$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa File: C5639A24E0F511EABB96D531C4F9AE02.roa (raw, json) Hash identifier: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0= Subject key identifier: 50:A9:28:B3:FF:0E:18:D3:0A:D9:67:C7:4E:3C:23:55:8D:AA:08:B7 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 08B6 Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:02:49 +0000 ROA not before: Fri 18 Apr 2025 21:23:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.152.248.0/24 maxlen: 24 103.152.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Apr 18 21:23:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a46329-ea0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:14:2b:77:2f:19:a0:3e:a1:45:cb:88:6b: bc:b2:ec:22:b7:aa:5d:fd:6e:bb:1f:a0:20:09:ea: c9:03:a5:48:61:48:76:9d:b1:a0:51:db:4f:db:ad: b5:11:63:d3:f4:fc:ed:20:42:31:cf:cc:0c:50:c1: 65:98:3a:0c:f5:68:f6:7e:b2:b0:60:20:17:ac:f0: e5:1a:c9:ce:d7:3d:46:68:0b:9b:0c:9c:36:b3:c8: e7:2a:ad:26:00:85:bb:36:d7:f6:65:fd:89:9a:6c: a1:55:ee:16:e6:f6:76:1b:38:2a:ec:9b:31:95:46: 05:36:2c:d7:cc:76:2b:b0:38:b7:59:c1:8f:7f:52: 09:04:b1:65:63:d1:a5:98:32:21:e6:06:b6:11:f7: e5:5b:f4:f8:f1:e0:45:c4:df:88:92:32:57:44:58: fe:ae:ae:50:e7:c9:7b:e9:06:8f:86:d5:0d:12:34: 45:2d:21:fb:cb:8e:0d:aa:5e:e3:51:ed:a6:ab:58: 3a:ea:37:7d:26:dc:48:9d:27:87:cc:07:97:b2:4a: be:68:86:af:54:16:5f:15:d5:71:ea:53:cc:88:29: b2:27:32:2e:a8:30:90:cf:43:42:11:bf:6d:83:8b: 68:a6:47:d9:49:40:d3:47:6b:50:f0:dd:54:32:f7: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A9:28:B3:FF:0E:18:D3:0A:D9:67:C7:4E:3C:23:55:8D:AA:08:B7 X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C5639A24E0F511EABB96D531C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.248.0/23 Signature Algorithm: sha256WithRSAEncryption 01:26:ba:3f:c4:b8:2f:32:58:35:c2:ac:2b:e7:1b:68:b3:17: f5:0d:bd:a1:52:fa:75:49:5b:af:e2:99:8c:25:84:e0:cb:3c: 21:c7:b5:83:0f:9c:52:68:8a:2c:63:e7:b6:2c:1f:11:b0:67: 43:93:60:f7:c1:cc:29:aa:89:bb:c5:2a:f5:31:c1:51:a0:f1: 63:37:7b:a6:c8:1f:04:7f:27:db:99:38:8d:86:7e:64:fe:bd: 8d:ce:c8:03:72:66:64:e4:df:8f:ec:e1:ac:77:6a:4a:08:3c: ef:dc:0f:6e:09:94:61:f2:ad:6a:04:f0:87:10:7b:c9:36:80: f8:9d:67:06:40:00:75:06:df:98:9b:62:3d:49:ab:43:49:27: a9:38:9a:e8:82:1a:20:6a:36:73:a0:12:d7:1b:eb:b8:a6:c6: e5:72:64:b9:b3:4d:b4:d9:d6:00:0b:a3:e6:d8:f9:b3:4d:d8: aa:cd:6f:18:ca:86:4c:2c:7f:cb:e7:fa:e0:35:21:e1:b6:ef: 34:3d:8c:fb:b4:b0:2e:02:a0:a0:7f:06:62:3c:f6:b3:60:89: 51:e0:c4:95:76:64:31:dc:ad:0c:8d:c6:cf:b0:6a:8e:1e:c8: fb:53:03:c1:d9:79:a4:46:17:ba:59:11:41:30:c2:74:d8:e0: db:7d:6f:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjUwNDE4MjEyMzM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjMyOS1lYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHoUK3cvGaA+oUXLiGu8suwit6pd/W67H6AgCerJA6VIYUh2nbGgUdtP2621 EWPT9PztIEIxz8wMUMFlmDoM9Wj2frKwYCAXrPDlGsnO1z1GaAubDJw2s8jnKq0m AIW7Ntf2Zf2JmmyhVe4W5vZ2Gzgq7JsxlUYFNizXzHYrsDi3WcGPf1IJBLFlY9Gl mDIh5ga2EfflW/T48eBFxN+IkjJXRFj+rq5Q58l76QaPhtUNEjRFLSH7y44Nql7j Ue2mq1g66jd9JtxInSeHzAeXskq+aIavVBZfFdVx6lPMiCmyJzIuqDCQz0NCEb9t g4topkfZSUDTR2tQ8N1UMvfd/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFCpKLP/ DhjTCtlnx048I1WNqgi3MB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJGRTUvOURBRjQ4NkVEREVCMTFFQUIzMEVEOTIxQzRGOUFFMDIvQzU2MzlBMjRF MEY1MTFFQUJCOTZENTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5j4MA0GCSqGSIb3DQEBCwUAA4IBAQABJro/xLgvMlg1wqwr5xto sxf1Db2hUvp1SVuv4pmMJYTgyzwhx7WDD5xSaIosY+e2LB8RsGdDk2D3wcwpqom7 xSr1McFRoPFjN3umyB8EfyfbmTiNhn5k/r2NzsgDcmZk5N+P7OGsd2pKCDzv3A9u CZRh8q1qBPCHEHvJNoD4nWcGQAB1Bt+Ym2I9SatDSSepOJroghogajZzoBLXG+u4 psblcmS5s0202dYAC6Pm2PmzTdiqzW8YyoZMLH/L5/rgNSHhtu80PYz7tLAuAqCg fwZiPPazYIlR4MSVdmQx3K0MjcbPsGqOHsj7UwPB2XmkRhe6WRFBMMJ02ODbfW/p -----END CERTIFICATE-----Generated at Thu Mar 26 05:00:20 2026 by rpki-client