$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa File: 52047C189EA111EC8EA0096AC4F9AE02.roa (raw, json) Hash identifier: pzFsMxICRta3jJZNRRm+xGcV3VPmmyQWY3sDErTiCgo= Subject key identifier: BA:E4:BD:BE:2E:0D:55:7E:A0:2C:90:CA:EE:4A:D2:90:F3:80:51:12 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03E2 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa Signing time: Sun 03 Aug 2025 01:08:07 +0000 ROA not before: Sun 03 Aug 2025 01:08:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 31898 IP address blocks: 103.63.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 994 (0x3e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Aug 3 01:08:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688eb677-da79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:4d:3b:32:2b:c7:bf:9a:52:0e:87:cf:f8: 39:e4:40:61:76:bb:96:4f:cf:92:b8:4d:d5:5f:ec: c5:61:be:99:5d:fe:6f:e3:30:76:a8:5e:83:af:47: a6:70:44:27:80:0a:5d:7a:7a:82:11:0f:7a:bf:68: 04:2f:bc:df:38:70:21:b0:67:60:8b:07:f3:ce:d0: c4:7c:2c:59:61:84:40:69:fb:b0:aa:7a:6d:bf:bc: c0:f5:f1:c4:42:c3:d3:27:ac:1b:17:bc:04:9d:7c: a1:81:19:c1:0f:ba:de:14:dd:67:26:f6:a4:27:d7: b3:4d:9e:2a:18:be:ab:08:b3:fc:0d:81:9e:d4:40: 4a:58:d9:51:ec:20:98:fb:8f:cf:9c:08:97:f1:7d: 7c:4c:56:ed:a6:02:18:b9:c1:03:fc:e2:b8:fb:83: 9a:10:b9:83:cd:b2:95:80:2e:a6:31:20:d2:a8:ce: ad:56:29:22:06:f1:a3:b3:80:52:4f:a9:2c:53:64: 72:a1:e7:a5:e0:82:7f:20:48:c3:73:93:66:4e:a6: 9a:2a:87:36:f2:03:fb:ef:06:6d:34:b9:7a:00:ed: c6:23:a1:c5:c5:82:72:ce:19:31:34:22:40:4a:d1: 06:16:18:c0:b9:a0:57:22:36:00:bc:f4:83:39:3a: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:BD:BE:2E:0D:55:7E:A0:2C:90:CA:EE:4A:D2:90:F3:80:51:12 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/52047C189EA111EC8EA0096AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.63.102.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c0:d0:9f:98:f9:aa:2f:8f:9e:ea:f1:aa:d1:87:79:62:40: bc:42:d9:59:40:3f:73:42:50:75:27:f3:6a:6c:e8:ed:7b:e1: 94:f6:fa:0a:99:1d:d3:dc:54:16:97:30:2c:67:ed:81:9b:b4: 75:c6:72:c8:ae:95:29:bc:60:f6:07:28:4e:7c:be:16:c6:61: 2b:18:be:a2:bb:7c:b0:02:1b:e2:f9:6f:80:71:22:1b:cb:95: 82:ce:59:03:15:41:5a:72:31:5d:be:92:43:17:a9:e5:f0:77: cd:5b:97:b9:17:a4:c6:a7:b7:04:37:7c:9d:06:7c:b5:6f:da: 4e:7d:cd:e8:bb:3e:74:79:97:62:d0:7b:18:65:0d:ed:b7:57: 3a:ec:6b:a2:f1:78:a3:8f:0e:c4:58:75:32:09:c5:77:d1:10: 3b:5f:7c:1b:39:96:eb:e4:b6:7f:7b:6f:90:e6:79:e6:3d:51: 3e:de:b7:3a:8f:ab:a0:3b:09:f6:d9:50:c4:38:e6:cd:66:6d: 0d:77:45:39:7f:30:88:0d:52:b6:a1:93:99:a4:de:80:9b:25: f4:1e:e0:e0:f8:3e:91:4c:3d:ed:dc:b6:65:78:2c:27:40:3d: 2d:c2:b4:93:d1:93:93:5e:e6:10:a7:b9:7d:61:34:64:4b:09: 66:9a:c7:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwODAzMDEwODA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYjY3Ny1kYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07BNOzIrx7+aUg6Hz/g55EBhdruWT8+SuE3VX+zFYb6ZXf5v4zB2qF6Dr0em cEQngApdenqCEQ96v2gEL7zfOHAhsGdgiwfzztDEfCxZYYRAafuwqnptv7zA9fHE QsPTJ6wbF7wEnXyhgRnBD7reFN1nJvakJ9ezTZ4qGL6rCLP8DYGe1EBKWNlR7CCY +4/PnAiX8X18TFbtpgIYucED/OK4+4OaELmDzbKVgC6mMSDSqM6tVikiBvGjs4BS T6ksU2Ryoeel4IJ/IEjDc5NmTqaaKoc28gP77wZtNLl6AO3GI6HFxYJyzhkxNCJA StEGFhjAuaBXIjYAvPSDOTqGOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLrkvb4u DVV+oCyQyu5K0pDzgFESMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUUyRDIvQkMwMzU1MkM4RjlCMTFFQzgyNjAzRDE2QzRGOUFFMDIvNTIwNDdDMTg5 RUExMTFFQzhFQTAwOTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnP2YwDQYJKoZIhvcNAQELBQADggEBAIvA0J+Y+aovj57q 8arRh3liQLxC2VlAP3NCUHUn82ps6O174ZT2+gqZHdPcVBaXMCxn7YGbtHXGcsiu lSm8YPYHKE58vhbGYSsYvqK7fLACG+L5b4BxIhvLlYLOWQMVQVpyMV2+kkMXqeXw d81bl7kXpMantwQ3fJ0GfLVv2k59zei7PnR5l2LQexhlDe23Vzrsa6LxeKOPDsRY dTIJxXfREDtffBs5luvktn97b5DmeeY9UT7etzqPq6A7CfbZUMQ45s1mbQ13RTl/ MIgNUrahk5mk3oCbJfQe4OD4PpFMPe3ctmV4LCdAPS3CtJPRk5Ne5hCnuX1hNGRL CWaax5Y= -----END CERTIFICATE-----Generated at Sat Aug 9 02:58:40 2025 by rpki-client