$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa File: 57A84138605911EE8ABC9318C4F9AE02.roa (raw, json) Hash identifier: ugTs/oyoKALkGSyMUkjHh2f/tiPGip4BWJ+dEzDMSyU= Subject key identifier: 37:AF:9A:02:60:60:2C:76:AF:95:7C:65:28:3D:B3:87:D0:DC:19:C8 Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1281 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa Signing time: Thu 07 Aug 2025 02:45:59 +0000 ROA not before: Thu 07 Aug 2025 02:45:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137074 IP address blocks: 43.224.188.0/22 maxlen: 24 43.226.4.0/22 maxlen: 24 103.18.64.0/22 maxlen: 24 103.43.212.0/22 maxlen: 24 103.104.16.0/22 maxlen: 24 103.113.40.0/22 maxlen: 24 116.89.246.0/23 maxlen: 24 203.28.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4737 (0x1281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Aug 7 02:45:59 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68941367-7e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:27:fa:fa:79:9b:45:09:0c:7e:e1:db:df: a9:d7:81:e5:97:7e:dc:df:f1:d3:2a:3c:90:1e:f1: cf:01:15:81:19:fd:09:b7:da:84:c6:2c:91:ce:e2: c5:1a:64:03:01:4f:b0:b3:74:a0:32:ca:47:e8:8e: be:0e:04:86:bb:03:58:43:42:4e:24:6c:10:50:e7: de:7d:44:df:ed:f1:7a:0a:a2:3c:2f:0e:52:95:6b: 11:2b:59:1d:36:01:d9:61:bb:2d:6b:db:f0:a0:f6: fa:c3:c2:31:1e:b1:c7:d0:8d:44:2a:90:5a:ae:38: 2b:87:b3:c2:b9:4a:c7:a2:e6:18:62:17:ab:05:a8: 5e:84:db:98:e7:ee:f5:c5:85:59:31:a3:2a:f0:30: ad:29:e0:e1:be:e9:73:af:10:e7:2f:fd:79:af:27: ab:a3:0f:eb:0f:e1:35:53:52:83:86:9d:0b:cf:ca: 2f:3c:5a:a2:a6:39:8f:c0:70:79:ad:71:8e:87:79: 5d:91:df:66:d5:54:29:8a:46:48:60:10:31:ad:81: 7b:0d:20:54:0f:24:fb:f7:de:6a:d7:d9:96:4d:18: bf:85:45:3e:f1:92:0f:77:10:6c:2b:82:e1:cc:da: aa:4e:7f:52:c9:4a:50:29:f7:78:b6:e6:99:f9:1b: 41:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:9A:02:60:60:2C:76:AF:95:7C:65:28:3D:B3:87:D0:DC:19:C8 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/57A84138605911EE8ABC9318C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.188.0/22 43.226.4.0/22 103.18.64.0/22 103.43.212.0/22 103.104.16.0/22 103.113.40.0/22 116.89.246.0/23 203.28.64.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:1b:f8:bb:a9:5c:bc:66:ce:b2:04:a5:fd:3a:51:70:21:d7: ba:bc:39:cf:3e:9b:f4:a9:cc:3d:f0:60:d6:f1:15:44:e3:70: 22:11:7e:26:33:79:e8:91:b4:42:4e:99:05:32:7f:12:6c:29: 33:0f:1d:7f:1a:3e:5a:a4:51:11:7e:db:61:29:8b:2a:51:38: f5:33:69:68:49:2a:29:db:7c:3f:7f:c1:77:f4:97:7c:9e:5e: fa:22:9f:72:db:86:15:35:31:10:98:35:7a:7e:b7:b9:63:5c: 2d:7e:4d:cf:74:af:a3:8f:7d:ff:94:eb:f6:99:b2:ff:fa:a3: 68:69:ec:3d:c3:3d:39:09:5b:4a:c9:e6:80:d3:dc:cd:6d:61: cb:69:81:34:f8:51:02:82:ff:a9:10:a5:94:2c:c0:61:ba:b1: 27:f5:d4:42:20:f4:31:31:50:46:4a:66:94:53:b8:a4:ca:ab: 59:11:2a:44:52:98:04:05:6d:f9:97:71:d0:3a:c1:a2:02:3d: c9:11:3e:65:99:36:e4:1d:c5:97:17:b3:1a:d6:e7:0b:6a:18: 5a:1d:f7:97:5f:ad:25:18:5d:e6:5c:b2:b6:cf:bc:26:c7:66: 6f:2f:ea:48:59:7a:22:45:7c:25:c4:19:04:a2:1b:1e:cd:4e: d6:03:c7:42 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICEoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwODA3MDI0NTU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0MTM2Ny03ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVMn+vp5m0UJDH7h29+p14Hll37c3/HTKjyQHvHPARWBGf0Jt9qExiyRzuLF GmQDAU+ws3SgMspH6I6+DgSGuwNYQ0JOJGwQUOfefUTf7fF6CqI8Lw5SlWsRK1kd NgHZYbsta9vwoPb6w8IxHrHH0I1EKpBarjgrh7PCuUrHouYYYherBahehNuY5+71 xYVZMaMq8DCtKeDhvulzrxDnL/15ryerow/rD+E1U1KDhp0Lz8ovPFqipjmPwHB5 rXGOh3ldkd9m1VQpikZIYBAxrYF7DSBUDyT7995q19mWTRi/hUU+8ZIPdxBsK4Lh zNqqTn9SyUpQKfd4tuaZ+RtBQwIDAQABo4ICvzCCArswHQYDVR0OBBYEFDevmgJg YCx2r5V8ZSg9s4fQ3BnIMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvNTdBODQxMzg2 MDU5MTFFRThBQkM5MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAIr4LwDBAIr4gQDBAJnEkADBAJnK9QDBAJnaBADBAJncSgD BAF0WfYDBALLHEAwDQYJKoZIhvcNAQELBQADggEBAA8b+LupXLxmzrIEpf06UXAh 17q8Oc8+m/SpzD3wYNbxFUTjcCIRfiYzeeiRtEJOmQUyfxJsKTMPHX8aPlqkURF+ 22EpiypROPUzaWhJKinbfD9/wXf0l3yeXvoin3LbhhU1MRCYNXp+t7ljXC1+Tc90 r6OPff+U6/aZsv/6o2hp7D3DPTkJW0rJ5oDT3M1tYctpgTT4UQKC/6kQpZQswGG6 sSf11EIg9DExUEZKZpRTuKTKq1kRKkRSmAQFbfmXcdA6waICPckRPmWZNuQdxZcX sxrW5wtqGFod95dfrSUYXeZcsrbPvCbHZm8v6khZeiJFfCXEGQSiGx7NTtYDx0I= -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:44 2025 by rpki-client