$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa File: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (raw, json) Hash identifier: 9RQxtMrzyxjjCFQVBmlSE980ylB4GQNU6kNM3xDDdp4= Subject key identifier: 00:29:E4:34:F4:F2:00:53:D3:27:01:D9:1A:B2:79:26:E1:F3:8B:39 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07BF Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa Signing time: Mon 30 Jun 2025 22:38:56 +0000 ROA not before: Mon 30 Jun 2025 22:38:56 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 136557 IP address blocks: 103.54.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jun 30 22:38:56 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68631200-712f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:bb:fd:43:7c:f1:a8:5f:2e:df:3e:e2:6a: a4:8b:f9:f4:bc:18:88:0a:f7:56:cc:85:a4:71:0f: 8d:a7:af:3d:5f:4d:01:72:f7:58:a3:09:4a:89:3b: 3b:61:8a:38:b7:2e:a6:89:e8:4f:47:cf:42:a3:af: a3:35:46:83:9d:19:a7:42:1a:5d:50:05:5d:de:8a: 61:fe:df:af:0e:27:2c:bf:da:2c:3f:b7:9d:2f:fe: 02:7e:37:6c:26:20:09:b2:42:fe:49:e3:50:2e:e8: 9a:07:65:2f:e1:5d:df:4d:db:87:a9:10:7f:eb:0b: 0d:6f:e1:6a:0e:01:f5:0d:8f:2f:80:3e:86:20:98: 57:ef:cf:7a:d9:79:38:30:3f:39:f3:1d:5c:d5:d2: c4:2c:1c:dc:bd:9e:c2:cb:43:71:69:53:c4:10:e6: 80:6d:18:4e:2f:ee:af:5e:fb:b9:db:52:c9:01:1d: db:93:57:18:7b:77:56:73:7c:7f:64:0d:e8:9f:95: 67:5a:11:49:2d:ae:a6:63:ed:fc:c4:74:41:37:d4: 80:eb:91:16:cd:c0:b1:67:5b:f3:f5:d0:74:e6:aa: 40:1f:cd:c7:4e:8f:e1:e5:de:20:39:87:e2:ca:6c: 37:97:98:98:80:d0:03:a2:14:b0:84:c9:61:63:ff: 6c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:29:E4:34:F4:F2:00:53:D3:27:01:D9:1A:B2:79:26:E1:F3:8B:39 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.153.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:f5:11:ea:83:bd:48:00:ce:e6:11:8d:b9:f5:ab:a6:21:69: c7:78:39:75:0d:0c:ad:1e:be:ad:1d:8c:13:e9:15:d6:91:96: 7d:8d:d7:09:8b:91:6f:9e:c0:e5:8e:07:2f:c9:d9:c1:94:f8: 3d:1e:70:52:d1:d8:f3:4b:69:ce:4f:2f:ce:e5:36:c6:07:6f: 22:9f:81:d1:0b:bb:9e:e6:08:cb:de:a0:0c:cd:7c:e5:6a:c5: 97:d2:9b:dd:a1:95:12:66:fd:9c:b3:c9:14:f0:f4:a8:41:ef: e6:ac:e5:99:54:0a:2a:e8:80:13:62:8e:24:72:92:e5:f5:aa: ec:86:cc:11:5d:f7:2d:b7:c0:52:cd:7d:91:eb:57:41:4f:ea: 17:bf:cb:09:27:3c:08:d6:12:0a:fb:e6:9f:1d:5f:74:9a:e0: 67:d8:11:fa:22:32:6e:2f:1c:3d:a3:39:48:77:b7:af:c3:ed: 9e:49:d3:cb:b3:b8:f7:96:d2:57:11:2a:a2:45:fe:9c:cd:3d: c5:79:0d:c2:41:6a:5c:08:08:e3:75:a9:2d:16:e8:86:fd:09: 10:36:84:8a:6e:f6:e2:fe:5a:a7:76:fe:a4:ce:94:42:f0:18: ca:8f:de:3e:1c:5f:b9:0e:e1:97:8a:d9:e5:b9:09:19:d6:bf: 9c:f9:0e:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNjMwMjIzODU2WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMTIwMC03MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNW7/UN88ahfLt8+4mqki/n0vBiICvdWzIWkcQ+Np689X00BcvdYowlKiTs7 YYo4ty6miehPR89Co6+jNUaDnRmnQhpdUAVd3oph/t+vDicsv9osP7edL/4Cfjds JiAJskL+SeNQLuiaB2Uv4V3fTduHqRB/6wsNb+FqDgH1DY8vgD6GIJhX78962Xk4 MD858x1c1dLELBzcvZ7Cy0NxaVPEEOaAbRhOL+6vXvu521LJAR3bk1cYe3dWc3x/ ZA3on5VnWhFJLa6mY+38xHRBN9SA65EWzcCxZ1vz9dB05qpAH83HTo/h5d4gOYfi ymw3l5iYgNADohSwhMlhY/9shwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAAp5DT0 8gBT0ycB2RqyeSbh84s5MB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvQkJBRUZFOTBE M0ExMTFFRUIxRUJCQjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnNpkwDQYJKoZIhvcNAQELBQADggEBAI/1EeqDvUgAzuYR jbn1q6Yhacd4OXUNDK0evq0djBPpFdaRln2N1wmLkW+ewOWOBy/J2cGU+D0ecFLR 2PNLac5PL87lNsYHbyKfgdELu57mCMveoAzNfOVqxZfSm92hlRJm/ZyzyRTw9KhB 7+as5ZlUCirogBNijiRykuX1quyGzBFd9y23wFLNfZHrV0FP6he/ywknPAjWEgr7 5p8dX3Sa4GfYEfoiMm4vHD2jOUh3t6/D7Z5J08uzuPeW0lcRKqJF/pzNPcV5DcJB alwICON1qS0W6Ib9CRA2hIpu9uL+Wqd2/qTOlELwGMqP3j4cX7kO4ZeK2eW5CRnW v5z5Dt8= -----END CERTIFICATE-----Generated at Wed Jul 2 21:21:46 2025 by rpki-client