$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa File: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (raw, json) Hash identifier: oBbIK682wSEUP5TvritJ4KxrBNWU5rxHl4orE4VE3u4= Subject key identifier: 2C:6C:F9:D4:E1:4F:57:99:F1:D5:00:CE:4E:5C:12:AC:5B:D7:A0:62 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1F62 Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa Signing time: Sat 30 Aug 2025 16:35:21 +0000 ROA not before: Sat 30 Aug 2025 16:35:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136167 IP address blocks: 203.223.17.0/24 maxlen: 24 203.223.18.0/24 maxlen: 24 203.223.19.0/24 maxlen: 24 203.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8034 (0x1f62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b32848-9161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:d5:16:53:07:93:4d:87:d9:b6:d0:35:b3: 84:16:86:03:0d:5f:4b:e5:a1:e3:1e:64:77:e4:a4: dc:9f:6b:c6:df:dc:13:fb:d9:fd:28:22:00:f0:89: 22:36:e2:30:ef:b7:c2:75:d7:d9:ed:74:e2:11:70: e6:e4:88:b7:85:10:ec:2f:38:8e:3d:f7:05:b4:1d: a7:5d:b1:7a:20:b4:89:68:44:1e:31:3d:2b:7d:80: 05:21:59:60:74:08:08:09:53:5b:1f:f4:cd:d9:55: 6e:25:21:a5:0c:74:54:fe:76:fd:8f:21:1c:80:a4: e8:2d:6a:5e:07:06:51:65:2b:fa:48:3b:b7:54:39: 1a:49:23:a4:b5:3a:a3:ce:3d:3b:d0:00:53:fb:11: c1:65:68:02:78:e0:2d:bc:36:55:12:5e:04:07:96: 1b:32:1b:66:5a:0e:de:e7:76:eb:05:a4:75:b7:9c: 2a:57:d5:d0:77:e9:9c:16:b4:d7:f1:de:be:3d:f2: 81:74:b5:66:5d:3e:c1:f6:6e:aa:90:e5:1b:ef:86: d6:c9:1b:3f:bd:2e:01:4d:51:7a:19:60:13:26:7f: 06:d0:a3:32:5d:0c:e4:a6:35:0c:fc:c7:20:67:79: f0:77:c8:20:12:88:d1:4a:d7:32:ce:d0:ac:76:19: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6C:F9:D4:E1:4F:57:99:F1:D5:00:CE:4E:5C:12:AC:5B:D7:A0:62 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52ABDAEA039D11EF8E96E084C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.223.17.0-203.223.20.255 Signature Algorithm: sha256WithRSAEncryption 2f:7e:0c:c8:67:cd:a5:b3:8a:34:6e:71:63:b2:b0:92:0c:ad: 1b:4d:1c:47:cd:78:f1:46:8d:98:21:26:39:43:3f:bc:47:4f: c5:27:1a:d4:a2:79:29:e3:a7:b6:84:d9:18:5b:86:a4:79:14: d2:ba:18:22:48:a4:73:28:92:16:e5:9a:a1:12:54:2e:8d:d1: be:80:8c:df:0f:2d:ed:74:bc:6e:fe:8c:a5:7f:64:8e:f1:c5: 24:67:e5:57:fe:ca:04:c6:36:b5:33:f4:fd:85:ee:fa:91:84: 8b:48:5e:df:f5:0b:3d:5e:a6:fe:64:68:c3:40:5e:10:78:78: 39:fd:e6:e4:9d:e0:be:69:09:77:07:ee:2e:fb:e0:6d:08:c5: 59:36:0c:ce:79:ce:79:43:63:0e:0a:a8:43:8e:d9:d7:b2:36: d7:41:77:12:6a:be:9c:52:7a:d8:2d:77:07:8f:94:a5:d8:2f: ac:90:81:a4:eb:44:ef:4f:b2:b5:3b:2b:0a:39:29:97:82:8f: 6b:15:1b:79:7d:18:d9:6a:d5:50:bb:2b:f5:48:1e:d9:d6:74: 0c:ad:29:77:6b:44:be:39:b1:be:12:6d:30:44:4e:25:95:44: 59:15:18:bb:83:50:c2:b1:16:5a:7d:1f:a1:20:cc:77:63:cd: cb:b7:65:90 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICH2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzMjg0OC05MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5jVFlMHk02H2bbQNbOEFoYDDV9L5aHjHmR35KTcn2vG39wT+9n9KCIA8Iki NuIw77fCddfZ7XTiEXDm5Ii3hRDsLziOPfcFtB2nXbF6ILSJaEQeMT0rfYAFIVlg dAgICVNbH/TN2VVuJSGlDHRU/nb9jyEcgKToLWpeBwZRZSv6SDu3VDkaSSOktTqj zj070ABT+xHBZWgCeOAtvDZVEl4EB5YbMhtmWg7e53brBaR1t5wqV9XQd+mcFrTX 8d6+PfKBdLVmXT7B9m6qkOUb74bWyRs/vS4BTVF6GWATJn8G0KMyXQzkpjUM/Mcg Z3nwd8ggEojRStcyztCsdhnUNwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCxs+dTh T1eZ8dUAzk5cEqxb16BiMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNTJBQkRBRUEw MzlEMTFFRjhFOTZFMDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAMvfEQMEAMvfFDANBgkqhkiG9w0BAQsFAAOCAQEAL34M yGfNpbOKNG5xY7KwkgytG00cR8148UaNmCEmOUM/vEdPxSca1KJ5KeOntoTZGFuG pHkU0roYIkikcyiSFuWaoRJULo3RvoCM3w8t7XS8bv6MpX9kjvHFJGflV/7KBMY2 tTP0/YXu+pGEi0he3/ULPV6m/mRow0BeEHh4Of3m5J3gvmkJdwfuLvvgbQjFWTYM znnOeUNjDgqoQ47Z17I210F3Emq+nFJ62C13B4+UpdgvrJCBpOtE70+ytTsrCjkp l4KPaxUbeX0Y2WrVULsr9Uge2dZ0DK0pd2tEvjmxvhJtMEROJZVEWRUYu4NQwrEW Wn0foSDMd2PNy7dlkA== -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:56 2025 by rpki-client