$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa File: 38F85C12315611F0A6B1097AC4F9AE02.roa (raw, json) Hash identifier: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc= Subject key identifier: 13:99:EE:68:18:97:F1:BA:5B:9C:3B:68:78:C1:83:F7:7A:21:1C:45 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 084B Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:11 +0000 ROA not before: Wed 08 Oct 2025 22:54:11 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151373 IP address blocks: 163.53.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:11 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb93-2e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:62:09:48:82:74:c8:6a:2c:27:b8:18:67: fe:8a:94:17:ba:ca:77:bf:35:97:12:20:7d:e6:73: a2:b9:26:17:74:6a:f5:72:69:d9:ca:96:3d:5b:c8: 4a:e8:2a:c1:18:96:1d:e6:13:ad:28:b5:e1:17:1b: 15:59:65:e8:b1:ec:df:e4:1d:e7:18:b6:6b:e6:db: 08:e6:df:f6:1b:0e:9c:a7:20:fb:6c:ec:1e:fc:3a: 2c:d0:01:1e:9d:26:62:36:0c:3e:35:10:1b:45:4f: fd:b5:ed:bf:22:50:e3:c4:8f:02:55:84:bb:5c:8c: 07:48:e3:e5:fd:8c:fc:fa:94:a0:ab:12:06:75:50: da:1a:fd:35:54:14:d6:7b:b6:69:c6:38:21:fd:27: af:df:99:4a:83:14:79:b0:3b:de:38:3e:e7:bc:43: b6:e3:05:58:e0:14:9b:df:4d:dc:7c:a3:32:93:2a: b2:ba:80:2a:f1:4f:03:59:33:92:3b:6b:0f:e5:c6: dc:65:80:29:db:b6:41:c9:c4:31:a2:94:05:f7:47: 7f:4e:88:90:42:fc:90:cd:84:2d:c7:94:ba:70:1a: be:51:2b:1b:b9:68:76:05:5c:44:5c:10:dd:d2:40: 21:8c:58:19:02:a0:ec:90:96:56:df:ea:2a:d1:7c: 37:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:EE:68:18:97:F1:BA:5B:9C:3B:68:78:C1:83:F7:7A:21:1C:45 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.19.0/24 Signature Algorithm: sha256WithRSAEncryption b2:e7:0d:97:29:35:18:1d:c0:59:3b:87:59:ee:ca:db:a7:8e: 1b:43:16:64:68:9e:78:72:c5:c9:0c:fc:8c:55:6c:43:a6:59: 9c:75:2b:b2:f3:96:57:b4:13:a3:a9:29:4d:de:6a:b3:ff:55: 70:4c:70:cd:51:76:b6:23:13:24:27:ff:49:60:5c:81:25:36: d2:bc:a5:76:f0:4b:d8:69:48:73:6b:f1:d9:08:f4:ac:8d:2c: e2:10:30:62:5b:15:ec:1d:1d:56:be:00:5d:e5:cf:6d:35:30: 08:73:49:45:ce:33:55:ea:72:a6:28:d8:12:93:41:70:e2:3f: 35:5b:7a:ef:4e:a8:e4:3e:f0:c6:58:a1:9f:37:9d:38:93:22: 02:75:1d:4d:da:2d:54:8d:75:67:5a:f1:b3:49:57:ea:89:af: e1:07:34:a8:7a:42:b0:12:53:4c:f9:ac:9a:dc:2f:6c:43:42: af:e7:77:4d:50:9a:83:ff:f5:5a:57:2e:ff:33:57:9a:1a:c4: 31:02:32:4c:5a:11:ef:9f:1e:42:dd:9d:1f:1c:a0:bd:60:99: 44:6d:5c:da:cf:11:76:3e:c2:11:bf:83:9a:d2:d1:51:de:f2: 53:11:db:ba:f9:77:b4:ae:28:de:58:cd:0e:7f:c9:09:30:8e: c2:94:6b:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5My0yZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7FiCUiCdMhqLCe4GGf+ipQXusp3vzWXEiB95nOiuSYXdGr1cmnZypY9W8hK 6CrBGJYd5hOtKLXhFxsVWWXosezf5B3nGLZr5tsI5t/2Gw6cpyD7bOwe/Dos0AEe nSZiNgw+NRAbRU/9te2/IlDjxI8CVYS7XIwHSOPl/Yz8+pSgqxIGdVDaGv01VBTW e7Zpxjgh/Sev35lKgxR5sDveOD7nvEO24wVY4BSb303cfKMykyqyuoAq8U8DWTOS O2sP5cbcZYAp27ZBycQxopQF90d/ToiQQvyQzYQtx5S6cBq+USsbuWh2BVxEXBDd 0kAhjFgZAqDskJZW3+oq0Xw3QwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBOZ7mgY l/G6W5w7aHjBg/d6IRxFMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMzhGODVDMTIz MTU2MTFGMEE2QjEwOTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjNRMwDQYJKoZIhvcNAQELBQADggEBALLnDZcpNRgdwFk7 h1nuytunjhtDFmRonnhyxckM/IxVbEOmWZx1K7Lzlle0E6OpKU3earP/VXBMcM1R drYjEyQn/0lgXIElNtK8pXbwS9hpSHNr8dkI9KyNLOIQMGJbFewdHVa+AF3lz201 MAhzSUXOM1XqcqYo2BKTQXDiPzVbeu9OqOQ+8MZYoZ83nTiTIgJ1HU3aLVSNdWda 8bNJV+qJr+EHNKh6QrASU0z5rJrcL2xDQq/nd01QmoP/9VpXLv8zV5oaxDECMkxa Ee+fHkLdnR8coL1gmURtXNrPEXY+whG/g5rS0VHe8lMR27r5d7SuKN5YzQ5/yQkw jsKUa5M= -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:03 2025 by rpki-client