$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa File: 52F955A89B1511EA9BEFA53BC4F9AE02.roa (raw, json) Hash identifier: ULVz6gtv7Lj17GsbY0DraIvlqeAo9m+ryNVdzpRY8/w= Subject key identifier: B9:B5:E0:F6:A7:C4:9E:D7:5F:0C:05:8B:0A:5C:4D:D8:E2:A7:17:BD Certificate issuer: /CN=A918B0B9/serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Certificate serial: 09C1 Authority key identifier: 5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa Signing time: Mon 28 Jul 2025 20:30:25 +0000 ROA not before: Mon 28 Jul 2025 20:30:25 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58627 IP address blocks: 43.242.236.0/22 maxlen: 22 43.242.236.0/24 maxlen: 24 43.242.237.0/24 maxlen: 24 43.242.238.0/24 maxlen: 24 43.242.239.0/24 maxlen: 24 103.1.32.0/22 maxlen: 22 103.1.32.0/24 maxlen: 24 103.1.33.0/24 maxlen: 24 103.1.34.0/24 maxlen: 24 103.1.35.0/24 maxlen: 24 103.9.244.0/22 maxlen: 22 103.9.244.0/24 maxlen: 24 103.9.245.0/24 maxlen: 24 103.9.246.0/24 maxlen: 24 103.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2497 (0x9c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0B9, serialNumber=5C5A4FAE4AF01FFDC9275355CCBAB8C810189F54 Validity Not Before: Jul 28 20:30:25 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6887dde1-6ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:3d:06:99:85:30:1c:e8:6f:a4:0d:c1:a2: 34:05:05:cd:1f:72:d8:c2:96:dd:38:50:3f:2b:d7: 1d:0b:3e:24:d6:cc:91:f3:50:c8:21:8f:68:ab:ac: f8:1f:23:54:54:0e:f5:9a:88:1e:19:0c:ec:8e:f2: 1d:0a:22:7b:8d:d0:75:76:99:0a:76:23:42:3a:1b: 60:10:cb:80:16:cf:12:80:70:9a:f1:ab:63:b9:9e: f6:68:c7:3a:a6:de:78:37:91:0a:04:e8:4b:37:b6: 12:83:70:c6:cb:9a:f5:56:ae:35:6a:9b:ac:37:79: cb:2e:39:22:6f:10:fd:c1:e0:4d:38:48:67:08:f1: 4b:11:e2:61:9e:a6:7b:0a:d6:bf:e7:5d:74:77:94: 77:e0:bd:b5:98:a7:01:90:92:d2:82:e2:db:e7:ca: 90:b4:c4:58:87:b0:a7:a3:0b:3b:64:b4:5a:89:e0: e2:49:75:92:f6:f1:8a:43:eb:98:35:df:dd:8f:3f: f6:4e:4c:1d:a5:6e:40:84:1b:25:14:3f:7a:2b:e0: ef:77:fa:8b:87:ea:0a:76:5f:a6:02:df:96:33:31: eb:d2:cb:10:1f:0c:f7:94:36:64:0c:ff:6e:cd:9d: 3c:74:96:f9:56:ad:03:5a:72:38:b4:f2:db:6d:d1: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:E0:F6:A7:C4:9E:D7:5F:0C:05:8B:0A:5C:4D:D8:E2:A7:17:BD X509v3 Authority Key Identifier: keyid:5C:5A:4F:AE:4A:F0:1F:FD:C9:27:53:55:CC:BA:B8:C8:10:18:9F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFpPrkrwH_3JJ1NVzLq4yBAYn1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0B9/9CBF3D908FA011EAAA9BBA18C4F9AE02/52F955A89B1511EA9BEFA53BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.236.0/22 103.1.32.0/22 103.9.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:99:f8:fd:fd:c3:d1:5b:07:3e:65:9c:fc:11:cb:e2:73:b4: c4:23:fd:f7:e0:d1:13:c0:c4:7d:90:d4:c7:36:4a:1c:f6:45: 1d:cd:28:80:69:d4:52:95:87:9b:e9:62:c9:75:af:08:6f:79: ce:77:cc:fa:90:68:1b:0f:3e:6b:2e:01:fc:df:51:27:f6:43: ef:60:07:7b:12:48:f6:0f:93:74:0d:ed:8a:d1:4e:35:22:69: 49:df:eb:dc:bb:36:ca:9f:d7:53:0c:01:3e:77:55:87:30:4f: 13:f3:0f:7c:8d:5a:15:1d:ba:f9:80:e8:aa:0a:fe:8c:0c:40: f2:4d:0d:ab:c1:6e:85:3e:ba:e5:40:4a:07:82:1a:95:61:c3: 02:00:83:c8:ac:ad:d6:c9:91:97:b4:5f:cb:4f:b2:5c:25:c4: dc:29:bb:ed:15:25:42:c3:5b:ba:61:74:31:91:6c:af:a2:74: fa:90:4c:97:81:70:89:19:58:b8:31:d9:ec:5c:87:a9:e3:89: bb:3d:52:f4:db:f3:51:4a:3f:66:23:de:3e:cd:49:2a:21:55: 41:93:0f:4f:76:67:45:c0:73:20:13:c9:4d:6f:dd:17:1c:5d: ae:ec:43:52:9d:3d:41:24:f8:82:ce:1f:80:a8:f2:0f:79:17: bb:60:6d:86 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQjkxMTAvBgNVBAUTKDVDNUE0RkFFNEFGMDFGRkRDOTI3NTM1NUNDQkFCOEM4 MTAxODlGNTQwHhcNMjUwNzI4MjAzMDI1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3ZGRlMS02Y2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXA9BpmFMBzob6QNwaI0BQXNH3LYwpbdOFA/K9cdCz4k1syR81DIIY9oq6z4 HyNUVA71mogeGQzsjvIdCiJ7jdB1dpkKdiNCOhtgEMuAFs8SgHCa8atjuZ72aMc6 pt54N5EKBOhLN7YSg3DGy5r1Vq41apusN3nLLjkibxD9weBNOEhnCPFLEeJhnqZ7 Cta/5110d5R34L21mKcBkJLSguLb58qQtMRYh7Cnows7ZLRaieDiSXWS9vGKQ+uY Nd/djz/2TkwdpW5AhBslFD96K+Dvd/qLh+oKdl+mAt+WMzHr0ssQHwz3lDZkDP9u zZ08dJb5Vq0DWnI4tPLbbdE5PQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLm14Pan xJ7XXwwFiwpcTdjipxe9MB8GA1UdIwQYMBaAFFxaT65K8B/9ySdTVcy6uMgQGJ9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBCOS85Q0JGM0Q5MDhG QTAxMUVBQUE5QkJBMThDNEY5QUUwMi9YRnBQcmtyd0hfM0pKMU5WekxxNHlCQVlu MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hGcFBya3J3SF8zSkoxTlZ6THE0eUJBWW4xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEIwQjkvOUNCRjNEOTA4RkEwMTFFQUFBOUJCQTE4QzRGOUFFMDIvNTJGOTU1QTg5 QjE1MTFFQTlCRUZBNTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr8uwDBAJnASADBAJnCfQwDQYJKoZIhvcNAQELBQADggEB AF6Z+P39w9FbBz5lnPwRy+JztMQj/ffg0RPAxH2Q1Mc2Shz2RR3NKIBp1FKVh5vp Ysl1rwhvec53zPqQaBsPPmsuAfzfUSf2Q+9gB3sSSPYPk3QN7YrRTjUiaUnf69y7 Nsqf11MMAT53VYcwTxPzD3yNWhUduvmA6KoK/owMQPJNDavBboU+uuVASgeCGpVh wwIAg8isrdbJkZe0X8tPslwlxNwpu+0VJULDW7phdDGRbK+idPqQTJeBcIkZWLgx 2exch6njibs9UvTb81FKP2Yj3j7NSSohVUGTD092Z0XAcyATyU1v3RccXa7sQ1Kd PUEk+ILOH4Co8g95F7tgbYY= -----END CERTIFICATE-----Generated at Mon Aug 11 12:53:52 2025 by rpki-client