$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa File: 5E40CDC83D2311F0BC3F7332C4F9AE02.roa (raw, json) Hash identifier: Zdp2LQJombUsbdMjNcAsUKc9Y0LQAHUEDHrWbes1/vs= Subject key identifier: 85:0F:53:8C:CF:8E:A9:B6:F9:2D:DB:85:20:88:E9:6D:2A:B7:83:84 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3694 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:52:54 +0000 ROA not before: Sat 02 Aug 2025 15:52:54 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138077 IP address blocks: 36.50.46.0/23 maxlen: 24 103.137.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13972 (0x3694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:52:54 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e3456-6936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:a8:48:d9:67:15:51:db:0f:f9:5b:f3:3b: e3:be:b6:3a:c4:58:fb:1b:08:ec:ca:c6:a4:27:19: 22:01:f8:05:46:35:e2:d2:ff:4d:f4:d7:38:ae:72: 05:7e:0e:6e:0e:16:24:1a:7b:d8:14:9e:4c:64:50: 9d:70:9a:7e:d3:7e:93:95:ed:d2:12:5d:25:85:ac: cf:83:a2:2e:0d:bb:8c:34:f5:64:81:64:fd:ef:f2: 91:9d:17:9f:02:8f:6a:93:6b:55:f8:0f:87:b1:ff: 4b:43:a9:6a:b3:a2:25:3d:05:c3:55:e0:37:27:71: f1:1f:01:9d:7c:db:f3:01:34:61:cd:c3:c3:45:75: ce:4e:bd:2c:76:a7:98:d2:33:af:42:99:39:63:5d: 06:d6:e2:69:26:a7:cd:c7:81:d4:19:f1:5e:de:23: f4:00:5f:cf:df:c1:4f:b6:e1:8c:42:66:79:22:06: d2:1d:b2:38:26:e7:a5:ea:c0:ab:ed:ff:45:99:b4: e4:ac:1f:da:8a:68:88:ce:22:f9:de:ad:41:80:3d: dd:66:6f:ec:a5:02:8b:87:71:92:32:41:80:1c:24: 81:c2:32:3d:50:09:22:96:9f:af:1d:65:6e:84:b5: fc:4d:e3:96:8c:75:91:61:5b:38:9c:b8:8b:a0:16: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:53:8C:CF:8E:A9:B6:F9:2D:DB:85:20:88:E9:6D:2A:B7:83:84 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5E40CDC83D2311F0BC3F7332C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.46.0/23 103.137.38.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:38:82:85:c1:ea:92:3d:00:49:f2:08:c6:7a:d7:36:8c:b8: ab:de:42:b4:f1:49:8d:92:95:88:7f:19:79:bd:c2:a0:46:de: 0d:e8:95:ba:54:40:cd:e9:56:5e:fe:aa:6d:1f:f9:c7:d4:bf: 28:9f:23:fd:c6:7f:f1:07:4e:67:64:46:77:1f:29:0a:10:0e: 09:8f:7b:dc:21:51:78:a7:b2:9b:ea:22:af:40:20:55:1d:55: 60:69:56:fd:9d:34:ec:50:4e:c1:2e:89:b8:b4:3e:81:33:23: bc:1f:bf:66:0c:61:03:90:e3:e6:73:8b:c9:49:ca:8e:5e:a0: e5:20:cf:eb:da:0d:64:86:0d:a6:0e:ad:29:ae:e1:1f:bd:f3: 46:c7:6f:f9:7a:b1:dd:e0:a5:da:88:20:91:3f:88:69:d0:27: d2:4b:56:84:5f:8f:2a:04:93:07:83:02:fd:c6:2c:4f:59:cb: 8c:65:b6:3f:03:13:5a:d6:20:a1:cc:b1:74:11:b0:d0:2b:67: 89:4d:44:9d:f7:55:21:c1:c1:e5:f7:99:8b:a3:0d:d3:dd:50: db:d2:94:c3:0a:1a:ce:82:ed:16:26:48:d1:35:02:0b:ec:76: 01:74:e3:b0:b7:00:eb:cf:5e:04:35:cc:95:3e:39:50:95:6d: 21:35:4c:0e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MjU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ1Ni02OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQSoSNlnFVHbD/lb8zvjvrY6xFj7GwjsysakJxkiAfgFRjXi0v9N9Nc4rnIF fg5uDhYkGnvYFJ5MZFCdcJp+036Tle3SEl0lhazPg6IuDbuMNPVkgWT97/KRnRef Ao9qk2tV+A+Hsf9LQ6lqs6IlPQXDVeA3J3HxHwGdfNvzATRhzcPDRXXOTr0sdqeY 0jOvQpk5Y10G1uJpJqfNx4HUGfFe3iP0AF/P38FPtuGMQmZ5IgbSHbI4Juel6sCr 7f9FmbTkrB/aimiIziL53q1BgD3dZm/spQKLh3GSMkGAHCSBwjI9UAkilp+vHWVu hLX8TeOWjHWRYVs4nLiLoBZuVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIUPU4zP jqm2+S3bhSCI6W0qt4OEMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNUU0MENEQzgz RDIzMTFGMEJDM0Y3MzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEkMi4DBAFniSYwDQYJKoZIhvcNAQELBQADggEBADw4goXB 6pI9AEnyCMZ61zaMuKveQrTxSY2SlYh/GXm9wqBG3g3olbpUQM3pVl7+qm0f+cfU vyifI/3Gf/EHTmdkRncfKQoQDgmPe9whUXinspvqIq9AIFUdVWBpVv2dNOxQTsEu ibi0PoEzI7wfv2YMYQOQ4+Zzi8lJyo5eoOUgz+vaDWSGDaYOrSmu4R+980bHb/l6 sd3gpdqIIJE/iGnQJ9JLVoRfjyoEkweDAv3GLE9Zy4xltj8DE1rWIKHMsXQRsNAr Z4lNRJ33VSHBweX3mYujDdPdUNvSlMMKGs6C7RYmSNE1AgvsdgF047C3AOvPXgQ1 zJU+OVCVbSE1TA4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:28 2025 by rpki-client