$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa File: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (raw, json) Hash identifier: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY= Subject key identifier: EC:AA:35:7C:49:0A:BB:59:8D:7D:4E:BC:BA:56:B0:97:C6:34:97:C9 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2653 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa Signing time: Fri 04 Jul 2025 16:22:58 +0000 ROA not before: Fri 04 Jul 2025 16:22:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45938 IP address blocks: 103.234.104.0/24 maxlen: 24 2404:e801:101f::/48 maxlen: 48 2404:e801:201f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9811 (0x2653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ffe2-808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:cf:85:40:eb:6d:ce:ec:da:b8:ab:dd:55: 9f:25:be:8b:5d:76:83:48:81:77:ac:cf:5d:94:bf: d5:32:7d:1c:4b:ce:97:f8:d3:d8:19:12:02:ad:11: 06:73:e8:03:2a:4a:06:93:b4:71:f4:84:a9:50:34: fb:23:76:2f:be:64:d5:c8:44:23:55:83:a2:3a:d8: 60:89:49:e6:51:c0:fe:d5:c9:1a:e0:5f:52:2d:7c: 28:3d:fd:8c:37:a6:1c:d1:3f:cf:d6:81:9f:28:34: 03:7c:ed:cd:55:46:0b:e1:02:b4:c2:73:7b:0a:93: e2:15:f3:34:d6:97:d5:95:77:75:8f:ae:78:e9:ee: d9:ae:fa:e9:49:14:14:f0:04:20:fb:e0:c2:41:07: 49:38:b6:e9:0a:7e:60:26:18:8a:15:00:51:13:97: fd:c0:3d:17:e5:0c:c8:9c:1a:23:fd:50:01:b3:59: dd:6c:7c:c6:30:03:4c:91:ac:d2:ee:cd:ca:0b:d2: 75:e0:24:d8:c3:a8:48:a2:e0:34:1f:31:2b:d1:d8: bc:fa:bd:ff:f0:16:e5:f8:cb:11:b4:c0:f9:68:e2: a8:c3:fd:ad:db:d8:18:da:bd:a7:69:2b:22:50:e3: d7:0b:16:9a:ea:08:9b:c3:e4:cd:33:d2:0c:d4:f6: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AA:35:7C:49:0A:BB:59:8D:7D:4E:BC:BA:56:B0:97:C6:34:97:C9 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.104.0/24 IPv6: 2404:e801:101f::/48 2404:e801:201f::/48 Signature Algorithm: sha256WithRSAEncryption 81:13:3b:45:fd:90:2e:98:e6:d2:16:88:de:76:c5:90:5e:04: 4b:87:5f:4b:37:d3:89:31:b9:52:8b:e9:9b:d9:cf:ad:b5:4b: be:4c:ff:5c:a2:78:b8:f2:9b:3c:b7:29:2f:a2:a2:f7:6c:43: 68:ff:f0:71:c2:63:8b:01:bf:f8:9e:8d:83:5d:0b:77:d5:90: c8:b0:39:fb:ba:3e:cb:db:97:fc:cf:e1:fa:06:fb:b3:2e:45: 54:57:67:e3:a2:3f:da:65:34:32:7f:71:83:14:99:c4:d9:1b: 4a:91:14:38:1b:a6:e5:81:9f:52:e1:08:62:ed:47:78:25:d1: 82:b8:14:43:ba:6d:ec:53:9d:cd:a5:25:c3:73:f2:06:3b:b9: ce:5c:8d:5f:3b:19:84:86:d6:43:e9:93:76:61:2a:5a:4b:0b: b9:19:78:60:0d:af:6a:8a:ec:4d:e1:fb:06:e4:02:d2:c6:09: 79:23:f8:88:fc:0b:ae:0e:5e:4e:a8:3b:cd:dd:99:91:78:a0: d8:14:e2:63:c4:4d:6c:fb:b3:ca:73:b1:18:17:30:9b:7e:ea: 34:09:96:12:e3:d6:97:e1:07:9f:0e:3a:df:8d:19:0f:f2:48: d5:36:59:6c:5b:79:0f:e3:b7:02:cb:f8:bc:83:f6:f9:c5:8a: 96:62:db:43 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICJlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZmZlMi04MDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XnPhUDrbc7s2rir3VWfJb6LXXaDSIF3rM9dlL/VMn0cS86X+NPYGRICrREG c+gDKkoGk7Rx9ISpUDT7I3YvvmTVyEQjVYOiOthgiUnmUcD+1cka4F9SLXwoPf2M N6Yc0T/P1oGfKDQDfO3NVUYL4QK0wnN7CpPiFfM01pfVlXd1j6546e7ZrvrpSRQU 8AQg++DCQQdJOLbpCn5gJhiKFQBRE5f9wD0X5QzInBoj/VABs1ndbHzGMANMkazS 7s3KC9J14CTYw6hIouA0HzEr0di8+r3/8Bbl+MsRtMD5aOKow/2t29gY2r2naSsi UOPXCxaa6gibw+TNM9IM1PaKowIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOyqNXxJ CrtZjX1OvLpWsJfGNJfJMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNUNDQUM3Rjg1 MjhDMTFFQ0I2MTAxQjEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABn6mgwGAQCAAIwEgMHACQE6AEQHwMHACQE6AEgHzANBgkq hkiG9w0BAQsFAAOCAQEAgRM7Rf2QLpjm0haI3nbFkF4ES4dfSzfTiTG5Uovpm9nP rbVLvkz/XKJ4uPKbPLcpL6Ki92xDaP/wccJjiwG/+J6Ng10Ld9WQyLA5+7o+y9uX /M/h+gb7sy5FVFdn46I/2mU0Mn9xgxSZxNkbSpEUOBum5YGfUuEIYu1HeCXRgrgU Q7pt7FOdzaUlw3PyBju5zlyNXzsZhIbWQ+mTdmEqWksLuRl4YA2vaorsTeH7BuQC 0sYJeSP4iPwLrg5eTqg7zd2ZkXig2BTiY8RNbPuzynOxGBcwm37qNAmWEuPWl+EH nw46340ZD/JI1TZZbFt5D+O3Asv4vIP2+cWKlmLbQw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:17:08 2025 by rpki-client