$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa File: 5B5592F07B0711ED9D595969C4F9AE02.roa (raw, json) Hash identifier: ifSxbXnY7sYMQ8euk4GLmU7jgSJs5yw2GtjSeYMB3Jg= Subject key identifier: FA:4C:55:1C:A1:6B:32:72:E1:C3:0C:BB:8B:26:B1:77:B4:EE:C1:F2 Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Certificate serial: 08E5 Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa Signing time: Wed 30 Jul 2025 21:01:31 +0000 ROA not before: Wed 30 Jul 2025 21:01:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136429 IP address blocks: 103.152.106.0/24 maxlen: 24 103.152.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2277 (0x8e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EDAC, serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77 Validity Not Before: Jul 30 21:01:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a882b-72e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:da:66:0e:c3:de:f2:70:50:3d:7b:b4:84:7e: 99:8d:8c:3e:6a:ad:57:39:4e:ee:aa:65:e8:7b:64: 3f:ac:16:b1:72:47:02:7b:47:f3:71:b1:39:8d:9d: ca:64:01:59:5d:6e:74:48:3f:57:6b:fc:77:9d:03: e5:62:f9:41:08:68:f0:43:a8:71:42:5e:f8:85:77: 5c:e1:22:31:41:15:69:1e:30:01:c9:8a:d0:e4:bd: 92:15:2b:60:31:72:c6:37:9d:47:99:35:69:06:73: 04:ea:75:95:83:15:6a:34:38:ff:6e:e9:35:ae:c9: 1d:4f:ff:c6:02:65:d5:d9:76:cc:1d:74:8d:29:89: 1a:0e:b6:99:23:fd:66:d2:a0:79:ec:84:66:c0:14: 02:62:3f:e3:2c:90:54:6e:0b:e4:bf:25:b1:51:f0: 8d:cb:16:c2:93:45:a4:b8:57:5d:28:df:a5:16:5f: 3f:cd:65:71:1c:94:37:d2:f4:23:a8:97:bc:0d:51: 30:42:14:2c:46:b1:bd:fb:06:11:5f:cb:a0:8f:b1: 62:0e:6f:04:f3:a6:d7:93:c3:be:45:cf:02:2e:28: a0:e6:85:aa:20:a7:cb:b9:e2:37:64:5b:53:a2:10: 0b:4a:0f:5e:01:16:2d:25:9a:31:7f:54:16:69:2e: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:55:1C:A1:6B:32:72:E1:C3:0C:BB:8B:26:B1:77:B4:EE:C1:F2 X509v3 Authority Key Identifier: keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.106.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:37:8f:c8:d5:bb:ca:97:8d:1a:99:6e:31:a0:b3:9f:13:70: 02:c9:7c:e5:f9:68:47:1f:d9:03:a7:24:fe:73:6d:87:a0:f3: 64:8d:2e:74:f4:1d:39:7e:67:c4:03:ef:2c:66:49:c9:f6:85: 9c:0d:7a:d3:bd:1c:c9:4e:ca:04:fc:c1:a7:5e:cc:29:57:94: 13:87:1a:58:42:55:07:5d:9e:80:5a:2e:8a:e5:dd:b4:69:55: f1:99:14:8c:75:6d:7d:51:8d:d2:a5:9e:9d:d7:d1:d6:dc:b9: 05:7d:c0:a1:a8:30:bd:33:8d:a9:82:38:4d:84:d3:ca:a1:f7: 17:fd:d8:01:b9:3c:68:dc:cb:f3:a0:61:07:7c:d5:db:9b:39: 5b:c0:06:5a:5c:9e:c4:66:79:5c:79:fa:57:0d:e0:04:eb:27: 33:4f:6e:3a:ce:13:01:34:2c:c5:5d:80:31:68:76:72:78:ac: bf:47:08:85:c1:e4:2c:36:a4:b1:85:7f:d8:c9:0e:53:f3:56: 65:d4:69:e3:a3:6c:7b:d1:57:76:78:b9:43:b2:93:3a:82:a7: a5:99:bf:5f:9f:e8:d2:e5:a8:54:c3:d3:cf:78:6f:f5:f7:5a: 75:10:7f:aa:fb:fd:80:ed:a6:b8:27:d5:98:ec:1c:16:e9:25: 90:82:52:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3 MUYyOURGNzcwHhcNMjUwNzMwMjEwMTMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhODgyYi03MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tpmDsPe8nBQPXu0hH6ZjYw+aq1XOU7uqmXoe2Q/rBaxckcCe0fzcbE5jZ3K ZAFZXW50SD9Xa/x3nQPlYvlBCGjwQ6hxQl74hXdc4SIxQRVpHjAByYrQ5L2SFStg MXLGN51HmTVpBnME6nWVgxVqNDj/buk1rskdT//GAmXV2XbMHXSNKYkaDraZI/1m 0qB57IRmwBQCYj/jLJBUbgvkvyWxUfCNyxbCk0WkuFddKN+lFl8/zWVxHJQ30vQj qJe8DVEwQhQsRrG9+wYRX8ugj7FiDm8E86bXk8O+Rc8CLiig5oWqIKfLueI3ZFtT ohALSg9eARYtJZoxf1QWaS73kwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPpMVRyh azJy4cMMu4smsXe07sHyMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1 MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VEQUMvNTgzQUYyMDRCNTA3MTFFQUJDQzg5NDBEQzRGOUFFMDIvNUI1NTkyRjA3 QjA3MTFFRDlENTk1OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmGowDQYJKoZIhvcNAQELBQADggEBAGw3j8jVu8qXjRqZ bjGgs58TcALJfOX5aEcf2QOnJP5zbYeg82SNLnT0HTl+Z8QD7yxmScn2hZwNetO9 HMlOygT8wadezClXlBOHGlhCVQddnoBaLorl3bRpVfGZFIx1bX1RjdKlnp3X0dbc uQV9wKGoML0zjamCOE2E08qh9xf92AG5PGjcy/OgYQd81dubOVvABlpcnsRmeVx5 +lcN4ATrJzNPbjrOEwE0LMVdgDFodnJ4rL9HCIXB5Cw2pLGFf9jJDlPzVmXUaeOj bHvRV3Z4uUOykzqCp6WZv1+f6NLlqFTD0894b/X3WnUQf6r7/YDtprgn1ZjsHBbp JZCCUmk= -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:14 2025 by rpki-client