$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa File: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (raw, json) Hash identifier: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68= Subject key identifier: A7:2F:46:CA:1B:A8:DF:CF:D6:FA:BE:2D:70:37:D8:24:09:2A:A5:9E Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0852 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:17 +0000 ROA not before: Wed 08 Oct 2025 22:54:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38136 IP address blocks: 163.53.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb99-53b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:32:14:a3:f5:1b:3c:1d:42:cd:32:2c:50: fe:03:30:8c:d2:3b:a5:bb:79:fb:40:6f:9c:33:2a: 56:fd:77:d9:03:dc:83:ee:97:bc:32:75:26:e6:0d: 10:62:31:05:e4:68:b7:af:b8:b6:77:06:0e:94:e1: ea:05:23:a8:9e:0f:bb:f7:ce:04:20:c6:33:9c:86: f8:dd:27:03:59:50:29:b1:bf:24:8f:fd:78:16:93: b4:77:af:33:b7:d5:8f:72:cc:61:7c:99:e3:32:07: 2f:c6:8e:5e:ff:28:a8:93:98:07:8e:0f:e5:5a:4b: e7:d9:80:e8:8c:ef:1b:d4:0b:42:a0:e0:71:a2:12: 11:17:cb:ae:f0:cb:57:d0:2c:1a:4f:ac:b6:7c:32: e3:b8:da:74:d1:35:30:10:ec:c0:7f:ba:19:68:e9: 45:c8:cd:38:a6:57:30:2e:89:c2:4b:83:17:4a:f4: bf:d7:0c:f1:f8:9c:1c:7f:f1:6f:8f:70:c5:15:da: 40:a8:1a:aa:22:d4:e2:fa:20:83:ef:93:ee:67:67: 69:69:13:78:11:67:a7:13:2d:2b:75:03:41:a3:be: e4:2b:92:53:a6:ee:48:e7:3f:2f:c8:e1:34:aa:b9: f4:85:d0:7f:1b:4f:34:b5:51:1e:a8:6b:14:78:77: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2F:46:CA:1B:A8:DF:CF:D6:FA:BE:2D:70:37:D8:24:09:2A:A5:9E X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.53.18.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:73:b4:11:ab:05:be:be:82:3d:f3:0f:9b:85:76:2b:13:33: 8f:fb:66:9a:43:84:85:75:4d:28:6d:f9:64:ae:9b:f4:f4:92: bd:01:73:26:87:19:87:d8:b5:29:49:2b:b1:8e:a0:1d:f3:fb: c2:ff:e2:74:d5:1e:72:ea:96:a7:1f:81:b3:04:c5:8b:84:11: 1b:7e:1f:82:ce:47:ce:ed:a9:be:20:75:9e:e7:62:9a:8f:e5: 03:a9:3a:e0:57:56:27:41:fc:d8:93:cf:b6:11:1b:c2:13:92: a0:2e:84:ad:22:68:fe:67:7c:2d:fe:71:80:80:c4:19:83:ee: 29:bc:94:ec:b5:db:9f:34:e2:29:80:73:8a:08:ac:35:43:3e: 9d:0c:d2:86:3c:bb:89:3e:23:d9:8b:c0:e9:3b:9f:7f:96:93: bc:e3:26:34:74:8f:68:db:bf:99:65:b0:5d:99:fe:02:44:20: 00:28:52:0d:12:58:11:15:c2:85:5d:09:7d:76:7d:c9:75:65: 9c:37:4e:88:4a:e2:31:00:d8:f1:23:c8:cc:a9:ec:2e:b3:3b: ae:da:34:01:bd:f9:03:e8:cf:da:25:bd:c7:03:fc:34:f2:c5: 1b:9f:b0:8a:b0:43:77:d5:25:85:56:c0:68:65:00:93:88:09: 7d:b1:12:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI5OS01M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/kyFKP1GzwdQs0yLFD+AzCM0julu3n7QG+cMypW/XfZA9yD7pe8MnUm5g0Q YjEF5Gi3r7i2dwYOlOHqBSOong+7984EIMYznIb43ScDWVApsb8kj/14FpO0d68z t9WPcsxhfJnjMgcvxo5e/yiok5gHjg/lWkvn2YDojO8b1AtCoOBxohIRF8uu8MtX 0CwaT6y2fDLjuNp00TUwEOzAf7oZaOlFyM04plcwLonCS4MXSvS/1wzx+Jwcf/Fv j3DFFdpAqBqqItTi+iCD75PuZ2dpaRN4EWenEy0rdQNBo77kK5JTpu5I5z8vyOE0 qrn0hdB/G080tVEeqGsUeHeAwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKcvRsob qN/P1vq+LXA32CQJKqWeMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNURGQzMyMDA2 OUNEMTFFRkEwRTZDQzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjNRIwDQYJKoZIhvcNAQELBQADggEBAJ1ztBGrBb6+gj3z D5uFdisTM4/7ZppDhIV1TSht+WSum/T0kr0BcyaHGYfYtSlJK7GOoB3z+8L/4nTV HnLqlqcfgbMExYuEERt+H4LOR87tqb4gdZ7nYpqP5QOpOuBXVidB/NiTz7YRG8IT kqAuhK0iaP5nfC3+cYCAxBmD7im8lOy125804imAc4oIrDVDPp0M0oY8u4k+I9mL wOk7n3+Wk7zjJjR0j2jbv5llsF2Z/gJEIAAoUg0SWBEVwoVdCX12fcl1ZZw3TohK 4jEA2PEjyMyp7C6zO67aNAG9+QPoz9olvccD/DTyxRufsIqwQ3fVJYVWwGhlAJOI CX2xEgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:30 2025 by rpki-client