$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B952458977711F0BFD86A87C4F9AE02.roa File: 5B952458977711F0BFD86A87C4F9AE02.roa (raw, json) Hash identifier: gFfnZ4DrE7//gev7sh1YA2BGhuDFAEG8I8nPDKbgm2c= Subject key identifier: 2B:6B:C3:A1:76:79:C4:35:71:C4:24:E5:29:1A:BC:14:BA:E3:02:61 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C538 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B952458977711F0BFD86A87C4F9AE02.roa Signing time: Mon 22 Sep 2025 05:45:34 +0000 ROA not before: Mon 22 Sep 2025 05:45:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138250 IP address blocks: 103.127.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50488 (0xc538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 22 05:45:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68d0e27e-6866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:0f:3a:7d:b8:d8:f7:56:9c:3b:02:b7:29: 7b:2e:2e:2b:2d:ff:21:69:40:38:2b:47:94:09:5e: 99:20:b9:e9:54:70:fb:f7:7a:b8:79:58:f5:dd:95: e8:24:a2:4f:59:8b:83:50:7e:4d:d7:e6:86:dc:bb: a5:39:6c:8f:96:ca:89:53:1e:33:0e:ad:99:b5:55: 43:05:c4:3e:fe:42:a7:c1:f4:34:bd:9d:52:4e:18: 2b:f8:b0:51:34:77:5f:6b:6a:58:46:e3:c0:9c:56: 22:81:b8:53:8d:cd:cd:3c:0f:e6:35:c5:e3:d4:27: d2:64:2e:7e:ca:38:1f:73:70:ff:49:60:6e:16:01: 4d:0a:02:36:c9:71:68:cf:df:6e:5d:bb:82:c0:e0: 66:82:35:1d:f3:b1:91:c9:e5:5d:b3:fa:40:d2:62: e7:7a:11:e0:0c:f2:bc:88:1d:7f:70:3b:83:2f:85: e1:e5:33:d1:90:91:23:9f:c6:ad:ff:ff:88:f1:d5: 8d:76:78:20:95:73:b0:b4:d6:c0:32:b8:44:1b:33: 39:9a:18:b6:a8:2d:86:e7:2b:de:de:81:9f:e1:17: 5d:0e:1f:c0:23:ed:ed:99:52:94:f6:6b:1d:83:6f: d6:20:39:b5:f7:26:1d:0e:9d:fb:0d:f3:23:56:ee: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6B:C3:A1:76:79:C4:35:71:C4:24:E5:29:1A:BC:14:BA:E3:02:61 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B952458977711F0BFD86A87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.255.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:19:6d:73:ce:1d:ef:ef:c2:af:60:86:ad:2d:74:e0:ab:d8: 17:57:68:02:c8:ce:4d:8d:d7:a0:ba:e9:81:a8:59:be:6e:e3: a2:7b:bf:2d:33:23:6a:d2:2c:a9:26:77:a1:35:a6:2a:c2:71: 44:bc:37:94:92:5f:dc:d6:43:37:02:1f:d1:eb:dc:d0:87:9a: ff:7a:65:8f:7a:ef:80:ad:30:47:d8:ab:df:d7:14:43:76:43: 12:bf:a4:62:0b:23:77:03:16:6f:f3:a9:2a:e3:fe:a5:2e:69: 5c:71:9f:86:0f:a8:78:f1:7f:ae:46:7b:a6:5d:d5:d1:b5:b0: 52:6f:64:cf:ae:cd:f2:65:0b:90:ea:10:ac:6c:6d:b0:76:f7: c3:a5:a7:4a:50:92:b5:88:e8:ff:da:27:2b:b8:6d:06:38:42: 85:37:23:bb:03:b4:33:97:cc:ce:c3:f2:7a:a0:89:a3:f7:c9: d2:e4:6e:13:cf:37:f1:7c:0d:f2:82:cd:09:e9:f0:9e:8d:c7: 95:68:03:3f:ff:39:c2:59:88:f5:2f:8d:d3:0b:39:02:7d:91: a2:da:3d:59:d3:bf:5f:e7:7c:12:2f:82:eb:64:aa:29:06:4b: 30:93:2f:52:a7:c7:10:f3:99:0f:96:0c:99:a7:60:14:e3:17: 4b:e8:cd:6b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMU4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkyMjA1NDUzNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhkMGUyN2UtNjg2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO+bDzp9uNj3Vpw7Arcpey4uKy3/IWlAOCtHlAlemSC56VRw+/d6uHlY9d2V 6CSiT1mLg1B+Tdfmhty7pTlsj5bKiVMeMw6tmbVVQwXEPv5Cp8H0NL2dUk4YK/iw UTR3X2tqWEbjwJxWIoG4U43NzTwP5jXF49Qn0mQufso4H3Nw/0lgbhYBTQoCNslx aM/fbl27gsDgZoI1HfOxkcnlXbP6QNJi53oR4AzyvIgdf3A7gy+F4eUz0ZCRI5/G rf//iPHVjXZ4IJVzsLTWwDK4RBszOZoYtqgthucr3t6Bn+EXXQ4fwCPt7ZlSlPZr HYNv1iA5tfcmHQ6d+w3zI1buWssCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQra8Oh dnnENXHEJOUpGrwUuuMCYTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCOTUyNDU4 OTc3NzExRjBCRkQ4NkE4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ3//MA0GCSqGSIb3DQEBCwUAA4IBAQBtGW1zzh3v78Kv YIatLXTgq9gXV2gCyM5NjdeguumBqFm+buOie78tMyNq0iypJnehNaYqwnFEvDeU kl/c1kM3Ah/R69zQh5r/emWPeu+ArTBH2Kvf1xRDdkMSv6RiCyN3AxZv86kq4/6l LmlccZ+GD6h48X+uRnumXdXRtbBSb2TPrs3yZQuQ6hCsbG2wdvfDpadKUJK1iOj/ 2icruG0GOEKFNyO7A7Qzl8zOw/J6oImj98nS5G4TzzfxfA3ygs0J6fCejceVaAM/ /znCWYj1L43TCzkCfZGi2j1Z079f53wSL4LrZKopBkswky9Sp8cQ85kPlgyZp2AU 4xdL6M1r -----END CERTIFICATE-----Generated at Sun Oct 19 20:05:46 2025 by rpki-client