$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa File: 52201DA252D411F0A7A6D71CC4F9AE02.roa (raw, json) Hash identifier: fV4R5q8jmyaZ1y6M6EGHK7qWH/l+INutGWYgcX5lTMc= Subject key identifier: 9C:49:D5:2C:9F:67:77:AE:AA:B4:61:8E:15:13:2B:C3:B2:27:9F:60 Certificate issuer: /CN=A917F0FA/serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Certificate serial: 0190 Authority key identifier: 50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa Signing time: Sun 31 Aug 2025 04:22:11 +0000 ROA not before: Sun 31 Aug 2025 04:22:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140045 IP address blocks: 103.248.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F0FA, serialNumber=50A580F1BD125F0AEDC591FFC8DCDA9C66E12C9F Validity Not Before: Aug 31 04:22:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b3cdf2-1606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:52:a0:7c:02:eb:cf:42:4c:ce:77:23:6e: ca:0f:9b:1a:02:75:c8:9c:b9:21:8d:02:63:04:c2: 3e:be:9d:42:a6:a1:98:bc:b3:be:ba:9b:b1:8d:3c: 3d:c3:15:46:ac:0e:78:1b:e8:24:52:4c:5e:eb:aa: 66:75:32:90:62:94:cf:8f:bb:7f:d5:fc:0e:28:2b: 0b:61:d7:c6:80:62:ad:6c:5c:49:9a:fa:28:08:20: 34:e7:ce:c1:31:40:fe:cf:61:e0:80:df:8f:7b:b5: 2f:f5:3e:50:c7:a3:40:5d:a5:26:e6:16:90:ff:db: 56:a3:0f:d8:3a:94:80:2f:28:8f:0f:3a:df:34:ab: c9:4e:84:6e:ca:cd:ef:5d:39:0a:f2:4b:77:10:e5: 68:92:37:54:5c:d0:df:0b:3c:82:0d:7f:21:b2:7b: 1b:5e:ae:c7:9e:92:8b:63:8e:dc:99:a2:02:1c:3b: 57:92:8b:70:1e:af:d2:3b:d7:58:58:92:27:a3:94: 9c:c8:6f:9f:b8:8b:f1:eb:b4:1a:6f:fe:5a:4b:85: 14:b3:30:6b:67:8c:b3:5b:2e:a0:1e:5f:fe:69:69: 1d:3d:9b:b1:23:45:ba:eb:43:f5:be:20:f5:ba:da: b2:19:8d:29:12:1c:e7:ad:ea:da:52:1e:90:6a:15: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:D5:2C:9F:67:77:AE:AA:B4:61:8E:15:13:2B:C3:B2:27:9F:60 X509v3 Authority Key Identifier: keyid:50:A5:80:F1:BD:12:5F:0A:ED:C5:91:FF:C8:DC:DA:9C:66:E1:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/UKWA8b0SXwrtxZH_yNzanGbhLJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKWA8b0SXwrtxZH_yNzanGbhLJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0FA/206DFC5034E711EEB0C83616C4F9AE02/52201DA252D411F0A7A6D71CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.223.0/24 Signature Algorithm: sha256WithRSAEncryption 27:68:22:4e:c4:d5:10:9f:95:54:5c:a7:e7:25:20:12:e7:a4: 53:54:54:63:12:43:49:0f:37:2f:27:c9:39:e5:a0:d9:dc:c4: 50:59:79:0e:1d:88:ea:dd:fe:6a:44:ce:8b:b0:17:ff:ca:dc: 74:82:94:ef:eb:f8:0a:e9:46:86:bd:7b:e9:02:08:04:82:f3: d7:f4:c2:1b:cb:f8:73:91:69:2e:de:eb:c1:7a:e2:6b:ff:8a: 34:1c:72:09:b9:4c:3d:a8:62:07:53:73:e9:8f:a2:70:24:02: f0:81:8d:f9:4c:26:d4:dd:76:cc:e1:e8:71:79:aa:ef:8d:82: a4:03:be:fb:6e:0e:0e:96:76:fa:29:d4:37:2c:d4:1a:05:7f: 8e:04:09:8e:d2:3e:f2:e2:c4:82:76:42:94:32:90:7f:e9:9d: ca:7e:48:9c:05:57:e2:bb:bd:e3:a3:83:53:c6:30:12:db:74: 81:0c:af:23:d6:4f:56:2d:97:21:63:a5:b1:af:4e:2d:f5:18: ec:4e:36:45:c2:fd:1a:17:c8:2e:61:d9:97:f2:f5:35:82:b0: 74:a7:c4:b6:d0:5b:92:b0:64:91:0e:2d:f6:1c:5f:00:aa:52: 24:10:4f:6f:7c:b6:be:ac:df:60:7a:64:7b:43:70:92:2f:87: 85:13:03:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwRkExMTAvBgNVBAUTKDUwQTU4MEYxQkQxMjVGMEFFREM1OTFGRkM4RENEQTlD NjZFMTJDOUYwHhcNMjUwODMxMDQyMjExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzY2RmMi0xNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd9SoHwC689CTM53I27KD5saAnXInLkhjQJjBMI+vp1CpqGYvLO+upuxjTw9 wxVGrA54G+gkUkxe66pmdTKQYpTPj7t/1fwOKCsLYdfGgGKtbFxJmvooCCA0587B MUD+z2HggN+Pe7Uv9T5Qx6NAXaUm5haQ/9tWow/YOpSALyiPDzrfNKvJToRuys3v XTkK8kt3EOVokjdUXNDfCzyCDX8hsnsbXq7HnpKLY47cmaICHDtXkotwHq/SO9dY WJIno5ScyG+fuIvx67Qab/5aS4UUszBrZ4yzWy6gHl/+aWkdPZuxI0W660P1viD1 utqyGY0pEhznreraUh6QahUBowIDAQABo4IClTCCApEwHQYDVR0OBBYEFJxJ1Syf Z3euqrRhjhUTK8OyJ59gMB8GA1UdIwQYMBaAFFClgPG9El8K7cWR/8jc2pxm4Syf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjBGQS8yMDZERkM1MDM0 RTcxMUVFQjBDODM2MTZDNEY5QUUwMi9VS1dBOGIwU1h3cnR4WkhfeU56YW5HYmhM SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VLV0E4YjBTWHdydHhaSF95TnphbkdiaExKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YwRkEvMjA2REZDNTAzNEU3MTFFRUIwQzgzNjE2QzRGOUFFMDIvNTIyMDFEQTI1 MkQ0MTFGMEE3QTZENzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn+N8wDQYJKoZIhvcNAQELBQADggEBACdoIk7E1RCflVRc p+clIBLnpFNUVGMSQ0kPNy8nyTnloNncxFBZeQ4diOrd/mpEzouwF//K3HSClO/r +ArpRoa9e+kCCASC89f0whvL+HORaS7e68F64mv/ijQccgm5TD2oYgdTc+mPonAk AvCBjflMJtTddszh6HF5qu+NgqQDvvtuDg6Wdvop1Dcs1BoFf44ECY7SPvLixIJ2 QpQykH/pncp+SJwFV+K7veOjg1PGMBLbdIEMryPWT1YtlyFjpbGvTi31GOxONkXC /RoXyC5h2Zfy9TWCsHSnxLbQW5KwZJEOLfYcXwCqUiQQT298tr6s32B6ZHtDcJIv h4UTA0Q= -----END CERTIFICATE-----Generated at Tue Sep 9 10:41:29 2025 by rpki-client