$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa File: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (raw, json) Hash identifier: WJcxZE//v/qgwM5L8UFDfgSzlZEjCMButWifhGqcTAY= Subject key identifier: 38:02:5E:4C:4A:23:99:CA:31:73:D1:4C:FD:B5:CF:A7:FD:91:AF:BE Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Certificate serial: 09FE Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa Signing time: Mon 12 May 2025 20:25:57 +0000 ROA not before: Mon 12 May 2025 20:25:57 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.150.46.0/24 maxlen: 24 103.150.47.0/24 maxlen: 24 2001:df3:5580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Validity Not Before: May 12 20:25:57 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68225955-4b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:86:53:35:9f:ee:bd:8b:91:f0:fb:a8:e8: bb:c2:19:a2:9e:e4:b9:11:5f:d2:25:10:13:47:c7: cb:b5:55:6a:47:70:ea:70:cb:6b:bc:b7:49:48:8b: fe:dd:18:e3:ac:21:cf:a1:04:38:45:a5:32:4b:18: 64:42:c0:79:d2:8a:51:3e:ec:ef:97:85:ab:88:44: 15:78:60:2a:2e:c4:9e:63:eb:67:18:a5:de:c5:39: 54:31:0e:bf:cd:92:24:81:81:a7:65:62:74:3a:e9: de:2a:04:9c:45:1a:53:cc:32:ec:fb:16:5b:7f:bf: 82:14:e0:f1:a0:06:72:91:57:fe:fe:45:bd:41:b9: e4:5c:c1:5c:69:9e:56:06:a7:2b:58:88:db:88:8e: d4:25:19:db:1e:01:97:f7:82:15:fc:86:2d:36:32: 4d:86:18:dd:99:6d:7a:8b:79:fb:dd:c8:3c:aa:13: 9f:39:ff:a3:dd:d4:84:15:8a:d4:73:1f:2e:e5:7f: b1:48:f5:f2:e0:4d:6c:42:62:b7:dd:7d:3c:21:95: 0f:07:cf:e9:5b:58:bf:8a:3e:e2:7c:80:d8:d8:66: ad:1d:4f:e8:9a:06:63:72:40:8d:17:91:02:98:7f: d9:d0:08:91:af:68:cc:aa:59:98:a5:ad:f7:ba:96: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:02:5E:4C:4A:23:99:CA:31:73:D1:4C:FD:B5:CF:A7:FD:91:AF:BE X509v3 Authority Key Identifier: keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.46.0/23 IPv6: 2001:df3:5580::/48 Signature Algorithm: sha256WithRSAEncryption 0e:e2:99:96:78:18:3d:80:c8:38:11:71:cb:3c:0a:2f:22:95: fa:2e:64:7f:6e:a4:d5:ef:f5:72:cd:37:44:5f:ca:70:42:ce: 49:68:db:a3:fe:70:7c:42:d6:26:cf:1a:d0:64:90:15:f5:af: bb:52:3c:2e:f9:54:52:81:f4:47:f5:1e:35:08:ea:d3:15:d9: dd:a8:33:f6:8c:3c:a7:13:37:6a:ac:a6:c8:87:a1:c3:30:88: f6:f2:d6:e4:f9:28:8c:75:1f:3d:a8:98:bf:a8:df:c4:f9:7d: bb:ac:08:73:4a:34:74:ac:64:2a:03:ec:a1:87:ee:70:03:d7: 5a:ed:25:61:f6:2c:42:59:ac:c9:aa:b1:54:3c:53:e4:e8:24: a7:54:64:b2:a0:d8:4b:c2:fb:37:98:86:f9:dc:0c:43:6f:c2: 98:f1:2e:b8:98:42:56:0e:bf:1d:3d:ea:02:a7:a6:0b:1d:89: d8:28:9e:a7:80:af:d3:9d:60:b8:f2:96:b0:d7:d3:bd:67:1a: 53:03:a4:a8:60:79:31:af:04:73:0a:d1:34:35:3e:ae:e6:18: ef:30:35:81:f6:0a:ed:0c:53:47:df:ee:05:bc:2e:1c:92:4c: 0c:49:2a:e4:33:3d:40:61:2b:ce:11:b6:ad:0f:4a:d2:06:c3: 59:19:df:6a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVENEYxMTAvBgNVBAUTKDYwMjgxOTkwMzBDOTk0MkExNDRBQTE2QkZCMzA3OEU3 NDFGNkVDMjMwHhcNMjUwNTEyMjAyNTU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIyNTk1NS00YjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NiGUzWf7r2LkfD7qOi7whminuS5EV/SJRATR8fLtVVqR3DqcMtrvLdJSIv+ 3RjjrCHPoQQ4RaUySxhkQsB50opRPuzvl4WriEQVeGAqLsSeY+tnGKXexTlUMQ6/ zZIkgYGnZWJ0OuneKgScRRpTzDLs+xZbf7+CFODxoAZykVf+/kW9QbnkXMFcaZ5W BqcrWIjbiI7UJRnbHgGX94IV/IYtNjJNhhjdmW16i3n73cg8qhOfOf+j3dSEFYrU cx8u5X+xSPXy4E1sQmK33X08IZUPB8/pW1i/ij7ifIDY2GatHU/omgZjckCNF5EC mH/Z0AiRr2jMqlmYpa33upbLBwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDgCXkxK I5nKMXPRTP21z6f9ka++MB8GA1UdIwQYMBaAFGAoGZAwyZQqFEqha/sweOdB9uwj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ0Ri81ODVGNEQwRTc4 NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxDb1VTcUZyLXpCNDUwSDI3 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZ1prRERKbENvVVNxRnItekI0NTBIMjdDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVENEYvNTg1RjREMEU3ODc5MTFFQUFFQkEzQjM4QzRGOUFFMDIvNUQyQjA2MTZB OUMwMTFFQUJBQUI0NjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnli4wDwQCAAIwCQMHACABDfNVgDANBgkqhkiG9w0BAQsF AAOCAQEADuKZlngYPYDIOBFxyzwKLyKV+i5kf26k1e/1cs03RF/KcELOSWjbo/5w fELWJs8a0GSQFfWvu1I8LvlUUoH0R/UeNQjq0xXZ3agz9ow8pxM3aqymyIehwzCI 9vLW5PkojHUfPaiYv6jfxPl9u6wIc0o0dKxkKgPsoYfucAPXWu0lYfYsQlmsyaqx VDxT5Ogkp1RksqDYS8L7N5iG+dwMQ2/CmPEuuJhCVg6/HT3qAqemCx2J2Ciep4Cv 051guPKWsNfTvWcaUwOkqGB5Ma8EcwrRNDU+ruYY7zA1gfYK7QxTR9/uBbwuHJJM DEkq5DM9QGErzhG2rQ9K0gbDWRnfag== -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:42 2025 by rpki-client