$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa File: 53B6182C213611EAB9F02B49C4F9AE02.roa (raw, json) Hash identifier: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE= Subject key identifier: 3F:F4:7B:87:73:0C:E9:94:9F:49:F6:D1:12:12:7F:56:69:86:D4:64 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0BF3 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa Signing time: Thu 18 Sep 2025 19:29:35 +0000 ROA not before: Thu 18 Sep 2025 19:29:35 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58983 IP address blocks: 45.119.160.0/22 maxlen: 22 45.119.160.0/23 maxlen: 23 45.119.160.0/24 maxlen: 24 45.119.161.0/24 maxlen: 24 45.119.162.0/23 maxlen: 23 45.119.162.0/24 maxlen: 24 45.119.163.0/24 maxlen: 24 103.240.176.0/22 maxlen: 22 103.240.176.0/23 maxlen: 23 103.240.176.0/24 maxlen: 24 103.240.177.0/24 maxlen: 24 103.240.178.0/23 maxlen: 23 103.240.178.0/24 maxlen: 24 103.240.179.0/24 maxlen: 24 2400:5880::/32 maxlen: 32 2400:5880::/33 maxlen: 33 2400:5880:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Sep 18 19:29:35 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cc5d9f-a239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:19:93:82:f9:b2:1e:dc:61:44:e2:3e:80: 22:42:23:de:c7:a4:38:0c:ca:86:94:21:ef:bf:ad: e3:7b:11:84:11:fb:1f:7b:81:17:ad:37:ab:86:1a: 20:d7:64:90:e5:ac:58:41:5a:9c:82:e9:bd:18:60: ae:ad:88:07:08:87:bd:45:92:67:f7:a8:4a:35:c8: d4:7b:cd:bf:5d:8c:02:94:22:9e:fa:94:92:7c:57: 75:9d:b2:68:0a:a5:05:46:16:da:c7:6e:b3:aa:e7: 0f:e5:2b:70:de:90:a2:42:59:39:6c:87:65:f3:7f: 80:9a:97:52:db:ab:3f:15:dd:0d:1f:7c:c1:33:ab: 97:4c:65:81:36:b3:f4:cd:7a:e4:65:fb:72:5d:95: cd:50:76:4f:56:08:37:10:53:00:77:9c:70:86:c1: d7:c1:ed:e5:11:83:a8:23:3c:0a:5d:e4:18:08:36: 14:e0:0d:00:59:85:1b:6f:17:bc:a2:b8:fb:da:4a: 6b:73:36:45:86:0b:b6:ae:cb:78:83:ec:52:ca:c9: d9:f4:39:72:04:4a:eb:84:1a:f7:cb:2b:73:1f:42: b2:a0:38:8d:b7:20:13:2f:7e:8a:d5:1c:1c:41:a0: ac:25:fa:24:a7:ec:ff:7c:54:ee:60:0b:02:03:f1: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:7B:87:73:0C:E9:94:9F:49:F6:D1:12:12:7F:56:69:86:D4:64 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.160.0/22 103.240.176.0/22 IPv6: 2400:5880::/32 Signature Algorithm: sha256WithRSAEncryption b8:18:c0:f2:26:58:f9:59:b2:57:e7:1a:79:07:11:b4:db:93: e8:c2:30:fb:20:63:b1:be:f1:c6:08:44:dd:0f:3c:b2:58:fa: cd:ae:93:b2:c1:b9:b1:90:e8:e6:d2:f8:3e:f4:cf:03:e1:b0: bf:11:c7:16:66:87:df:cc:33:e8:ba:d5:5d:e6:97:f5:b4:9b: d8:73:fe:58:83:d0:f5:7d:e6:03:18:19:ef:da:7d:6a:99:f2: d7:91:17:2a:35:9b:79:91:26:3d:84:43:aa:6e:a1:dd:cf:e5: a3:f9:5d:19:ea:c8:24:d1:5c:b6:d2:ab:cd:66:1c:f4:d8:7a: d1:33:77:5c:f5:fe:01:98:59:a2:74:75:80:6b:15:8b:1a:6b: 70:e8:bd:ca:29:26:2c:e0:5b:45:ee:4f:40:fb:3a:07:41:7c: 99:fe:27:1d:46:ac:7b:f0:bf:f5:c5:fb:d8:9f:c2:69:dd:6c: 99:5d:35:15:3c:5c:c5:1a:e2:fc:71:dd:7d:10:a7:83:38:3c: 09:b5:8c:96:19:85:73:1b:a0:7f:8b:4c:52:85:20:b3:9d:25: f8:09:90:63:9d:e5:e6:de:d6:35:a3:7e:9e:6f:f3:19:91:bd: c0:f9:c3:47:5f:d8:88:a8:3c:38:c0:76:ac:56:a8:41:8a:6d: 86:85:3e:38 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUwOTE4MTkyOTM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjNWQ5Zi1hMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7vEZk4L5sh7cYUTiPoAiQiPex6Q4DMqGlCHvv63jexGEEfsfe4EXrTerhhog 12SQ5axYQVqcgum9GGCurYgHCIe9RZJn96hKNcjUe82/XYwClCKe+pSSfFd1nbJo CqUFRhbax26zqucP5Stw3pCiQlk5bIdl83+AmpdS26s/Fd0NH3zBM6uXTGWBNrP0 zXrkZftyXZXNUHZPVgg3EFMAd5xwhsHXwe3lEYOoIzwKXeQYCDYU4A0AWYUbbxe8 orj72kprczZFhgu2rst4g+xSysnZ9DlyBErrhBr3yytzH0KyoDiNtyATL36K1Rwc QaCsJfokp+z/fFTuYAsCA/GkjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD/0e4dz DOmUn0n20RISf1ZphtRkMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVDRjMvNEJERDUxOEUyMTM1MTFFQUJFNDg4NzQ3QzRGOUFFMDIvNTNCNjE4MkMy MTM2MTFFQUI5RjAyQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItd6ADBAJn8LAwDQQCAAIwBwMFACQAWIAwDQYJKoZIhvcN AQELBQADggEBALgYwPImWPlZslfnGnkHEbTbk+jCMPsgY7G+8cYIRN0PPLJY+s2u k7LBubGQ6ObS+D70zwPhsL8RxxZmh9/MM+i61V3ml/W0m9hz/liD0PV95gMYGe/a fWqZ8teRFyo1m3mRJj2EQ6puod3P5aP5XRnqyCTRXLbSq81mHPTYetEzd1z1/gGY WaJ0dYBrFYsaa3DovcopJizgW0XuT0D7OgdBfJn+Jx1GrHvwv/XF+9ifwmndbJld NRU8XMUa4vxx3X0Qp4M4PAm1jJYZhXMboH+LTFKFILOdJfgJkGOd5ebe1jWjfp5v 8xmRvcD5w0df2IioPDjAdqxWqEGKbYaFPjg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:10 2025 by rpki-client