$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa File: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (raw, json) Hash identifier: 9cs2YHfBiZAsHcT0rcWwzMgGI3sfprOUnMUWHbiLiM8= Subject key identifier: ED:2F:A6:F0:65:F3:61:B3:8C:25:A1:DF:72:F9:74:AD:B1:F3:05:D4 Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 06A9 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:57:16 +0000 ROA not before: Fri 30 May 2025 23:33:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 131273 IP address blocks: 103.68.138.0/24 maxlen: 24 103.117.106.0/24 maxlen: 24 103.166.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: May 30 23:33:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a453cc-8cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:1f:1e:e6:2f:92:cd:5b:9d:92:24:c4:81: a9:5e:87:d0:b9:39:12:b7:df:ae:10:37:1b:d8:3e: 67:1f:81:32:38:2d:f9:bb:dd:d3:50:2d:3e:41:36: fa:3a:7a:3e:d2:75:e0:d1:3c:77:79:26:72:64:ab: 26:bb:3d:7b:63:a7:b7:3d:86:11:47:01:20:dc:70: 70:16:82:68:d3:3c:3e:0c:b5:7a:20:1b:1d:48:64: da:fd:ad:09:a2:d6:7b:e1:48:61:97:c8:41:50:2a: 3f:a2:24:e3:96:25:da:50:53:d3:fd:60:a2:64:c5: 5c:cf:94:05:82:2e:ec:86:33:54:16:92:69:53:f6: ae:c6:3b:b6:f2:95:fb:03:a3:90:82:64:63:04:b7: 5e:cd:d8:d9:5f:1f:f7:ec:3c:a6:31:93:ef:32:f7: b8:bc:b6:2c:be:68:f5:4a:ce:22:da:28:65:a1:57: aa:75:93:61:2c:ec:16:3b:27:4a:7f:11:17:1d:b5: 51:99:f7:32:e5:7f:a8:5b:4d:03:59:17:64:ce:7d: 46:d4:58:20:1e:07:a0:7f:d0:bc:50:9c:6b:7e:fe: ec:bc:b8:ad:7f:e2:21:bf:a6:99:78:78:c2:54:54: 14:e8:44:95:4c:c5:9f:71:b0:8f:22:5a:29:79:fa: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2F:A6:F0:65:F3:61:B3:8C:25:A1:DF:72:F9:74:AD:B1:F3:05:D4 X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.138.0/24 103.117.106.0/24 103.166.81.0/24 Signature Algorithm: sha256WithRSAEncryption af:4c:93:3f:52:12:32:63:a1:8e:1e:1a:f0:b6:8b:82:1a:a4: aa:86:9d:79:3e:69:61:29:a2:4e:ea:b4:71:22:23:dc:4f:9b: 52:04:26:96:4f:53:e1:eb:50:c9:fb:91:0e:9d:4b:0c:ad:91: 1c:40:3e:7d:1d:0e:1c:24:13:52:a1:f0:2c:16:ee:ee:cd:dc: 87:9c:1e:d1:99:69:9b:2d:2f:8f:56:f6:98:12:28:e1:69:96: a0:02:50:f8:c0:4d:a9:04:24:67:20:de:d6:3c:86:4e:22:60: 97:fa:1d:48:93:45:e4:b2:45:83:57:af:a9:e5:47:54:2c:71: 2a:d0:a4:71:4a:63:16:7f:77:6f:6e:9b:d7:06:11:f2:55:dc: 41:83:ee:75:67:97:50:3e:4f:f2:eb:64:92:e4:9a:82:99:31: cf:15:11:b1:2d:58:6b:aa:2c:b4:8c:2f:6c:9c:e3:ae:6c:d7: 90:51:c9:2b:3c:29:5a:5f:67:6e:c1:30:b6:e2:ee:73:fa:ee: ca:4e:29:4c:ad:0d:00:23:97:e6:1d:eb:24:cc:a1:d1:63:b3: 7c:51:63:27:27:7f:28:9b:55:96:1b:1b:4a:54:a7:65:8c:33: 3a:db:53:76:d2:7f:3c:f9:55:cb:03:24:57:58:eb:41:b5:64: 3e:41:76:c2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjUwNTMwMjMzMzI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNjYy04Y2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXQfHuYvks1bnZIkxIGpXofQuTkSt9+uEDcb2D5nH4EyOC35u93TUC0+QTb6 Ono+0nXg0Tx3eSZyZKsmuz17Y6e3PYYRRwEg3HBwFoJo0zw+DLV6IBsdSGTa/a0J otZ74Uhhl8hBUCo/oiTjliXaUFPT/WCiZMVcz5QFgi7shjNUFpJpU/auxju28pX7 A6OQgmRjBLdezdjZXx/37DymMZPvMve4vLYsvmj1Ss4i2ihloVeqdZNhLOwWOydK fxEXHbVRmfcy5X+oW00DWRdkzn1G1FggHgegf9C8UJxrfv7svLitf+Ihv6aZeHjC VFQU6ESVTMWfcbCPIlopefpaMQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO0vpvBl 82GzjCWh33L5dK2x8wXUMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNBQjUvNzJGQkFEODhBN0QwMTFFQkJBNTExNTIyQzRGOUFFMDIvNTUzM0U2QUVC RDM3MTFFQjhENzZFRjMxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ0SKAwQAZ3VqAwQAZ6ZRMA0GCSqGSIb3DQEBCwUAA4IBAQCvTJM/ UhIyY6GOHhrwtouCGqSqhp15PmlhKaJO6rRxIiPcT5tSBCaWT1Ph61DJ+5EOnUsM rZEcQD59HQ4cJBNSofAsFu7uzdyHnB7RmWmbLS+PVvaYEijhaZagAlD4wE2pBCRn IN7WPIZOImCX+h1Ik0XkskWDV6+p5UdULHEq0KRxSmMWf3dvbpvXBhHyVdxBg+51 Z5dQPk/y62SS5JqCmTHPFRGxLVhrqiy0jC9snOOubNeQUckrPClaX2duwTC24u5z +u7KTilMrQ0AI5fmHeskzKHRY7N8UWMnJ38om1WWGxtKVKdljDM621N20n88+VXL AyRXWOtBtWQ+QXbC -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:11 2026 by rpki-client