$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa File: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (raw, json) Hash identifier: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU= Subject key identifier: 09:04:93:97:16:F6:3A:A3:60:C7:9C:F1:3A:02:86:A3:8B:63:AA:B2 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 01A6 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa Signing time: Tue 08 Jul 2025 08:19:00 +0000 ROA not before: Tue 08 Jul 2025 08:19:00 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 23854 IP address blocks: 103.212.67.0/24 maxlen: 24 119.15.64.0/24 maxlen: 24 119.15.66.0/24 maxlen: 24 119.15.68.0/23 maxlen: 24 119.15.70.0/23 maxlen: 24 203.3.70.0/24 maxlen: 24 203.5.59.0/24 maxlen: 24 203.8.95.0/24 maxlen: 24 203.26.51.0/24 maxlen: 24 203.26.177.0/24 maxlen: 24 203.26.213.0/24 maxlen: 24 203.27.199.0/24 maxlen: 24 203.31.75.0/24 maxlen: 24 2001:df1:5a00::/48 maxlen: 48 2401:8560::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Jul 8 08:19:00 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=686cd474-32db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:da:fb:06:6f:71:5e:65:ab:ef:93:fa:c7: 52:82:c4:9d:9b:60:d8:31:9f:6b:25:d9:72:c8:99: e4:c6:7c:4d:50:e4:fe:c0:a1:96:ba:cc:34:e6:62: 27:3b:ed:65:4e:57:09:ee:73:85:bf:01:b8:ea:19: 44:39:ec:4f:50:cb:e0:03:14:51:cb:43:75:48:59: f0:4b:90:21:fa:23:73:8b:08:bc:c2:e0:af:99:25: 7a:20:3c:65:50:b1:af:4c:04:5d:6b:86:5b:5a:c2: 64:3f:48:6b:d6:c0:ed:2f:68:a4:11:c1:a6:e5:1c: fd:7f:57:d6:f4:42:ac:13:93:48:81:3c:ef:ec:a6: 13:93:e2:36:d8:08:93:e7:5f:98:a6:e9:f8:50:b4: 5b:bf:4a:91:b9:4d:1f:47:31:d9:79:a3:cd:ea:17: cb:34:24:de:38:bd:30:0a:fe:92:10:10:c5:d7:4e: 88:d8:ef:e2:46:ba:3c:0a:9b:4f:0a:1b:ef:e9:26: 4f:ba:16:b9:5a:ad:22:2f:a4:cd:44:ec:9d:6c:7b: 7e:f3:e6:3b:49:3c:b3:2a:b8:16:5d:26:bc:95:c3: 22:a1:7a:8e:3f:68:26:27:49:46:ee:10:3e:67:31: c2:a7:fa:a7:39:e7:cb:72:d7:1f:78:ea:0a:e0:14: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:04:93:97:16:F6:3A:A3:60:C7:9C:F1:3A:02:86:A3:8B:63:AA:B2 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.67.0/24 119.15.64.0/24 119.15.66.0/24 119.15.68.0/22 203.3.70.0/24 203.5.59.0/24 203.8.95.0/24 203.26.51.0/24 203.26.177.0/24 203.26.213.0/24 203.27.199.0/24 203.31.75.0/24 IPv6: 2001:df1:5a00::/48 2401:8560::/31 Signature Algorithm: sha256WithRSAEncryption 73:02:04:35:c4:a8:b6:1d:1d:16:c7:0f:a7:f8:e4:ed:40:67: f0:34:02:a1:5b:ed:cc:c5:03:17:87:be:a1:8e:34:e2:93:fd: 53:cf:30:c9:ba:39:cd:ee:66:ba:3b:72:75:10:3b:97:f7:8b: 61:b1:e5:71:f9:4d:9f:eb:0c:8c:33:51:7d:e5:22:c1:74:c4: 12:ec:ee:1c:64:30:dd:78:00:c0:55:69:f8:32:5a:cd:16:ad: 56:f5:fa:ff:97:2a:ce:04:cd:93:78:27:e3:b0:7e:b1:c2:86: 4f:36:e8:68:e2:52:59:69:e1:17:b8:67:8f:5d:9d:fe:6a:7b: 0d:9f:9a:e8:1c:aa:d7:f6:52:5c:a6:97:9c:d9:d7:07:e7:22: 22:78:01:1a:16:c6:30:03:fb:55:8a:54:9a:de:20:4d:d7:b7: aa:eb:d5:43:62:29:e0:f1:eb:fb:3d:c9:84:a2:24:e6:3b:49: 0c:82:d7:71:0f:f6:70:1a:48:bc:cc:69:86:f9:23:01:75:cf: 19:04:25:b6:7b:bd:0b:ee:8f:a8:8c:28:83:9c:91:87:61:2a: 9d:af:94:99:dd:c1:42:4e:ab:24:8e:41:e5:24:fb:69:5f:79: 8d:89:5a:bc:bc:ed:ef:cd:23:8f:4c:fc:30:0c:a9:8f:4f:0c: 29:48:37:f6 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUwNzA4MDgxOTAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZjZDQ3NC0zMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxura+wZvcV5lq++T+sdSgsSdm2DYMZ9rJdlyyJnkxnxNUOT+wKGWusw05mIn O+1lTlcJ7nOFvwG46hlEOexPUMvgAxRRy0N1SFnwS5Ah+iNziwi8wuCvmSV6IDxl ULGvTARda4ZbWsJkP0hr1sDtL2ikEcGm5Rz9f1fW9EKsE5NIgTzv7KYTk+I22AiT 51+Ypun4ULRbv0qRuU0fRzHZeaPN6hfLNCTeOL0wCv6SEBDF106I2O/iRro8CptP Chvv6SZPuha5Wq0iL6TNROydbHt+8+Y7STyzKrgWXSa8lcMioXqOP2gmJ0lG7hA+ ZzHCp/qnOefLctcfeOoK4BT5AQIDAQABo4IC7zCCAuswHQYDVR0OBBYEFAkEk5cW 9jqjYMec8ToChqOLY6qyMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk5NjkvQ0YzOTVDMzgxQzZBMTFFRUJGNjJBQzBEQzRGOUFFMDIvQTVENzI2M0Mx RUNCMTFFRThGRUZFRTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E ajBoME4EAgABMEgDBABn1EMDBAB3D0ADBAB3D0IDBAJ3D0QDBADLA0YDBADLBTsD BADLCF8DBADLGjMDBADLGrEDBADLGtUDBADLG8cDBADLH0swFgQCAAIwEAMHACAB DfFaAAMFASQBhWAwDQYJKoZIhvcNAQELBQADggEBAHMCBDXEqLYdHRbHD6f45O1A Z/A0AqFb7czFAxeHvqGONOKT/VPPMMm6Oc3uZro7cnUQO5f3i2Gx5XH5TZ/rDIwz UX3lIsF0xBLs7hxkMN14AMBVafgyWs0WrVb1+v+XKs4EzZN4J+OwfrHChk826Gji Ullp4Re4Z49dnf5qew2fmugcqtf2Ulyml5zZ1wfnIiJ4ARoWxjAD+1WKVJreIE3X t6rr1UNiKeDx6/s9yYSiJOY7SQyC13EP9nAaSLzMaYb5IwF1zxkEJbZ7vQvuj6iM KIOckYdhKp2vlJndwUJOqySOQeUk+2lfeY2JWry87e/NI49M/DAMqY9PDClIN/Y= -----END CERTIFICATE-----Generated at Mon Aug 11 01:47:55 2025 by rpki-client