$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa File: C563005A45C711F0A8D67529C4F9AE02.roa (raw, json) Hash identifier: rf2KqwsvH6KBtE4TV4d57herNtuuJVoLoX4UF6PtFEI= Subject key identifier: AD:F3:50:F0:03:5A:FA:9C:B6:57:ED:AC:76:DC:3A:79:C8:09:B7:DD Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3616 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa Signing time: Tue 10 Jun 2025 06:54:36 +0000 ROA not before: Tue 10 Jun 2025 06:54:36 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58396 IP address blocks: 27.54.116.0/24 maxlen: 24 27.54.117.0/24 maxlen: 24 27.54.118.0/24 maxlen: 24 103.11.21.0/24 maxlen: 24 103.11.222.0/24 maxlen: 24 103.225.172.0/23 maxlen: 23 103.225.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13846 (0x3616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jun 10 06:54:36 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6847d6ac-afd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:91:56:8c:9b:7f:35:7c:eb:7a:2b:22:30: ec:88:9c:0c:30:54:c6:88:c6:cd:b3:df:81:92:cf: 5b:bf:75:13:c1:de:ee:02:d8:07:15:17:13:39:06: 3b:b3:12:98:59:20:d5:f2:c0:74:72:c5:8e:93:3f: 97:30:33:4a:78:85:69:01:b0:43:ff:65:5f:a7:0e: 5f:82:70:7b:2c:40:2b:bc:c8:a5:47:1f:a5:b3:a3: 80:34:b3:7a:2b:3f:65:f6:e4:c7:fd:b7:9a:24:d7: 18:5b:a8:5b:92:72:ad:14:7a:c6:70:92:da:3d:e2: b4:77:e8:63:7e:12:2a:a5:37:2c:f4:3f:b5:3c:58: 6e:de:bf:4e:5c:56:8d:cf:99:bd:25:87:71:96:c9: 33:ba:32:61:8e:75:15:0d:47:c8:29:ab:f7:9d:7e: 56:b6:4b:6f:d2:ff:d0:38:f9:a6:d4:f1:d4:72:41: 09:06:12:0f:50:b1:bf:63:90:61:b4:4d:24:07:5b: 42:42:7f:d0:d3:4b:ac:6d:59:79:f9:bc:22:58:d4: 05:7d:ee:82:4b:2a:33:ee:6a:85:f9:99:91:01:7e: b1:70:e0:cf:72:94:d3:3a:41:a2:5a:79:dc:0f:d6: ea:2c:db:de:dd:55:78:66:b0:86:ee:02:33:a2:d5: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F3:50:F0:03:5A:FA:9C:B6:57:ED:AC:76:DC:3A:79:C8:09:B7:DD X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/C563005A45C711F0A8D67529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.54.116.0-27.54.118.255 103.11.21.0/24 103.11.222.0/24 103.225.172.0/23 Signature Algorithm: sha256WithRSAEncryption 14:23:91:25:b0:e4:8b:0a:60:ab:39:b4:55:c0:96:e2:e2:4a: b5:35:3e:57:11:a6:db:81:16:71:9d:0f:6b:94:a4:d7:f1:34: 23:fa:07:5c:b6:73:b8:97:a4:7f:d5:3f:00:01:91:39:ba:16: f6:4c:9f:c1:13:0a:2f:e8:d3:3e:a6:47:24:81:78:5c:e8:e0: df:b5:7e:f8:4b:04:0e:be:16:c3:41:91:1b:c2:1e:68:70:0c: 7c:41:a9:cf:37:db:fd:c9:6f:71:0e:77:53:4c:93:ed:0f:aa: 47:0f:49:17:da:d7:5d:26:a1:a3:2f:e3:6e:26:cc:d7:8c:32: aa:77:da:cb:85:52:03:0f:1b:14:84:e7:ac:b0:b3:bc:22:21: cc:17:17:fd:d9:2c:0b:54:83:1e:67:88:5a:48:25:0f:14:71: 1b:d7:aa:f4:fe:a8:0b:39:5a:23:fc:43:fb:9c:4b:2a:47:f7: 7f:57:73:d0:c3:d1:52:a5:35:f6:a1:e8:d9:be:7c:8e:3e:6f: 8c:b0:7b:b7:1a:b6:28:22:21:1b:fc:12:c4:3a:c2:ca:67:34: e6:b1:a5:a8:56:0d:e1:79:e3:39:f1:db:35:3c:d8:95:14:cd: 8b:24:1b:64:60:d0:d0:1b:48:58:7d:78:dc:7a:2f:bb:96:2d: 38:1f:a1:86 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICNhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwNjEwMDY1NDM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ3ZDZhYy1hZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkmRVoybfzV863orIjDsiJwMMFTGiMbNs9+Bks9bv3UTwd7uAtgHFRcTOQY7 sxKYWSDV8sB0csWOkz+XMDNKeIVpAbBD/2Vfpw5fgnB7LEArvMilRx+ls6OANLN6 Kz9l9uTH/beaJNcYW6hbknKtFHrGcJLaPeK0d+hjfhIqpTcs9D+1PFhu3r9OXFaN z5m9JYdxlskzujJhjnUVDUfIKav3nX5Wtktv0v/QOPmm1PHUckEJBhIPULG/Y5Bh tE0kB1tCQn/Q00usbVl5+bwiWNQFfe6CSyoz7mqF+ZmRAX6xcODPcpTTOkGiWnnc D9bqLNve3VV4ZrCG7gIzotUANwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFK3zUPAD WvqctlftrHbcOnnICbfdMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQzU2MzAwNUE0 NUM3MTFGMEE4RDY3NTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCAwDAMEAhs2dAMEABs2dgMEAGcLFQMEAGcL3gMEAWfhrDANBgkq hkiG9w0BAQsFAAOCAQEAFCORJbDkiwpgqzm0VcCW4uJKtTU+VxGm24EWcZ0Pa5Sk 1/E0I/oHXLZzuJekf9U/AAGROboW9kyfwRMKL+jTPqZHJIF4XOjg37V++EsEDr4W w0GRG8IeaHAMfEGpzzfb/clvcQ53U0yT7Q+qRw9JF9rXXSahoy/jbibM14wyqnfa y4VSAw8bFITnrLCzvCIhzBcX/dksC1SDHmeIWkglDxRxG9eq9P6oCzlaI/xD+5xL Kkf3f1dz0MPRUqU19qHo2b58jj5vjLB7txq2KCIhG/wSxDrCymc05rGlqFYN4Xnj OfHbNTzYlRTNiyQbZGDQ0BtIWH143Hovu5YtOB+hhg== -----END CERTIFICATE-----Generated at Sun Jun 15 04:53:41 2025 by rpki-client