$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa File: E5DB5238DFBD11EC8E203126C4F9AE02.roa (raw, json) Hash identifier: ZrmmPRVPNdXmVUqASzwRt7WIJ8A+6EE3tmK84hv8/3g= Subject key identifier: 72:CA:0A:F6:0B:97:9D:DD:1E:79:9B:A0:EE:B7:F3:9A:BC:6A:98:F9 Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 30A1 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:52:08 +0000 ROA not before: Sat 02 Aug 2025 15:52:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45962 IP address blocks: 203.56.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12449 (0x30a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Aug 2 15:52:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e3428-bf71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:5a:44:c9:17:c7:5c:c6:0f:ba:a2:9f:90: 0e:36:6e:a7:9d:79:14:cf:fe:b0:31:e5:df:bd:22: 94:c9:db:21:0c:a4:01:fb:f4:78:50:aa:94:3b:5b: 12:0e:14:3a:ee:8a:48:84:38:19:ed:62:ab:0a:ae: a4:24:e8:53:2f:3a:0d:46:1b:32:ec:82:39:1d:96: 6b:23:cf:78:d7:18:a1:bf:3d:ed:d1:11:15:ae:45: c9:82:2e:ee:1c:99:c9:41:a1:88:95:4b:32:59:0c: 00:7f:65:eb:11:e7:36:90:68:e7:15:75:83:54:ce: 76:75:69:0e:a6:38:e4:aa:1c:74:14:00:e1:db:78: b0:33:8f:c9:6c:2e:98:3f:b0:57:b4:cc:f8:ca:57: be:bc:58:83:a5:fa:55:ff:18:4a:53:6e:94:63:b2: a6:35:ce:43:60:99:a4:d1:0a:62:30:5d:10:76:a4: d5:83:72:ba:54:ae:09:d7:59:17:51:2d:b6:eb:0b: fa:14:a7:86:cf:d0:b5:53:b7:fa:74:fc:1a:46:52: ff:fe:88:f5:ba:57:6a:61:1d:17:5a:b2:0a:d0:d7: e1:9a:75:94:f0:3f:11:ce:1f:f2:80:b2:b4:e2:98: f2:b3:63:62:a9:6b:2e:d8:30:0a:ad:09:6e:3d:ea: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CA:0A:F6:0B:97:9D:DD:1E:79:9B:A0:EE:B7:F3:9A:BC:6A:98:F9 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/E5DB5238DFBD11EC8E203126C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.56.176.0/24 Signature Algorithm: sha256WithRSAEncryption b0:1f:4a:d2:11:1c:3e:33:81:0d:ef:09:63:d9:2d:27:94:74: c6:68:54:19:c6:34:03:c8:5e:e7:72:cc:20:a0:f3:f0:bc:c7: dc:14:8d:fd:fe:83:b7:c0:43:8d:7c:b9:03:77:f6:ce:17:53: 3d:38:75:c9:16:70:6c:5b:81:26:cd:b7:4c:38:95:1c:27:d1: ac:ec:5e:1e:cd:2e:3f:4e:00:d9:f7:c3:53:51:cb:0c:fe:64: 0f:ef:f1:c5:4e:e7:38:75:f4:fc:75:1d:ce:ee:6c:e9:21:df: c8:b4:c6:b7:12:c8:a5:44:69:2f:e6:ac:5d:96:c8:ad:1e:c0: 82:2b:70:d3:de:f3:23:e9:f3:21:74:04:20:ea:f2:39:57:57: 19:33:8f:7d:a7:d4:47:30:1e:e2:85:91:87:d7:e3:26:06:fc: 7f:64:27:01:35:22:6f:b9:d7:de:30:ee:4d:bc:59:b1:6a:e2: ac:56:79:45:74:00:f2:c5:66:46:dc:65:2d:38:09:66:13:7c: c3:a4:0e:18:b9:c5:2b:ff:79:81:46:3e:84:db:ad:0d:95:f7: cb:bd:97:c7:e4:ba:39:8f:e8:a3:03:04:9c:30:eb:1e:2c:94: ed:aa:ba:c8:8e:08:a8:e9:3b:e8:0e:59:d3:3a:b1:e6:da:69: bf:a6:b7:38 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICMKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwODAyMTU1MjA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQyOC1iZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RtaRMkXx1zGD7qin5AONm6nnXkUz/6wMeXfvSKUydshDKQB+/R4UKqUO1sS DhQ67opIhDgZ7WKrCq6kJOhTLzoNRhsy7II5HZZrI8941xihvz3t0REVrkXJgi7u HJnJQaGIlUsyWQwAf2XrEec2kGjnFXWDVM52dWkOpjjkqhx0FADh23iwM4/JbC6Y P7BXtMz4yle+vFiDpfpV/xhKU26UY7KmNc5DYJmk0QpiMF0QdqTVg3K6VK4J11kX US226wv6FKeGz9C1U7f6dPwaRlL//oj1uldqYR0XWrIK0NfhmnWU8D8Rzh/ygLK0 4pjys2NiqWsu2DAKrQluPeoX7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHLKCvYL l53dHnmboO6385q8apj5MB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0IxREEvMTRCNzZCQzhFRDBCMTFFMkEzNURDNjQ4NTkxMUVBMzIvRTVEQjUyMzhE RkJEMTFFQzhFMjAzMTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLOLAwDQYJKoZIhvcNAQELBQADggEBALAfStIRHD4zgQ3v CWPZLSeUdMZoVBnGNAPIXudyzCCg8/C8x9wUjf3+g7fAQ418uQN39s4XUz04dckW cGxbgSbNt0w4lRwn0azsXh7NLj9OANn3w1NRywz+ZA/v8cVO5zh19Px1Hc7ubOkh 38i0xrcSyKVEaS/mrF2WyK0ewIIrcNPe8yPp8yF0BCDq8jlXVxkzj32n1EcwHuKF kYfX4yYG/H9kJwE1Im+5194w7k28WbFq4qxWeUV0APLFZkbcZS04CWYTfMOkDhi5 xSv/eYFGPoTbrQ2V98u9l8fkujmP6KMDBJww6x4slO2qusiOCKjpO+gOWdM6seba ab+mtzg= -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:18 2025 by rpki-client