$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa File: B527A9C8604111EF97252962C4F9AE02.roa (raw, json) Hash identifier: 86BcjMQFenDIORukuby6K4SLuk15+UdUhQ7zU3nwZFM= Subject key identifier: 58:3C:F8:75:D9:8C:2F:E5:0C:A1:AF:FE:3E:F6:09:03:47:C4:B9:9F Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: AD Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa Signing time: Tue 01 Jul 2025 07:11:24 +0000 ROA not before: Tue 01 Jul 2025 07:11:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4826 IP address blocks: 103.65.233.0/24 maxlen: 24 103.220.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Jul 1 07:11:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68638a1c-3ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e9:a9:47:72:f5:75:d7:b9:a8:e2:40:91:d8: 58:df:76:70:3d:0f:bb:9d:45:b9:38:bc:ad:f5:3a: d3:8d:d9:95:76:f0:e0:c1:bf:f9:f7:48:08:96:e6: 37:98:ee:4a:fa:a9:2a:39:cf:6a:8b:e8:96:dc:0a: 62:cc:ba:5a:49:de:2f:9c:6f:d9:10:10:bf:46:54: 7a:f4:33:70:37:e9:59:0f:d8:02:af:b8:a0:f5:32: 0d:91:eb:71:3a:f7:a5:a9:e4:e7:b9:01:a7:4f:a2: 5a:84:26:0f:53:d9:4e:59:6e:d1:71:91:25:6d:39: 74:e1:6f:f9:7b:9f:dd:da:81:26:5d:4f:db:ac:33: f7:fd:e7:6e:cc:6f:55:af:7c:51:04:c0:fa:59:98: 8c:f4:5d:7f:f1:84:a6:4f:49:8d:56:d4:10:90:0b: c6:2e:92:d0:ed:50:2a:82:b5:05:62:06:44:f1:c0: 88:33:6c:e5:b3:6b:24:ce:49:6a:40:2c:e1:9f:14: 1c:a8:88:f2:ed:7b:5f:31:40:b8:62:de:4c:c9:c5: 24:cd:ca:66:93:dc:90:87:15:ad:dc:25:28:15:93: 97:4a:e1:5e:00:87:a2:10:fd:74:36:d1:6f:46:3e: 88:6a:78:42:6d:cf:da:35:f1:62:cc:64:af:76:bd: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:F8:75:D9:8C:2F:E5:0C:A1:AF:FE:3E:F6:09:03:47:C4:B9:9F X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/B527A9C8604111EF97252962C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.233.0/24 103.220.46.0/24 Signature Algorithm: sha256WithRSAEncryption 16:47:b9:9e:38:cb:81:64:40:78:2b:0d:ad:e6:fd:42:53:bf: 9e:3d:4f:c8:a7:fd:10:ab:b5:26:34:d1:84:41:7c:01:c4:65: e2:c5:31:e2:95:a6:86:96:95:3b:84:b7:0c:95:1c:32:6c:93: 04:7b:27:6c:73:22:77:ba:f6:c4:23:05:15:8f:c1:25:08:c0: c5:c9:d7:a5:d4:dc:5f:d5:1f:d4:13:bf:ee:0d:f2:39:5c:fc: 41:0c:3d:9e:20:8c:c5:fa:84:22:1c:13:92:e4:7b:18:f9:3e: a4:f9:ff:3d:2f:fe:66:5d:5c:64:53:14:fc:e0:dd:81:92:d9: 32:fe:9a:12:18:b6:84:22:af:0e:b6:77:f6:28:75:13:4d:b0: d8:8e:ff:88:93:2b:5f:ce:c6:f1:68:1d:38:f1:d2:82:d7:c0: c6:3a:f6:03:1a:ec:ed:49:c6:73:13:f3:a2:33:cb:2e:d1:33: 23:0c:fc:79:ab:d2:8a:f6:43:80:32:18:23:b7:59:a4:44:1a: 7f:a8:1f:c0:be:16:40:0c:15:c6:1a:30:c2:7c:4b:e4:39:37: 95:50:b8:08:f8:a6:72:27:4c:55:d4:0d:e0:b7:eb:30:bf:65: 30:94:0f:6c:6e:5d:9d:ba:da:ef:a6:d3:90:c1:0e:c4:8c:1e: e5:91:b7:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNzAxMDcxMTI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzOGExYy0zZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6umpR3L1dde5qOJAkdhY33ZwPQ+7nUW5OLyt9TrTjdmVdvDgwb/590gIluY3 mO5K+qkqOc9qi+iW3ApizLpaSd4vnG/ZEBC/RlR69DNwN+lZD9gCr7ig9TINketx OvelqeTnuQGnT6JahCYPU9lOWW7RcZElbTl04W/5e5/d2oEmXU/brDP3/eduzG9V r3xRBMD6WZiM9F1/8YSmT0mNVtQQkAvGLpLQ7VAqgrUFYgZE8cCIM2zls2skzklq QCzhnxQcqIjy7XtfMUC4Yt5MycUkzcpmk9yQhxWt3CUoFZOXSuFeAIeiEP10NtFv Rj6IanhCbc/aNfFizGSvdr1dJwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFg8+HXZ jC/lDKGv/j72CQNHxLmfMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUwMDEvREQxQ0JENzI2MDNFMTFFRjg2NkZFODNFQzRGOUFFMDIvQjUyN0E5Qzg2 MDQxMTFFRjk3MjUyOTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnQekDBABn3C4wDQYJKoZIhvcNAQELBQADggEBABZHuZ44 y4FkQHgrDa3m/UJTv549T8in/RCrtSY00YRBfAHEZeLFMeKVpoaWlTuEtwyVHDJs kwR7J2xzIne69sQjBRWPwSUIwMXJ16XU3F/VH9QTv+4N8jlc/EEMPZ4gjMX6hCIc E5Lkexj5PqT5/z0v/mZdXGRTFPzg3YGS2TL+mhIYtoQirw62d/YodRNNsNiO/4iT K1/OxvFoHTjx0oLXwMY69gMa7O1JxnMT86Izyy7RMyMM/Hmr0or2Q4AyGCO3WaRE Gn+oH8C+FkAMFcYaMMJ8S+Q5N5VQuAj4pnInTFXUDeC36zC/ZTCUD2xuXZ262u+m 05DBDsSMHuWRt6o= -----END CERTIFICATE-----Generated at Thu Jul 3 05:18:51 2025 by rpki-client