$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa File: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (raw, json) Hash identifier: Ty9yOHNci88PkYFwxtboHPq9mv7Uzp9+8kGt6vwUIGE= Subject key identifier: EA:1A:ED:81:76:FA:60:AD:E2:3B:C2:83:52:06:1B:78:F8:73:27:4D Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 11F3 Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa Signing time: Sat 26 Jul 2025 05:24:28 +0000 ROA not before: Sat 26 Jul 2025 05:24:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135273 IP address blocks: 103.211.244.0/22 maxlen: 24 146.196.88.0/22 maxlen: 22 146.196.88.0/24 maxlen: 24 146.196.89.0/24 maxlen: 24 146.196.90.0/24 maxlen: 24 146.196.91.0/24 maxlen: 24 2404:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4595 (0x11f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Jul 26 05:24:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6884668c-cbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:4e:d2:62:57:c8:34:7b:45:a8:af:62:18: 10:ac:95:ca:89:7c:3d:0a:8e:82:3d:be:ef:74:eb: 6f:40:6e:aa:aa:c8:13:72:3a:4f:51:a2:12:54:9d: b6:59:93:60:ad:e4:c9:cb:c2:c9:9e:24:1c:f1:33: 92:c1:68:77:fe:b7:57:0c:27:d4:17:f0:63:02:fc: 50:45:38:84:f0:b7:f6:28:fe:55:e3:1e:60:e2:7f: 78:e3:24:78:44:92:48:c2:51:bd:21:2c:21:41:fc: fb:8d:78:76:1c:3e:4c:c0:2b:64:5d:8c:02:83:d8: 28:c4:08:4b:97:ce:7c:fa:4b:fe:e9:6a:a6:88:7d: 52:4c:7c:98:0b:60:c9:75:7a:22:d2:4c:bd:9a:6f: e6:b7:71:83:1c:b4:8f:ce:aa:63:3e:f9:47:2d:5c: e0:be:ee:8a:e6:eb:39:c6:a5:80:2f:bc:41:f5:7e: 86:f3:4b:df:81:90:1a:af:9e:91:2d:dd:0d:a7:d5: ad:17:c9:cc:38:c9:c8:4b:13:ca:a9:13:3f:e6:82: de:55:be:9c:2d:70:80:ef:ab:66:f3:24:88:e2:3c: f5:62:7d:66:44:41:da:ad:ea:28:5b:9d:b6:bd:35: 97:0a:37:62:93:24:36:13:be:65:da:10:a7:13:94: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1A:ED:81:76:FA:60:AD:E2:3B:C2:83:52:06:1B:78:F8:73:27:4D X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.244.0/22 146.196.88.0/22 IPv6: 2404:a340::/32 Signature Algorithm: sha256WithRSAEncryption bc:8e:7a:2c:dc:99:4a:71:bf:d3:cc:3d:a9:40:0d:6f:1d:3b: 34:86:ec:f4:13:d0:3b:d8:e0:5e:8a:a5:a3:fb:88:b2:49:52: be:36:7b:eb:e8:cd:83:ff:8e:64:66:61:80:a2:cd:e8:b0:f0: 34:08:d2:62:90:8c:d8:94:9b:0f:e6:72:86:f9:19:05:7c:fa: 51:42:43:63:37:70:36:b4:46:8d:2b:7e:7a:33:ec:3f:69:fc: 5e:57:5c:d9:da:7b:80:e8:02:ee:66:56:71:38:f7:4e:ed:6a: 30:66:8b:a1:bd:3f:46:67:30:92:7f:b2:6a:e8:d7:c6:91:49: e7:34:25:6b:9d:67:78:4d:93:59:88:33:f9:75:2b:aa:6f:84: e1:6f:29:7d:97:57:8e:ff:c8:f4:96:f7:d2:19:9f:56:a4:aa: dd:df:66:3f:91:ae:30:03:1c:c7:63:df:cb:c7:ba:2f:44:d9: 37:96:c0:9b:ef:b5:1c:06:19:71:8e:72:ae:8e:da:66:79:cd: c6:a8:8c:e0:70:a7:5e:fa:56:28:f6:4d:e5:9f:58:ad:ce:01: 19:06:a4:0d:ce:cc:86:a6:d9:5e:42:50:c9:b8:90:4d:fb:c0: 24:cf:a1:3c:cf:5c:1d:40:2b:d5:8b:39:1e:7d:fc:6d:1f:f8: 03:8b:47:8b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUwNzI2MDUyNDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0NjY4Yy1jYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+dO0mJXyDR7RaivYhgQrJXKiXw9Co6CPb7vdOtvQG6qqsgTcjpPUaISVJ22 WZNgreTJy8LJniQc8TOSwWh3/rdXDCfUF/BjAvxQRTiE8Lf2KP5V4x5g4n944yR4 RJJIwlG9ISwhQfz7jXh2HD5MwCtkXYwCg9goxAhLl858+kv+6WqmiH1STHyYC2DJ dXoi0ky9mm/mt3GDHLSPzqpjPvlHLVzgvu6K5us5xqWAL7xB9X6G80vfgZAar56R Ld0Np9WtF8nMOMnISxPKqRM/5oLeVb6cLXCA76tm8ySI4jz1Yn1mREHareooW522 vTWXCjdikyQ2E75l2hCnE5TZ5QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOoa7YF2 +mCt4jvCg1IGG3j4cydNMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY2NDYvRDkyREQwMzhGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvNUQ1RkVERTBE M0FFMTFFQjkwOEQ2NTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn0/QDBAKSxFgwDQQCAAIwBwMFACQEo0AwDQYJKoZIhvcN AQELBQADggEBALyOeizcmUpxv9PMPalADW8dOzSG7PQT0DvY4F6KpaP7iLJJUr42 e+vozYP/jmRmYYCizeiw8DQI0mKQjNiUmw/mcob5GQV8+lFCQ2M3cDa0Ro0rfnoz 7D9p/F5XXNnae4DoAu5mVnE4907tajBmi6G9P0ZnMJJ/smro18aRSec0JWudZ3hN k1mIM/l1K6pvhOFvKX2XV47/yPSW99IZn1akqt3fZj+RrjADHMdj38vHui9E2TeW wJvvtRwGGXGOcq6O2mZ5zcaojOBwp176Vij2TeWfWK3OARkGpA3OzIam2V5CUMm4 kE37wCTPoTzPXB1AK9WLOR59/G0f+AOLR4s= -----END CERTIFICATE-----Generated at Sun Aug 10 19:00:55 2025 by rpki-client