$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa File: C664689AE0F511EABB96D531C4F9AE02.roa (raw, json) Hash identifier: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI= Subject key identifier: 99:36:0F:87:C5:1E:62:4A:AB:7B:78:63:C8:7C:96:EE:3F:A9:B3:24 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 080E Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa Signing time: Fri 18 Apr 2025 21:23:40 +0000 ROA not before: Fri 18 Apr 2025 21:23:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.152.248.0/24 maxlen: 24 103.152.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Apr 18 21:23:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6802c2dc-e7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:58:0a:20:1a:c7:39:51:e9:fa:eb:71:1c: 2e:4e:52:fd:22:4d:41:f3:0e:ea:44:59:bf:a0:83: e0:f7:4d:43:a9:0b:85:44:d5:27:86:61:d1:7f:70: 8a:fd:60:fb:e4:0c:50:e9:09:24:e5:7a:b7:14:1d: e8:69:e2:bd:1d:2f:e4:02:a7:21:7b:6c:9f:e0:22: 1c:d1:ea:15:96:9a:7f:11:8c:38:29:2d:88:f6:cb: 91:9c:a8:de:b1:3f:a7:4d:aa:9d:8d:d7:0c:32:37: 99:ec:21:08:2c:a3:4b:af:1b:f3:a1:6e:b8:8d:24: 4d:98:86:d0:82:d2:12:7a:28:e2:f4:1c:7b:09:86: 2f:9c:7e:e9:ab:52:70:28:0a:bd:22:50:c9:1a:f9: dc:f9:94:a6:da:e4:15:9f:29:58:d1:56:7f:15:9b: 55:91:a5:04:71:4b:6a:c6:97:96:ea:18:c4:f0:38: 32:01:49:55:40:ce:6a:db:c9:96:c7:8c:f2:51:56: 62:60:aa:ca:4e:2b:3e:db:46:c4:5f:02:68:d9:bd: dc:9e:41:dd:81:d9:50:d2:68:8f:35:67:d6:a8:7d: e0:22:64:35:0c:4c:4e:63:b7:e1:a9:27:4b:e8:f7: f2:7e:20:c5:92:ce:94:66:9a:39:7e:a6:17:94:01: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:36:0F:87:C5:1E:62:4A:AB:7B:78:63:C8:7C:96:EE:3F:A9:B3:24 X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.248.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:3e:72:45:b8:43:cb:33:89:56:e7:82:1b:d3:2f:e1:a9:84: f1:25:e0:58:a9:64:7e:d0:77:9e:d2:84:0d:32:9b:6f:fe:18: e2:fc:f1:e6:a9:24:cc:8b:19:07:3e:0c:05:a5:86:3a:de:5f: ed:6d:b5:06:4d:ed:ef:b8:4d:ee:b1:45:e4:38:b9:6d:6f:28: 99:17:33:c7:42:37:f0:24:50:21:42:31:96:a7:e6:c4:2e:99: a7:4a:2e:0e:9f:f5:3c:65:82:fb:a4:6e:38:99:07:ef:68:09: 5a:2b:8a:8d:33:fb:76:d8:5d:83:11:8b:5e:08:40:fb:20:8e: f2:c2:38:16:ee:13:0a:82:93:e3:21:46:9f:29:f0:f0:c7:d8: 92:d9:27:98:32:15:ff:41:f4:6a:e7:14:bb:d5:95:4f:2d:b3: c1:8a:4c:1f:09:17:98:f8:fc:6f:f7:a9:9e:ac:a6:d4:24:10: 62:29:3e:70:0b:81:0e:a7:a8:ce:8c:db:f9:23:50:85:a5:24: f0:c5:23:4b:be:d7:1d:16:05:bc:21:20:48:cf:e6:2c:70:7e: 1f:60:57:23:6d:63:0f:21:cd:08:d6:ac:05:21:86:33:72:b4: b8:cd:ee:22:58:9d:ba:21:a1:8f:e1:a0:d0:e4:89:47:9a:da: cc:8d:0e:5f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjUwNDE4MjEyMzQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyYzJkYy1lN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbxYCiAaxzlR6frrcRwuTlL9Ik1B8w7qRFm/oIPg901DqQuFRNUnhmHRf3CK /WD75AxQ6Qkk5Xq3FB3oaeK9HS/kAqche2yf4CIc0eoVlpp/EYw4KS2I9suRnKje sT+nTaqdjdcMMjeZ7CEILKNLrxvzoW64jSRNmIbQgtISeiji9Bx7CYYvnH7pq1Jw KAq9IlDJGvnc+ZSm2uQVnylY0VZ/FZtVkaUEcUtqxpeW6hjE8DgyAUlVQM5q28mW x4zyUVZiYKrKTis+20bEXwJo2b3cnkHdgdlQ0miPNWfWqH3gImQ1DExOY7fhqSdL 6PfyfiDFks6UZpo5fqYXlAGHQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJk2D4fF HmJKq3t4Y8h8lu4/qbMkMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJGRTUvOURBRjQ4NkVEREVCMTFFQUIzMEVEOTIxQzRGOUFFMDIvQzY2NDY4OUFF MEY1MTFFQUJCOTZENTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmPgwDQYJKoZIhvcNAQELBQADggEBAJs+ckW4Q8sziVbn ghvTL+GphPEl4FipZH7Qd57ShA0ym2/+GOL88eapJMyLGQc+DAWlhjreX+1ttQZN 7e+4Te6xReQ4uW1vKJkXM8dCN/AkUCFCMZan5sQumadKLg6f9TxlgvukbjiZB+9o CVorio0z+3bYXYMRi14IQPsgjvLCOBbuEwqCk+MhRp8p8PDH2JLZJ5gyFf9B9Grn FLvVlU8ts8GKTB8JF5j4/G/3qZ6sptQkEGIpPnALgQ6nqM6M2/kjUIWlJPDFI0u+ 1x0WBbwhIEjP5ixwfh9gVyNtYw8hzQjWrAUhhjNytLjN7iJYnbohoY/hoNDkiUea 2syNDl8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:27 2025 by rpki-client