$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa File: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (raw, json) Hash identifier: 1QGlxKfTZ79tHiCzWvtaJQicdQyZsVP57j3lYLW7npQ= Subject key identifier: 3D:98:90:C3:F9:61:92:02:E8:89:9F:23:A7:DE:E7:A7:85:62:AF:22 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 071B Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa Signing time: Fri 20 Jun 2025 22:11:22 +0000 ROA not before: Fri 20 Jun 2025 22:11:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133082 IP address blocks: 103.255.80.0/22 maxlen: 22 103.255.80.0/24 maxlen: 24 103.255.81.0/24 maxlen: 24 103.255.82.0/24 maxlen: 24 103.255.83.0/24 maxlen: 24 2400:8180::/32 maxlen: 32 2400:8180:1::/48 maxlen: 56 2400:8180:2::/48 maxlen: 56 2400:8180:3::/48 maxlen: 56 2400:8180:4::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855dc8a-a6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:b1:2e:1c:5b:35:d4:f6:b6:37:a1:46:b8: 60:9b:be:b7:18:06:6b:7b:7f:47:a2:5f:98:31:7b: a0:4b:fa:8a:65:6b:fc:0f:02:2e:02:07:4e:83:02: 73:38:c8:45:36:46:be:e4:ac:fc:e1:42:d0:cc:d0: a0:7a:2e:ba:8c:61:6c:bd:28:93:9c:1c:b5:6f:ea: 02:d0:14:54:4a:9c:ac:0d:1c:bb:6d:b3:b0:61:59: 38:81:bd:c0:61:86:aa:03:83:1a:9d:39:cd:33:03: d5:a6:e4:d7:3f:e0:62:7e:a2:50:b9:ef:11:17:35: a4:ef:5a:6b:7f:98:54:da:4b:1c:ec:72:b2:10:94: ee:7e:b2:94:09:7a:80:a7:29:eb:20:50:09:1e:e7: e7:f0:dd:d5:c7:1b:10:1e:41:46:2b:b4:16:d1:e7: 97:e3:30:d5:ea:87:c9:77:06:ed:19:99:be:da:97: be:68:90:99:f9:a8:e1:ae:78:d7:00:30:15:2a:3a: 79:b1:39:b3:17:ae:9c:3e:b6:22:c6:4c:1b:d7:bc: 55:ea:3b:db:38:e7:85:96:66:3f:9b:29:bf:17:22: 5d:86:cd:b4:8c:59:e8:0d:2a:ec:1a:5c:1f:f3:6c: 5c:0c:69:ad:ce:70:a5:0f:29:72:78:44:cd:3c:0e: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:90:C3:F9:61:92:02:E8:89:9F:23:A7:DE:E7:A7:85:62:AF:22 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/5B096332BFDF11EC89ECF37BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.80.0/22 IPv6: 2400:8180::/32 Signature Algorithm: sha256WithRSAEncryption 14:ab:9c:25:37:73:2c:9b:97:16:e0:7b:e5:41:4d:2b:06:3c: 67:ba:8b:e8:7c:9b:1a:40:34:32:fb:43:37:86:a5:49:73:3e: 4e:21:49:e4:38:be:67:28:0a:7c:8c:04:81:ab:44:bb:3f:3f: 5c:21:b4:66:08:69:61:ed:d2:0c:a4:cc:bd:c8:87:1b:ab:83: 2b:ba:1d:a5:f3:c2:ee:84:17:2b:fd:86:d0:45:15:c9:33:8e: 28:a2:34:3b:1f:c9:35:fe:d7:b1:dc:de:49:cc:5a:69:38:e1: 2b:32:24:06:12:d3:a3:a9:e1:a8:82:a7:db:de:91:f7:a3:37: a8:79:99:f9:8a:df:fe:65:6d:14:5f:1c:34:73:2d:3d:1e:e6: 40:1a:ff:7b:dd:bf:d5:bd:c5:49:9a:4b:bc:a2:a6:87:86:d2: 42:b3:cf:eb:2d:b2:f2:61:ac:b8:e1:26:7b:f7:59:ce:a8:70: ee:36:4b:04:dd:e9:5d:3f:b6:13:8e:02:08:db:91:80:80:cd: 96:8a:05:26:68:4e:18:0a:88:a9:d3:6a:24:36:1f:2e:6e:26: c2:1a:3a:67:e2:53:b6:66:f5:e4:7f:b2:84:6b:da:db:4e:b1: 50:03:d1:32:06:90:23:eb:25:55:ab:f2:ff:de:40:86:4a:30: 83:6f:83:2a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZGM4YS1hNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20CxLhxbNdT2tjehRrhgm763GAZre39Hol+YMXugS/qKZWv8DwIuAgdOgwJz OMhFNka+5Kz84ULQzNCgei66jGFsvSiTnBy1b+oC0BRUSpysDRy7bbOwYVk4gb3A YYaqA4ManTnNMwPVpuTXP+BifqJQue8RFzWk71prf5hU2ksc7HKyEJTufrKUCXqA pynrIFAJHufn8N3VxxsQHkFGK7QW0eeX4zDV6ofJdwbtGZm+2pe+aJCZ+ajhrnjX ADAVKjp5sTmzF66cPrYixkwb17xV6jvbOOeFlmY/mym/FyJdhs20jFnoDSrsGlwf 82xcDGmtznClDylyeETNPA6YrwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD2YkMP5 YZIC6ImfI6fe56eFYq8iMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvNUIwOTYzMzJC RkRGMTFFQzg5RUNGMzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn/1AwDQQCAAIwBwMFACQAgYAwDQYJKoZIhvcNAQELBQAD ggEBABSrnCU3cyyblxbge+VBTSsGPGe6i+h8mxpANDL7QzeGpUlzPk4hSeQ4vmco CnyMBIGrRLs/P1whtGYIaWHt0gykzL3Ihxurgyu6HaXzwu6EFyv9htBFFckzjiii NDsfyTX+17Hc3knMWmk44SsyJAYS06Op4aiCp9vekfejN6h5mfmK3/5lbRRfHDRz LT0e5kAa/3vdv9W9xUmaS7yipoeG0kKzz+stsvJhrLjhJnv3Wc6ocO42SwTd6V0/ thOOAgjbkYCAzZaKBSZoThgKiKnTaiQ2Hy5uJsIaOmfiU7Zm9eR/soRr2ttOsVAD 0TIGkCPrJVWr8v/eQIZKMINvgyo= -----END CERTIFICATE-----Generated at Thu Jul 3 23:42:21 2025 by rpki-client