69:2a:1f:d7:66: 09:33:59:bc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICFSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2 MTE5QzM0QTYwHhcNMjUwOTAyMTcwNjEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MjQwNC1kY2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ybUloBzxJehWAHjueYOjgmuvWjFD98wfoCO1ond0kiN5zRjuyRvei0a1h78 ns2sjr8PVp3Aa82zm/gma9AgV2dLZ0K6g8lx//wA7QXBnG1tH91kN2EGzgOMchfT P8d7ao2Bg2QuaRJuXc0iNPjAdrHm+KfI0cKJuhtmyHDTy+9JXx69bymN2a5x1XFs q+CoNf8LGbjD+/8q/pUDcVth/XcMqNrNKe6v1Jsj4HQhcdkyLLYVpro/pdaaEbvz fHOIHcN7oqdErK26C3j8WczczhWJ63c5kE3DYyF24wkOiF5rNNx9oL+uNVMLxayk dZVaOqTGXR7Dw8+pnckWGEkcdQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFESapc8w Pn2pdV26PAvB65ozJRR7MB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA4NDUvREM3MTAwRUE1QTU1MTFFOEJFM0UwQjY4QzRGOUFFMDIvMDI2REJDOUE0 QTI3MTFFOUEwNUQyMzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHLn0QwDwQCAAIwCQMHACABDfW4gTANBgkqhkiG9w0BAQsF AAOCAQEAlrI237tj8CFedgY7jGsq5dDTuorcdCX8LME8n3Em4ZdKgtjCmjSp6sEA laddOD9rOjJFlCeIbfPAttrR+10z3JxuREXA6Aex6gomNWIX/OCpoBXWJvAMeXcg k1FEyb2wSyzO/Ca1CwZxNLKoiWTsYYEf58s96pEBJWjlhjkZXcztVc1yO8jLmwEa 03jfwpPJbnodjTdr+n/K0bkaHYuXk4ZPmWbLG5OHlqAzurtPTd0vP8I+yzgdfSpK DQW/SmkYf7Dxg7ThTs7IOFY5702+5LClXONjFCkKah9hlh3CC7e4k4hKK4fdeXbT 8OxOojT6wM4ws8OQaWkqH9dmCTNZvA== -----END CERTIFICATE-----Generated at Tue Sep 9 13:15:11 2025 by rpki-client