$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa File: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (raw, json) Hash identifier: 9QKmGnaF4XUr0K4IROOwqH5Q5TLExL2Xqyv7L8jbI74= Subject key identifier: B5:FC:85:77:56:84:F4:C2:86:A8:28:97:0C:37:61:10:7E:50:73:D5 Certificate issuer: /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Certificate serial: 0616 Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa Signing time: Fri 30 May 2025 23:33:24 +0000 ROA not before: Fri 30 May 2025 23:33:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 131273 IP address blocks: 103.68.138.0/24 maxlen: 24 103.117.106.0/24 maxlen: 24 103.166.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1558 (0x616) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495 Validity Not Before: May 30 23:33:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a4044-223a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:8c:b2:fa:b1:b2:af:62:5f:4c:1c:73:76: 6a:33:8d:e6:71:66:f6:08:75:78:ca:a7:cd:00:70: 02:40:31:85:81:40:5d:83:20:81:6e:89:06:e6:91: 04:13:62:a1:03:f8:2c:39:52:d5:b5:00:fd:87:b0: 83:be:07:ef:ab:7c:e8:33:69:d0:ff:40:46:ec:0e: 0b:51:3a:47:c3:0d:15:29:ea:4f:95:0e:f8:4a:5f: 28:0f:f3:09:35:26:77:43:92:f9:13:dc:3b:ce:19: 36:0a:cd:58:75:5a:26:3e:a7:47:09:74:51:ea:5c: 4b:25:1f:a1:7f:7d:ca:1c:66:76:90:d1:dd:bb:ae: c9:5f:9e:69:01:94:df:53:bf:e7:7e:55:4d:1b:20: a6:0e:66:b3:68:67:d6:06:66:78:70:5d:7b:32:8e: 9c:10:6b:f8:5a:de:17:8b:16:b1:b7:97:a7:ed:a2: 9e:60:b7:78:0b:46:cc:d2:2d:fb:1d:53:78:9e:94: 65:82:9e:af:e8:24:c8:96:85:d2:27:27:df:a6:f7: 14:1d:1a:3e:0a:25:b7:d4:c3:7d:2b:35:19:60:06: 3c:8b:81:4d:97:d2:e7:c7:7e:0c:7f:f5:5d:ee:ca: ac:7a:24:5f:2d:6e:9c:b3:30:95:0b:00:b5:b5:f5: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FC:85:77:56:84:F4:C2:86:A8:28:97:0C:37:61:10:7E:50:73:D5 X509v3 Authority Key Identifier: keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/5533E6AEBD3711EB8D76EF31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.138.0/24 103.117.106.0/24 103.166.81.0/24 Signature Algorithm: sha256WithRSAEncryption 25:93:92:a6:c4:49:df:bf:64:39:5d:06:54:95:ed:95:48:83: f5:b0:93:11:49:65:16:93:fe:84:2c:3a:3b:a3:bc:5e:16:41: aa:3b:4c:9a:d7:6a:c6:95:9c:12:71:98:84:9c:f6:1f:bb:37: d7:1d:e5:db:e4:2d:68:6c:8a:21:a7:63:fa:3a:17:3e:de:8f: 83:45:40:50:25:54:30:9d:a5:c0:91:6c:fb:19:77:ec:38:09: 28:6b:ec:31:39:f4:95:5f:37:70:1a:75:35:5b:80:b3:33:f5: c0:13:c2:ce:f8:4f:c3:e4:b9:3f:6c:a8:2b:1c:7a:09:ab:19: 27:77:9e:11:f5:f1:ab:29:86:c8:4d:12:97:eb:39:23:47:32: eb:3d:78:60:a8:19:08:77:bc:6d:0c:5b:a3:e1:e7:a3:f6:4f: f2:32:5b:3d:90:e6:8d:16:f0:36:a2:7f:d1:6c:ed:50:ed:f1: 6a:13:10:94:18:d1:2e:13:9a:69:7b:da:0a:a4:1a:92:ad:9b: 1b:d7:76:bb:1d:ef:ee:5a:d5:89:80:d8:b1:7f:5e:57:ab:b8: e9:ff:a1:94:0e:7d:fc:1e:db:04:2d:b1:70:39:6c:59:62:91: ab:3c:68:b3:98:1d:f1:fc:b8:f2:f5:1c:c8:a5:b6:dc:c2:36: aa:d6:ed:a7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjUxMTAvBgNVBAUTKDU3MjM3OTRDRDgyMjZCMzMxRkE3NjREQjlFNDFGNUU5 OTRCRDE0OTUwHhcNMjUwNTMwMjMzMzI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhNDA0NC0yMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFKMsvqxsq9iX0wcc3ZqM43mcWb2CHV4yqfNAHACQDGFgUBdgyCBbokG5pEE E2KhA/gsOVLVtQD9h7CDvgfvq3zoM2nQ/0BG7A4LUTpHww0VKepPlQ74Sl8oD/MJ NSZ3Q5L5E9w7zhk2Cs1YdVomPqdHCXRR6lxLJR+hf33KHGZ2kNHdu67JX55pAZTf U7/nflVNGyCmDmazaGfWBmZ4cF17Mo6cEGv4Wt4Xixaxt5en7aKeYLd4C0bM0i37 HVN4npRlgp6v6CTIloXSJyffpvcUHRo+CiW31MN9KzUZYAY8i4FNl9Lnx34Mf/Vd 7sqseiRfLW6cszCVCwC1tfWI+wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLX8hXdW hPTChqgolww3YRB+UHPVMB8GA1UdIwQYMBaAFFcjeUzYImszH6dk255B9emUvRSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNS83MkZCQUQ4OEE3 RDAxMUVCQkE1MTE1MjJDNEY5QUUwMi9WeU41VE5naWF6TWZwMlRibmtIMTZaUzlG SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5TjVUTmdpYXpNZnAyVGJua0gxNlpTOUZKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNBQjUvNzJGQkFEODhBN0QwMTFFQkJBNTExNTIyQzRGOUFFMDIvNTUzM0U2QUVC RDM3MTFFQjhENzZFRjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnRIoDBABndWoDBABnplEwDQYJKoZIhvcNAQELBQADggEB ACWTkqbESd+/ZDldBlSV7ZVIg/WwkxFJZRaT/oQsOjujvF4WQao7TJrXasaVnBJx mISc9h+7N9cd5dvkLWhsiiGnY/o6Fz7ej4NFQFAlVDCdpcCRbPsZd+w4CShr7DE5 9JVfN3AadTVbgLMz9cATws74T8PkuT9sqCscegmrGSd3nhH18asphshNEpfrOSNH Mus9eGCoGQh3vG0MW6Ph56P2T/IyWz2Q5o0W8Daif9Fs7VDt8WoTEJQY0S4Tmml7 2gqkGpKtmxvXdrsd7+5a1YmA2LF/XleruOn/oZQOffwe2wQtsXA5bFlikas8aLOY HfH8uPL1HMilttzCNqrW7ac= -----END CERTIFICATE-----Generated at Mon Jun 2 05:44:09 2025 by rpki-client