$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa File: A5D0EE5C78FB11F097FE627EC4F9AE02.roa (raw, json) Hash identifier: MfjujELcVkCC+2cMA2KX9PYpu5CUwgOuEqdGlX0A2qI= Subject key identifier: 89:3B:DE:2C:18:36:BD:CF:5B:50:58:35:86:92:72:80:49:ED:E1:B7 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 03CB Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa Signing time: Thu 14 Aug 2025 10:44:26 +0000 ROA not before: Thu 14 Aug 2025 10:44:26 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58487 IP address blocks: 103.247.8.0/22 maxlen: 24 203.175.8.0/22 maxlen: 24 203.194.112.0/22 maxlen: 24 218.33.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Aug 14 10:44:26 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=689dbe0a-fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:a2:2c:ba:48:8a:7a:5a:5c:fb:ac:54:10: 16:d5:76:1e:3b:51:3e:91:cf:1b:e0:87:b1:f6:9d: b9:4c:8f:ad:e7:0f:bc:34:3f:40:79:6e:4d:7e:ab: 68:ed:4f:bc:96:23:0c:c5:e8:d2:d1:0d:a1:55:09: a5:be:c7:d5:e4:5b:2c:93:37:d0:0f:73:dd:53:a9: c4:24:40:34:c5:1e:aa:f1:b0:72:61:00:d0:45:34: 57:4e:ed:ba:e9:0d:c6:af:c1:a8:94:82:21:ff:82: ba:d4:ea:ca:13:21:ba:c4:ed:cf:03:88:be:78:3e: 21:d5:ef:1a:50:c5:85:08:3f:b4:b2:35:4c:c4:d4: e7:f9:78:b5:4d:b7:6e:d4:24:fe:d8:00:60:b9:92: e4:2f:2e:5a:e7:24:c2:c2:ac:ea:60:e9:8c:c6:af: b0:cf:32:92:2a:aa:15:55:03:a4:61:45:f6:9e:b4: f2:2a:d9:ed:9c:3b:a0:0e:c1:a3:b3:b5:3a:a8:78: 9a:28:fb:af:5a:dc:65:12:c8:ac:99:ec:77:01:c4: ef:1c:79:79:18:bb:e1:36:f9:83:90:84:03:cc:b7: f6:81:ae:ae:4f:9c:38:40:eb:a0:c7:dd:c2:48:d3: dd:28:5d:a7:33:6b:8a:0b:54:15:f1:ca:b1:90:a6: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:DE:2C:18:36:BD:CF:5B:50:58:35:86:92:72:80:49:ED:E1:B7 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.8.0/22 203.175.8.0/22 203.194.112.0/22 218.33.100.0/22 Signature Algorithm: sha256WithRSAEncryption 11:02:7a:a3:8e:f6:48:9a:7d:23:40:91:9e:1c:f4:2b:fa:5e: a6:69:46:b3:45:37:2a:53:0c:88:8d:35:51:bc:7b:19:58:38: c3:ee:27:a8:c0:ce:92:bc:f1:7f:e5:a7:d6:10:66:d8:c4:d7: 17:29:65:6a:10:2c:80:9f:90:48:93:4d:bc:fb:37:6f:0d:90: ef:26:9f:dc:65:b5:46:de:1e:83:7c:f7:6f:cd:de:5e:1c:2c: 80:e3:cf:39:b8:1a:0e:f3:60:bf:ee:35:3b:46:56:a6:b7:56: ca:26:7b:8f:26:2f:18:7a:56:fd:d3:c6:97:de:60:57:3c:2e: 08:a9:05:e1:d8:b3:65:0d:f5:bb:44:31:a1:fe:aa:a5:cc:da: 2b:c5:90:1d:40:73:6c:3a:d9:06:89:f8:56:7a:a2:77:93:7a: 9f:8b:12:37:94:9b:a2:5c:16:fe:11:6e:78:dc:e1:b2:c6:a3: 2b:f3:5e:74:1c:bf:4d:95:8a:94:40:0a:d0:5c:53:70:dd:87: 0e:55:41:ba:ac:55:88:d8:8f:b7:29:6c:70:80:5e:d5:44:f6: d4:3e:1c:5a:0e:4d:ec:49:bf:58:cf:2f:10:6c:ff:95:94:bd: 04:94:6c:b8:d2:10:12:c9:fa:f3:b7:07:b2:b9:4a:57:7f:fa: e0:b2:54:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwODE0MTA0NDI2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODlkYmUwYS1mZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSOiLLpIinpaXPusVBAW1XYeO1E+kc8b4Iex9p25TI+t5w+8ND9AeW5Nfqto 7U+8liMMxejS0Q2hVQmlvsfV5FsskzfQD3PdU6nEJEA0xR6q8bByYQDQRTRXTu26 6Q3Gr8GolIIh/4K61OrKEyG6xO3PA4i+eD4h1e8aUMWFCD+0sjVMxNTn+Xi1Tbdu 1CT+2ABguZLkLy5a5yTCwqzqYOmMxq+wzzKSKqoVVQOkYUX2nrTyKtntnDugDsGj s7U6qHiaKPuvWtxlEsismex3AcTvHHl5GLvhNvmDkIQDzLf2ga6uT5w4QOugx93C SNPdKF2nM2uKC1QV8cqxkKYMzwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFIk73iwY Nr3PW1BYNYaScoBJ7eG3MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQTVEMEVFNUM3 OEZCMTFGMDk3RkU2MjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJn9wgDBALLrwgDBALLwnADBALaIWQwDQYJKoZIhvcNAQEL BQADggEBABECeqOO9kiafSNAkZ4c9Cv6XqZpRrNFNypTDIiNNVG8exlYOMPuJ6jA zpK88X/lp9YQZtjE1xcpZWoQLICfkEiTTbz7N28NkO8mn9xltUbeHoN892/N3l4c LIDjzzm4Gg7zYL/uNTtGVqa3Vsome48mLxh6Vv3TxpfeYFc8LgipBeHYs2UN9btE MaH+qqXM2ivFkB1Ac2w62QaJ+FZ6oneTep+LEjeUm6JcFv4Rbnjc4bLGoyvzXnQc v02VipRACtBcU3Ddhw5VQbqsVYjYj7cpbHCAXtVE9tQ+HFoOTexJv1jPLxBs/5WU vQSUbLjSEBLJ+vO3B7K5Sld/+uCyVH0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:23:37 2025 by rpki-client