$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa File: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (raw, json) Hash identifier: S3V9nTmHpTk0R0/Tb93/TR2ixFVYiRqvkvzY7lnngOQ= Subject key identifier: EE:2E:19:39:2B:4A:83:0F:EB:A9:E7:31:D8:4E:5E:49:D7:7B:A0:5F Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 06E2 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa Signing time: Thu 04 Jun 2026 22:28:05 +0000 ROA not before: Thu 04 Jun 2026 22:28:05 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 131273 IP address blocks: 103.68.138.0/24 maxlen: 24 103.117.106.0/24 maxlen: 24 103.166.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 22:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: Jun 4 22:28:05 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a21fbf5-7dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:25:bd:6a:3c:37:87:6e:2b:63:13:2c:89: 8c:55:44:03:91:af:56:95:59:8a:66:37:ed:a5:da: 28:b6:f3:42:fa:8b:b3:62:19:6a:a3:a2:dd:52:1e: 60:45:cd:50:a2:b2:67:9d:d7:46:37:aa:60:1f:ac: 58:6e:dd:f3:a2:76:6c:ce:c3:a5:4c:6b:c0:a5:e0: 93:57:fd:7e:f2:35:59:66:9e:ef:8b:70:60:cf:1a: ed:cd:8f:36:36:74:0e:75:bc:b4:c3:ab:41:dc:05: e4:c2:38:41:c8:d8:22:21:96:c6:ec:44:31:1b:2c: ea:9b:91:e5:96:9e:aa:e6:1f:6e:be:e6:76:44:67: 9f:93:b8:d0:d2:cc:45:8b:34:b8:15:c8:5d:d1:e6: c4:44:61:e4:35:cb:4d:63:ad:96:6f:16:af:83:72: 02:40:89:7d:9a:3e:30:6e:6c:17:81:23:d0:47:d4: 71:18:36:98:00:3f:16:2e:44:0b:c8:f6:8d:0e:9c: 56:b5:b0:02:dc:93:5c:3c:87:15:33:02:76:b6:0d: dd:f1:6f:d0:10:cd:03:95:4a:9c:10:df:b4:1f:aa: 0e:68:d0:6d:0f:9e:78:d7:1e:51:d8:47:43:f8:9f: 06:cb:6d:54:96:61:be:51:0d:89:6c:e1:cf:4e:6b: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:19:39:2B:4A:83:0F:EB:A9:E7:31:D8:4E:5E:49:D7:7B:A0:5F X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.138.0/24 103.117.106.0/24 103.166.81.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c8:d6:b7:aa:fa:d0:3c:8a:2a:dd:e2:34:60:45:e0:fd:5c: 60:af:eb:ef:14:1d:90:58:a5:78:74:09:e6:87:2d:69:76:7f: 36:f6:6b:8a:75:59:eb:1a:77:bc:65:02:28:80:17:81:dc:4e: 2b:b3:bb:ca:cc:d9:a4:2a:3f:18:7c:b0:30:36:7c:c1:99:e2: 84:2d:d7:3a:9f:39:d9:68:91:55:86:ee:98:3d:15:3a:96:ac: 40:0b:71:a0:ae:0d:59:39:b3:8e:8b:46:ff:3b:00:88:4b:68: ac:f1:8d:9e:31:85:fa:41:94:70:aa:e2:8e:a2:48:72:0d:22: 57:75:07:98:22:e8:7a:39:b0:ae:aa:e5:86:f9:49:9e:dd:b5: 3e:f3:ea:4e:3f:7e:f8:7f:11:c1:78:0a:50:42:de:14:a8:19: ae:66:16:f5:be:27:b2:10:88:32:b7:7e:c5:53:72:ef:a9:f8: c5:95:34:da:71:f4:8e:db:20:99:3f:ff:28:43:67:6d:49:9d: 64:7c:cf:f9:e7:f9:09:de:a6:6c:84:7c:75:4c:84:3c:08:41: 95:ad:c0:f3:f8:cd:cd:11:78:0b:25:35:ad:4d:c1:15:10:d2: 9d:53:a7:4f:44:bb:8d:40:36:89:40:19:f3:66:f8:bf:22:7b: a7:58:8d:94 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjYwNjA0MjIyODA1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIxZmJmNS03ZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg1clvWo8N4duK2MTLImMVUQDka9WlVmKZjftpdootvNC+ouzYhlqo6LdUh5g Rc1QorJnnddGN6pgH6xYbt3zonZszsOlTGvApeCTV/1+8jVZZp7vi3BgzxrtzY82 NnQOdby0w6tB3AXkwjhByNgiIZbG7EQxGyzqm5Hllp6q5h9uvuZ2RGefk7jQ0sxF izS4Fchd0ebERGHkNctNY62Wbxavg3ICQIl9mj4wbmwXgSPQR9RxGDaYAD8WLkQL yPaNDpxWtbAC3JNcPIcVMwJ2tg3d8W/QEM0DlUqcEN+0H6oOaNBtD5541x5R2EdD +J8Gy21UlmG+UQ2JbOHPTmtgzwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO4uGTkr SoMP66nnMdhOXknXe6BfMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNBQjUvNzJGQkFEODhBN0QwMTFFQkJBNTExNTIyQzRGOUFFMDIvNTUzM0U2QUVC RDM3MTFFQjhENzZFRjMxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ0SKAwQAZ3VqAwQAZ6ZRMA0GCSqGSIb3DQEBCwUAA4IBAQCCyNa3 qvrQPIoq3eI0YEXg/Vxgr+vvFB2QWKV4dAnmhy1pdn829muKdVnrGne8ZQIogBeB 3E4rs7vKzNmkKj8YfLAwNnzBmeKELdc6nznZaJFVhu6YPRU6lqxAC3Ggrg1ZObOO i0b/OwCIS2is8Y2eMYX6QZRwquKOokhyDSJXdQeYIuh6ObCuquWG+Ume3bU+8+pO P374fxHBeApQQt4UqBmuZhb1vieyEIgyt37FU3LvqfjFlTTacfSO2yCZP/8oQ2dt SZ1kfM/55/kJ3qZshHx1TIQ8CEGVrcDz+M3NEXgLJTWtTcEVENKdU6dPRLuNQDaJ QBnzZvi/InunWI2U -----END CERTIFICATE-----Generated at Sat Jun 13 21:02:49 2026 by rpki-client