$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/A2A2D1B6573411F09F6B9016C4F9AE02.roa File: A2A2D1B6573411F09F6B9016C4F9AE02.roa (raw, json) Hash identifier: e1fS+JUr5OLbZbCvOqxxDH4+vhnq0CCS/TLIlGYLHhA= Subject key identifier: 46:F0:03:80:57:B7:21:1B:C5:8A:80:C4:0D:7D:14:32:41:B6:AF:8A Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 34AD Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/A2A2D1B6573411F09F6B9016C4F9AE02.roa Signing time: Wed 02 Jul 2025 11:13:37 +0000 ROA not before: Wed 02 Jul 2025 11:13:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136973 IP address blocks: 203.105.203.0/24 maxlen: 24 203.105.204.0/24 maxlen: 24 203.105.210.0/24 maxlen: 24 203.105.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: Jul 2 11:13:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68651461-993b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:73:dc:2e:43:eb:fe:b8:15:aa:cd:91:ad: a5:b7:6f:73:c6:f4:8f:81:52:64:ed:b2:a9:31:5c: b1:7d:6f:7c:c6:8c:fd:af:d9:57:dd:54:c5:15:76: 95:8e:8b:7c:f2:d0:e2:d4:1b:50:05:62:96:1c:8c: d7:33:22:b4:56:ed:8b:07:ba:aa:0d:42:6d:83:2a: 00:69:39:2d:25:e9:69:ec:5d:e9:f8:e6:f8:cb:22: 78:05:41:38:68:52:50:96:e2:4f:2e:c9:e2:77:23: 39:d4:f6:2d:7a:e1:91:86:e1:b7:9e:c5:18:c6:77: 5d:e3:a8:75:24:a4:c6:82:7a:72:68:6e:0c:73:a4: 5c:12:03:ff:52:9c:05:5c:44:de:3f:4e:67:6f:03: 87:b4:13:2c:ef:ca:c6:5b:a4:7c:2e:b6:51:49:62: 79:b9:90:fd:aa:82:9a:f4:40:e5:de:83:8d:84:32: 57:09:33:18:bf:6f:e2:01:70:07:5c:3b:e2:a0:26: e9:8a:f6:12:c3:a8:c3:b0:7c:85:aa:99:3f:8d:52: 8d:aa:bd:41:02:ea:94:7d:b1:d2:ce:ec:09:d2:b0: 76:d7:b7:a9:ce:ae:85:56:b4:81:52:e6:ac:58:a8: 16:37:ef:c8:a2:e7:d7:33:be:69:be:4e:90:57:b0: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:03:80:57:B7:21:1B:C5:8A:80:C4:0D:7D:14:32:41:B6:AF:8A X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/A2A2D1B6573411F09F6B9016C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.105.203.0-203.105.204.255 203.105.210.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:b4:f6:50:2b:18:c6:8c:47:ea:1d:41:ed:d5:8a:87:28:2e: 1c:ad:a4:db:7f:91:4a:60:38:32:fa:b8:cd:e0:98:69:4b:68: 67:12:0b:a9:73:3a:68:b0:d8:41:5e:6b:a4:ac:b3:b5:04:71: 3f:2f:1c:70:75:f3:08:07:6e:f1:93:b5:93:cb:e4:d6:dd:e9: 1c:16:3c:ce:99:64:c6:c3:80:ea:81:71:7f:57:1f:6a:54:49: ce:5d:2a:5c:58:2b:1b:81:c4:42:6b:5b:b3:98:1a:31:97:d5: cb:6e:3d:84:8a:39:94:09:66:21:27:d9:96:d7:67:42:df:13: 42:b3:fb:66:d6:79:e4:a3:60:9c:b9:93:0d:db:6b:07:01:d3: 2f:c0:c6:14:dd:f4:64:6b:8a:0d:81:b5:76:72:a2:99:e3:12: f2:ed:55:ed:80:23:f3:3b:b1:ac:20:8b:a7:4e:59:ad:df:22: b5:3a:fc:1e:f0:5b:ec:06:a7:4a:ce:fb:49:81:b5:06:af:c2: 45:40:ed:e9:0d:89:11:5b:fa:b6:7d:50:30:c8:0b:b0:fc:1b: c3:dc:51:b1:59:d2:9d:f9:27:07:9f:cf:f7:62:db:fc:00:9c: f0:66:df:d4:1f:84:89:56:32:47:28:29:f1:ca:e2:54:1b:7b: 30:06:88:d4 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwNzAyMTExMzM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1MTQ2MS05OTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuthz3C5D6/64FarNka2lt29zxvSPgVJk7bKpMVyxfW98xoz9r9lX3VTFFXaV jot88tDi1BtQBWKWHIzXMyK0Vu2LB7qqDUJtgyoAaTktJelp7F3p+Ob4yyJ4BUE4 aFJQluJPLsnidyM51PYteuGRhuG3nsUYxndd46h1JKTGgnpyaG4Mc6RcEgP/UpwF XETeP05nbwOHtBMs78rGW6R8LrZRSWJ5uZD9qoKa9EDl3oONhDJXCTMYv2/iAXAH XDvioCbpivYSw6jDsHyFqpk/jVKNqr1BAuqUfbHSzuwJ0rB217epzq6FVrSBUuas WKgWN+/IoufXM75pvk6QV7AtCQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFEbwA4BX tyEbxYqAxA19FDJBtq+KMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I5Q0IvNkY2RURDNjAxRDhFMTFFMjg4NUNERkVDMDhCMDJDRDIvQTJBMkQxQjY1 NzM0MTFGMDlGNkI5MDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAMtpywMEAMtpzAMEActp0jANBgkqhkiG9w0BAQsFAAOC AQEAPbT2UCsYxoxH6h1B7dWKhyguHK2k23+RSmA4Mvq4zeCYaUtoZxILqXM6aLDY QV5rpKyztQRxPy8ccHXzCAdu8ZO1k8vk1t3pHBY8zplkxsOA6oFxf1cfalRJzl0q XFgrG4HEQmtbs5gaMZfVy249hIo5lAlmISfZltdnQt8TQrP7ZtZ55KNgnLmTDdtr BwHTL8DGFN30ZGuKDYG1dnKimeMS8u1V7YAj8zuxrCCLp05Zrd8itTr8HvBb7Aan Ss77SYG1Bq/CRUDt6Q2JEVv6tn1QMMgLsPwbw9xRsVnSnfknB5/P92Lb/ACc8Gbf 1B+EiVYyRygp8criVBt7MAaI1A== -----END CERTIFICATE-----Generated at Sun Aug 10 13:46:33 2025 by rpki-client