$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa File: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (raw, json) Hash identifier: uifIApbHfV42HS+k8rHXkfR4eC5owLbdOciccVTBlF8= Subject key identifier: 34:7A:5E:4B:7E:38:9F:03:E8:1E:4D:BA:3E:6E:92:6F:6B:CA:23:73 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2703 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:16:38 +0000 ROA not before: Fri 04 Jul 2025 16:22:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45938 IP address blocks: 103.234.104.0/24 maxlen: 24 2404:e801:101f::/48 maxlen: 48 2404:e801:201f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9987 (0x2703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a51d36-9421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b6:c5:b8:c5:0f:0f:f6:08:80:da:78:8a:7e: 15:50:e3:6b:4f:2a:64:f6:bd:4a:18:9d:4a:d9:bd: 30:8a:56:4e:90:a3:fa:c4:2f:54:ce:d9:6d:c3:6e: a4:d6:f0:bf:1c:3e:0b:ab:3d:22:79:55:76:9d:91: ab:e3:fb:fb:83:1e:00:0f:3c:1a:c8:e4:45:84:46: 57:3f:82:b4:ff:8a:9b:84:84:5c:dd:bb:de:ec:91: 6a:89:82:d6:49:0f:9e:58:3b:aa:9e:f6:43:ec:20: be:65:a4:10:9d:41:14:fe:69:47:7f:2c:3f:d9:86: 76:43:6e:52:a2:6e:5a:f5:78:d3:85:2b:f7:50:e7: 85:f8:34:5d:fa:4c:90:ab:b8:aa:0f:a4:92:f5:5d: ce:5f:1e:e0:58:7a:23:a5:ed:77:c2:9a:dc:8d:6a: 77:14:92:f8:f1:d6:a2:74:32:8b:eb:14:27:88:1c: 96:7a:69:51:a0:df:44:b3:fb:e5:4d:b7:4a:7c:38: 77:43:c9:01:38:d6:d3:33:b9:42:2e:1c:1a:89:db: 5e:29:c3:32:34:af:d9:c4:92:8b:41:c4:e9:eb:61: db:29:c5:f8:39:a6:e5:4c:20:f6:86:b2:e6:73:4d: 48:ef:69:03:27:0f:a8:90:36:2d:59:8c:c3:6f:e6: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7A:5E:4B:7E:38:9F:03:E8:1E:4D:BA:3E:6E:92:6F:6B:CA:23:73 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.104.0/24 IPv6: 2404:e801:101f::/48 2404:e801:201f::/48 Signature Algorithm: sha256WithRSAEncryption b4:8a:11:af:c0:22:71:48:b2:f8:c5:3d:74:ef:59:ae:17:78: 16:14:9e:83:4c:27:20:97:29:93:7d:ff:a2:4b:b0:6d:f0:a3: 8c:3b:c0:ce:2b:04:f6:f8:f5:89:9d:4b:bb:c4:78:97:89:ad: c7:ff:11:d2:a3:cd:e2:69:05:ab:b9:04:bf:7a:c2:46:dc:8d: db:1f:fb:d3:01:44:ca:05:c0:a3:46:c8:91:aa:fe:94:5f:30: bb:f9:91:8a:47:f3:c0:be:ac:74:0e:2d:95:08:36:27:61:44: 08:5f:6d:88:2f:bc:27:4d:7a:98:a4:33:2e:2d:7c:3b:f7:31: 7a:f7:a8:48:f2:87:d5:c7:87:d3:bb:26:ae:66:09:6f:21:96: a3:35:96:08:5d:ba:c1:00:80:74:8f:45:68:d6:69:8a:e9:cf: 67:01:3a:7b:1d:9a:be:44:99:d1:1e:b4:3e:a8:40:fa:f6:ec: 86:80:11:73:81:af:25:5f:90:f9:d8:9f:e6:89:f1:11:16:97: 93:9a:be:10:5b:5c:bb:fc:4a:7a:c2:9a:b1:3a:68:8e:b5:e3: 5d:4f:a7:98:75:ce:b4:28:1a:4c:98:8f:fd:0b:ad:0c:26:f8: fd:5c:f8:96:e1:af:90:58:b5:83:88:2f:12:5e:b6:23:11:95: ca:f6:f5:3e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICJwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWQzNi05NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bbFuMUPD/YIgNp4in4VUONrTypk9r1KGJ1K2b0wilZOkKP6xC9Uztltw26k 1vC/HD4Lqz0ieVV2nZGr4/v7gx4ADzwayORFhEZXP4K0/4qbhIRc3bve7JFqiYLW SQ+eWDuqnvZD7CC+ZaQQnUEU/mlHfyw/2YZ2Q25Som5a9XjThSv3UOeF+DRd+kyQ q7iqD6SS9V3OXx7gWHojpe13wprcjWp3FJL48daidDKL6xQniByWemlRoN9Es/vl TbdKfDh3Q8kBONbTM7lCLhwaidteKcMyNK/ZxJKLQcTp62HbKcX4OablTCD2hrLm c01I72kDJw+okDYtWYzDb+YSWwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFDR6Xkt+ OJ8D6B5Nuj5ukm9ryiNzMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvNUNDQUM3Rjg1 MjhDMTFFQ0I2MTAxQjEwQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQAZ+poMBgEAgACMBIDBwAkBOgBEB8DBwAkBOgBIB8wDQYJKoZIhvcN AQELBQADggEBALSKEa/AInFIsvjFPXTvWa4XeBYUnoNMJyCXKZN9/6JLsG3wo4w7 wM4rBPb49YmdS7vEeJeJrcf/EdKjzeJpBau5BL96wkbcjdsf+9MBRMoFwKNGyJGq /pRfMLv5kYpH88C+rHQOLZUINidhRAhfbYgvvCdNepikMy4tfDv3MXr3qEjyh9XH h9O7Jq5mCW8hlqM1lghdusEAgHSPRWjWaYrpz2cBOnsdmr5EmdEetD6oQPr27IaA EXOBryVfkPnYn+aJ8REWl5OavhBbXLv8SnrCmrE6aI61411Pp5h1zrQoGkyYj/0L rQwm+P1c+Jbhr5BYtYOILxJetiMRlcr29T4= -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:37 2026 by rpki-client