$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/388CE68A428611F092DAFA1EC4F9AE02.roa File: 388CE68A428611F092DAFA1EC4F9AE02.roa (raw, json) Hash identifier: ucTOCSKFxfVt4aVAiq8tfdLFAEJ+Oe0T9Y3QBbCsy/Y= Subject key identifier: 8C:94:57:4A:88:9A:75:1D:1E:74:0B:A7:ED:5A:0F:79:7D:9D:17:65 Certificate issuer: /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Certificate serial: C4 Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/388CE68A428611F092DAFA1EC4F9AE02.roa Signing time: Fri 06 Jun 2025 03:27:49 +0000 ROA not before: Fri 06 Jun 2025 03:27:49 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 45163 IP address blocks: 203.176.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828 Validity Not Before: Jun 6 03:27:49 2025 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=68426035-a1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ad:63:eb:2c:56:44:e5:3f:ab:f4:f4:84:08: cd:e2:ab:8e:3e:ed:8e:06:8f:48:26:83:47:03:fd: 78:25:8b:70:72:83:38:90:cb:08:b5:23:a3:2b:ee: 4f:4d:9c:80:76:b2:83:c4:19:50:5d:f4:49:72:6a: b1:9b:10:c7:ac:13:03:71:d5:f9:72:64:93:47:29: de:2b:b2:3f:47:92:bf:52:8e:1b:60:23:cf:0c:bf: df:dd:9e:00:7f:2a:13:69:fd:5e:6f:df:49:09:7a: 4c:c7:71:3f:cf:b0:9d:72:7a:1c:7b:4d:88:7c:49: df:48:98:07:49:d4:00:ea:cb:a2:c7:de:3c:a9:05: 61:3b:e8:ce:07:61:46:18:e3:36:c0:66:b0:d8:f8: 65:e8:c7:de:6d:68:08:d0:43:e5:ff:eb:5d:3f:4f: fd:ff:a5:07:c3:a5:28:1d:26:c9:be:9c:14:6c:93: 6a:9b:17:dc:df:ab:c1:d5:e9:42:e3:71:9d:12:e6: f3:a0:94:72:f4:0a:15:bf:47:d2:ca:76:db:4f:ab: 40:88:43:ca:d3:42:05:98:20:05:95:1f:72:5a:4a: 66:47:aa:6f:6f:1a:fd:60:d9:8e:79:4e:a6:3c:40: a2:92:24:48:1c:67:fe:92:20:e0:b2:a6:40:2e:46: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:57:4A:88:9A:75:1D:1E:74:0B:A7:ED:5A:0F:79:7D:9D:17:65 X509v3 Authority Key Identifier: keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/388CE68A428611F092DAFA1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.176.189.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d0:41:c2:40:04:69:56:3c:9b:4c:ef:0c:19:85:47:29:e6: f6:6d:77:f3:ca:fb:70:7c:de:9d:4b:1e:4a:40:af:cc:d3:02: 36:35:b0:c7:d1:ac:41:72:ff:e8:b4:3b:f0:62:12:7b:66:20: 95:b6:f2:6d:95:d6:74:ad:e7:80:ee:11:9e:ab:da:e0:33:f0: ec:6d:7b:b5:4c:9b:4a:ab:36:e5:81:b5:cd:63:0d:2a:c6:fa: 22:36:57:e8:aa:99:2e:c4:e1:df:04:ce:cc:c2:44:05:93:cf: 67:ba:c3:a7:2c:db:ff:d3:b5:97:a7:a5:62:d2:1e:07:2e:ce: 15:09:fe:b2:98:6b:72:32:35:13:74:20:6f:c0:df:45:de:7c: 13:53:43:be:77:02:04:63:7b:82:93:ce:65:ee:08:28:c4:5f: ec:d9:ec:00:1f:49:95:35:84:63:ba:ad:06:b3:ee:5d:c5:f1: d6:ff:58:ad:0b:68:55:0c:78:dc:cb:e1:13:41:4e:26:eb:2f: 2e:78:e2:ed:c9:a4:e8:2a:1f:0f:28:3d:70:16:88:40:15:16: 6e:1a:59:a3:c8:63:57:d7:af:82:18:97:83:a7:a9:80:76:a9: d1:12:08:f6:20:53:dc:ed:79:06:a4:68:2c:66:b1:36:26:8a: 45:e6:43:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyODcxMTAvBgNVBAUTKEQ4QjFFMjM4OUJBNTkxRkQ3OUI5QTUwNEFGNUE0NERB RTBBNkU4MjgwHhcNMjUwNjA2MDMyNzQ5WhcNMzgwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQyNjAzNS1hMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7K1j6yxWROU/q/T0hAjN4quOPu2OBo9IJoNHA/14JYtwcoM4kMsItSOjK+5P TZyAdrKDxBlQXfRJcmqxmxDHrBMDcdX5cmSTRyneK7I/R5K/Uo4bYCPPDL/f3Z4A fyoTaf1eb99JCXpMx3E/z7Cdcnoce02IfEnfSJgHSdQA6suix948qQVhO+jOB2FG GOM2wGaw2Phl6MfebWgI0EPl/+tdP0/9/6UHw6UoHSbJvpwUbJNqmxfc36vB1elC 43GdEubzoJRy9AoVv0fSynbbT6tAiEPK00IFmCAFlR9yWkpmR6pvbxr9YNmOeU6m PECikiRIHGf+kiDgsqZALkYEAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyUV0qI mnUdHnQLp+1aD3l9nRdlMB8GA1UdIwQYMBaAFNix4jibpZH9ebmlBK9aRNrgpugo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI4Ny8zMDdDRkYxRUIz NzcxMUVGQjkxODREN0FDNEY5QUUwMi8yTEhpT0p1bGtmMTV1YVVFcjFwRTJ1Q202 Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMSGlPSnVsa2YxNXVhVUVyMXBFMnVDbTZDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEMyODcvMzA3Q0ZGMUVCMzc3MTFFRkI5MTg0RDdBQzRGOUFFMDIvMzg4Q0U2OEE0 Mjg2MTFGMDkyREFGQTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsL0wDQYJKoZIhvcNAQELBQADggEBAEDQQcJABGlWPJtM 7wwZhUcp5vZtd/PK+3B83p1LHkpAr8zTAjY1sMfRrEFy/+i0O/BiEntmIJW28m2V 1nSt54DuEZ6r2uAz8Oxte7VMm0qrNuWBtc1jDSrG+iI2V+iqmS7E4d8EzszCRAWT z2e6w6cs2//TtZenpWLSHgcuzhUJ/rKYa3IyNRN0IG/A30XefBNTQ753AgRje4KT zmXuCCjEX+zZ7AAfSZU1hGO6rQaz7l3F8db/WK0LaFUMeNzL4RNBTibrLy544u3J pOgqHw8oPXAWiEAVFm4aWaPIY1fXr4IYl4OnqYB2qdESCPYgU9zteQakaCxmsTYm ikXmQ9o= -----END CERTIFICATE-----Generated at Mon Oct 27 12:00:02 2025 by rpki-client