$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa File: 2B535080E79B11EFB484D12EC4F9AE02.roa (raw, json) Hash identifier: 0mC2d1pKz3Ej2zdvc2c87tYlc2CwYMMrgRKwXFKDado= Subject key identifier: 74:3B:65:0D:97:41:EA:C8:BC:CF:06:8C:D7:32:0C:7F:83:1E:66:DA Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 288C Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:12 +0000 ROA not before: Sat 26 Jul 2025 15:54:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 206264 IP address blocks: 103.217.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10380 (0x288c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa24-4154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:5a:88:ff:bc:e3:fb:a9:f1:c6:48:1e:73: 3f:8b:17:27:07:14:81:1c:08:f1:4f:78:b5:87:4b: c6:7e:ce:97:2f:d0:91:4e:e9:a7:8b:ca:57:25:c5: a4:fd:15:55:22:93:2e:b6:3e:1e:48:29:78:15:cd: 03:f1:59:b0:06:c9:50:58:0c:ee:a2:9b:87:e6:c7: ac:12:a2:56:eb:44:fc:31:ae:fd:7d:ea:22:67:67: 21:ce:ac:44:16:48:64:91:0f:a4:3c:89:56:92:42: f8:a9:56:98:d3:e6:9b:b4:ef:76:82:5c:7e:73:f1: 21:15:31:03:8b:3e:36:b6:54:04:43:b7:e5:b3:17: c3:86:e5:c6:ea:2a:d9:f7:d8:ad:6a:e3:6d:a4:88: 7c:b6:98:8c:7e:c1:87:58:92:5c:0b:2f:66:3d:fb: 05:7b:8f:09:70:54:e6:c2:46:f0:96:e6:70:61:8a: 88:c0:09:03:1a:ea:01:ce:17:49:51:28:be:6b:6f: be:dd:30:81:d2:48:67:cf:eb:05:81:bf:b3:9e:0d: 3e:95:9e:fa:04:79:94:e6:dd:bd:56:38:25:a1:36: 16:e9:be:7f:21:ac:0d:9e:8a:7b:a1:66:cc:fe:0c: eb:79:90:dc:eb:9f:22:cd:33:44:17:b7:ec:c1:4e: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3B:65:0D:97:41:EA:C8:BC:CF:06:8C:D7:32:0C:7F:83:1E:66:DA X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.217.252.0/24 Signature Algorithm: sha256WithRSAEncryption 83:88:30:ab:81:67:37:6e:83:1e:80:f1:a4:d0:6c:31:f1:c8: 46:c0:dd:f3:41:45:4a:f9:d1:2b:91:05:0c:31:1b:be:1f:02: fc:26:b5:b6:97:93:1a:4a:b2:f7:f6:df:7b:a1:f3:56:d9:c3: c5:65:e4:ee:fc:c4:c3:08:b7:ea:18:19:cb:6a:87:22:5a:90: e6:96:a1:3d:c0:64:78:34:e5:dc:a9:94:3e:3e:26:a1:a1:67: f1:56:55:f8:69:8d:a9:f5:c9:de:8d:e6:8e:fe:b6:e9:ee:47: e0:a9:05:43:da:c7:f1:7e:f1:33:01:b7:73:27:80:cd:92:00: c4:2a:9c:ad:de:e6:d6:b8:52:f4:02:e8:44:7b:7d:96:7b:a0: af:9e:78:87:97:9a:ce:e6:c9:ec:34:57:b8:c7:46:57:d0:c2: 8c:fa:11:09:b8:87:8b:3a:62:c9:38:8a:a9:51:c9:c9:30:b5: 71:80:15:59:e2:5b:bf:8a:34:fa:4a:37:79:5b:94:da:54:ce: ca:72:c1:5d:56:dd:b8:c7:de:64:27:f8:eb:2a:3b:3f:d5:4d: 33:c7:98:3e:45:13:36:ce:d0:4e:ef:31:1b:98:8a:a3:de:0c: 8a:2d:b6:5c:85:c2:44:c6:d5:05:73:97:7f:48:ff:de:73:18: 59:b9:47:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEyNC00MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUBaiP+84/up8cZIHnM/ixcnBxSBHAjxT3i1h0vGfs6XL9CRTumni8pXJcWk /RVVIpMutj4eSCl4Fc0D8VmwBslQWAzuopuH5sesEqJW60T8Ma79feoiZ2chzqxE FkhkkQ+kPIlWkkL4qVaY0+abtO92glx+c/EhFTEDiz42tlQEQ7flsxfDhuXG6irZ 99itauNtpIh8tpiMfsGHWJJcCy9mPfsFe48JcFTmwkbwluZwYYqIwAkDGuoBzhdJ USi+a2++3TCB0khnz+sFgb+zng0+lZ76BHmU5t29VjgloTYW6b5/IawNnop7oWbM /gzreZDc658izTNEF7fswU6pOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHQ7ZQ2X QerIvM8GjNcyDH+DHmbaMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkI1MzUwODBF NzlCMTFFRkI0ODREMTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn2fwwDQYJKoZIhvcNAQELBQADggEBAIOIMKuBZzdugx6A 8aTQbDHxyEbA3fNBRUr50SuRBQwxG74fAvwmtbaXkxpKsvf233uh81bZw8Vl5O78 xMMIt+oYGctqhyJakOaWoT3AZHg05dyplD4+JqGhZ/FWVfhpjan1yd6N5o7+tunu R+CpBUPax/F+8TMBt3MngM2SAMQqnK3e5ta4UvQC6ER7fZZ7oK+eeIeXms7myew0 V7jHRlfQwoz6EQm4h4s6Ysk4iqlRyckwtXGAFVniW7+KNPpKN3lblNpUzspywV1W 3bjH3mQn+OsqOz/VTTPHmD5FEzbO0E7vMRuYiqPeDIottlyFwkTG1QVzl39I/95z GFm5R5M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:10 2025 by rpki-client