$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa File: 8D3F53F6A15F11F09B632177C4F9AE02.roa (raw, json) Hash identifier: h/RxqPeNlZHrrroyidunxTzpRf8yC4MSHRaPkbI0Oxg= Subject key identifier: 0D:FF:1E:E1:33:2C:6E:B5:04:94:C0:98:6A:F1:D3:5A:74:2E:EE:61 Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Certificate serial: 02 Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa Signing time: Sat 04 Oct 2025 20:20:21 +0000 ROA not before: Sat 04 Oct 2025 20:20:21 +0000 ROA not after: Fri 30 Jan 2026 00:00:00 +0000 asID: 17995 IP address blocks: 123.253.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Validity Not Before: Oct 4 20:20:21 2025 GMT Not After : Jan 30 00:00:00 2026 GMT Subject: CN=68e18185-81ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:1c:17:ed:fa:d5:a0:41:dd:7f:37:d9:6b: 91:a8:70:c2:08:4f:55:2b:cf:62:40:8b:a9:f9:ea: 0c:41:72:02:15:50:05:ce:af:a3:43:48:3a:91:f0: 56:2c:66:59:05:63:0f:5f:07:48:e9:b3:9e:b7:12: ab:71:07:9c:4e:af:4e:ad:b6:0f:5e:cd:87:cb:a7: 23:37:a9:9c:6b:57:7d:45:0c:ce:32:d9:0d:58:1c: f5:b9:5f:b2:1d:1f:26:bc:86:b8:c4:fb:e6:f4:9b: 68:41:20:64:67:53:a8:f4:8f:2e:71:5f:99:25:91: 8f:bb:7b:05:47:a0:91:7e:17:21:c2:27:06:66:bc: 26:6c:50:10:a2:7c:05:46:dc:e3:5c:8a:07:7e:6d: 52:e1:1c:42:20:e6:91:35:4d:93:94:a4:00:97:38: 38:aa:45:69:94:09:ec:7d:df:23:e8:70:79:87:45: 58:d2:a8:40:99:d6:55:5b:ea:11:b8:b8:ca:4f:dc: fb:f8:73:20:f8:76:a0:4c:dd:34:ab:7f:1f:b1:a9: 8c:91:88:65:70:66:b5:ed:77:57:fd:15:b7:a6:b6: 62:ab:37:6d:34:79:c8:f3:17:c5:2c:ec:f3:b9:06: e4:f7:04:09:26:45:b7:84:d8:f3:59:fb:6f:27:6a: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:1E:E1:33:2C:6E:B5:04:94:C0:98:6A:F1:D3:5A:74:2E:EE:61 X509v3 Authority Key Identifier: keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.4.0/22 Signature Algorithm: sha256WithRSAEncryption 01:36:57:fd:52:9d:09:28:72:a3:61:de:88:1e:ff:7e:40:c0: 63:43:bf:a6:65:0e:e5:39:e8:3e:47:e8:e3:bf:17:8b:57:71: 0b:b4:e3:93:ff:3b:32:f6:3e:6c:1d:61:42:14:28:97:93:69: b6:08:d9:be:03:5c:49:78:da:b4:68:89:16:3d:c6:d3:40:d2: 52:56:49:fc:c3:5e:28:fa:38:1a:c1:d9:60:85:18:6e:d9:eb: 69:b3:1a:8a:70:0e:e7:b5:19:39:da:1b:63:0a:80:2e:50:f0: 61:43:8d:48:e0:58:a5:d9:f9:45:e3:52:68:e6:3d:4d:82:b5: c7:ee:00:09:74:85:f0:e2:99:7d:64:18:38:e0:62:54:a2:b9: 67:f0:34:2c:96:d1:55:9a:38:50:cf:78:ef:b6:03:8b:36:68: 4d:76:5c:fa:ac:fc:6e:d6:3d:2d:6e:a0:cf:40:65:a3:76:8b: 92:8f:83:d8:34:17:45:ca:69:ab:43:f3:f0:09:d1:a5:ba:df: 46:dc:d9:39:d4:9f:ed:79:8f:29:f5:fa:db:4f:26:33:5c:1f: 8b:39:ca:80:61:56:8e:12:05:82:dc:12:10:6f:49:73:15:b3: 43:4b:13:18:12:65:a5:58:7a:ce:3d:4f:e5:9f:5b:25:cf:88: 6d:99:5d:ef -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0FFNjExMC8GA1UEBRMoNjRDQTU0MjZBQzdBNTUwQkRBMTA1M0EwMTI4MzE0NEUy RENEMkJENzAeFw0yNTEwMDQyMDIwMjFaFw0yNjAxMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTE4MTg1LTgxYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1/RwX7frVoEHdfzfZa5GocMIIT1Urz2JAi6n56gxBcgIVUAXOr6NDSDqR8FYs ZlkFYw9fB0jps563EqtxB5xOr06ttg9ezYfLpyM3qZxrV31FDM4y2Q1YHPW5X7Id Hya8hrjE++b0m2hBIGRnU6j0jy5xX5klkY+7ewVHoJF+FyHCJwZmvCZsUBCifAVG 3ONcigd+bVLhHEIg5pE1TZOUpACXODiqRWmUCex93yPocHmHRVjSqECZ1lVb6hG4 uMpP3Pv4cyD4dqBM3TSrfx+xqYyRiGVwZrXtd1f9FbemtmKrN200ecjzF8Us7PO5 BuT3BAkmRbeE2PNZ+28naq4PAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDf8e4TMs brUElMCYavHTWnQu7mEwHwYDVR0jBBgwFoAUZMpUJqx6VQvaEFOgEoMUTi3NK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQUU2LzY1RDA0NEM0OTQx ODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1wVUpxeDZWUXZhRUZPZ0VvTVVUaTNOSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0FFNi82NUQwNDRDNDk0MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi84RDNGNTNGNkEx NUYxMUYwOUI2MzIxNzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAnv9BDANBgkqhkiG9w0BAQsFAAOCAQEAATZX/VKdCShyo2He iB7/fkDAY0O/pmUO5TnoPkfo478Xi1dxC7Tjk/87MvY+bB1hQhQol5NptgjZvgNc SXjatGiJFj3G00DSUlZJ/MNeKPo4GsHZYIUYbtnrabMainAO57UZOdobYwqALlDw YUONSOBYpdn5ReNSaOY9TYK1x+4ACXSF8OKZfWQYOOBiVKK5Z/A0LJbRVZo4UM94 77YDizZoTXZc+qz8btY9LW6gz0Blo3aLko+D2DQXRcppq0Pz8AnRpbrfRtzZOdSf 7XmPKfX6208mM1wfiznKgGFWjhIFgtwSEG9JcxWzQ0sTGBJlpVh6zj1P5Z9bJc+I bZld7w== -----END CERTIFICATE-----Generated at Mon Oct 20 15:27:14 2025 by rpki-client