$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/9283C1F8DA6011ED9BC6175FC4F9AE02.roa File: 9283C1F8DA6011ED9BC6175FC4F9AE02.roa (raw, json) Hash identifier: 4ZxnpGjaykPQCM8pL2N1CRQo3+QNzrfE6n7zpJytINg= Subject key identifier: 46:16:F7:B9:5F:BF:F7:2A:B2:95:3C:D5:54:71:8F:90:42:59:10:41 Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: 017A Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/9283C1F8DA6011ED9BC6175FC4F9AE02.roa Signing time: Wed 19 Mar 2025 03:19:21 +0000 ROA not before: Wed 19 Mar 2025 03:19:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55793 IP address blocks: 210.48.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53, serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Mar 19 03:19:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67da37b9-df07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:be:6b:3b:53:b5:11:64:cb:08:14:da:93: 34:5f:23:66:2e:73:60:95:d0:0a:e2:f4:6a:f0:7b: ab:c0:aa:ec:de:98:a9:62:7c:6f:4b:ef:e2:2c:3c: dd:ee:6e:59:fd:e9:2e:39:07:15:5a:02:5c:39:3b: 88:e4:2e:39:db:56:4b:f1:6e:8d:6c:d9:ce:15:7b: 94:83:28:f8:ec:67:f0:58:33:13:72:db:14:56:89: 16:d1:fb:f3:4a:87:bf:b4:07:2f:32:9d:43:ba:6e: 5d:bd:f0:0a:65:3d:f6:b3:80:3c:13:c1:50:55:a7: ac:51:00:8c:16:e3:bf:6d:e3:fb:61:7a:e6:ef:37: d6:52:c9:d6:80:e7:d4:b3:22:5a:f1:fc:f7:07:51: 0f:b8:b7:f5:ec:ae:2a:ed:86:98:b0:06:ed:67:05: 2b:17:72:2b:f9:a7:4e:9b:6f:33:99:7a:f7:59:15: 6f:9a:ef:62:f6:11:e2:44:bd:0a:e6:82:a6:4b:9b: 00:41:c2:95:f9:a4:ef:47:c2:c1:01:05:a0:9a:e2: bc:18:76:59:c4:d7:d7:4d:29:1d:7d:96:8d:60:a1: 25:fb:5a:88:a4:c6:b1:98:80:e6:19:79:20:4d:f1: d0:cf:4a:39:36:b5:8d:79:96:98:5b:99:b8:d6:a9: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:F7:B9:5F:BF:F7:2A:B2:95:3C:D5:54:71:8F:90:42:59:10:41 X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/9283C1F8DA6011ED9BC6175FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.48.191.0/24 Signature Algorithm: sha256WithRSAEncryption 15:61:1e:48:cb:b5:fd:5d:6c:3e:89:aa:c9:2c:05:6f:70:5a: 12:c7:46:89:88:09:43:d7:36:a1:ed:0b:19:80:5f:86:82:46: 13:69:67:12:20:17:4b:db:a8:f3:15:1e:72:7c:6a:d0:08:ca: a6:a0:35:01:83:73:7b:52:a7:d7:8b:cd:0d:1e:a5:68:71:f6: 75:8a:b6:bf:36:16:f4:33:c5:c9:1c:c6:e8:4c:17:69:97:d1: 5b:5d:20:c0:c5:d2:e4:c4:b4:7e:34:ae:51:28:ed:3a:62:39: c3:d0:55:95:d9:03:20:10:8f:dc:4e:20:65:cd:33:53:8c:4c: 02:e8:cf:3c:ad:0c:43:1e:63:7f:c7:1f:31:4e:7b:8c:06:10: 61:ba:83:00:c1:21:7c:d2:a1:ce:0b:bd:42:96:c8:88:0f:82: f7:97:b6:19:a7:fb:c5:f8:f8:5a:0c:73:53:53:09:dc:42:ff: 25:9a:89:bc:fb:71:e7:a5:40:a2:5e:e3:e5:b5:32:b2:1d:54: 40:11:52:d6:6c:a1:e4:ad:ad:08:14:a2:05:e0:86:4a:dc:a6: 39:c8:53:87:81:02:c9:5c:2c:17:da:43:e3:f4:2d:9e:27:30: 57:bd:22:31:8b:4e:45:77:59:33:a0:03:d3:73:26:c8:e9:58: ad:c3:9a:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjUwMzE5MDMxOTIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMzdiOS1kZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz2+aztTtRFkywgU2pM0XyNmLnNgldAK4vRq8HurwKrs3pipYnxvS+/iLDzd 7m5Z/ekuOQcVWgJcOTuI5C4521ZL8W6NbNnOFXuUgyj47GfwWDMTctsUVokW0fvz Soe/tAcvMp1Dum5dvfAKZT32s4A8E8FQVaesUQCMFuO/beP7YXrm7zfWUsnWgOfU syJa8fz3B1EPuLf17K4q7YaYsAbtZwUrF3Ir+adOm28zmXr3WRVvmu9i9hHiRL0K 5oKmS5sAQcKV+aTvR8LBAQWgmuK8GHZZxNfXTSkdfZaNYKEl+1qIpMaxmIDmGXkg TfHQz0o5NrWNeZaYW5m41qlm+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEYW97lf v/cqspU81VRxj5BCWRBBMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBDNTMvQ0U0NDVCRDBEQTVCMTFFRDk2NzQ3QzVBQzRGOUFFMDIvOTI4M0MxRjhE QTYwMTFFRDlCQzYxNzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSML8wDQYJKoZIhvcNAQELBQADggEBABVhHkjLtf1dbD6J qsksBW9wWhLHRomICUPXNqHtCxmAX4aCRhNpZxIgF0vbqPMVHnJ8atAIyqagNQGD c3tSp9eLzQ0epWhx9nWKtr82FvQzxckcxuhMF2mX0VtdIMDF0uTEtH40rlEo7Tpi OcPQVZXZAyAQj9xOIGXNM1OMTALozzytDEMeY3/HHzFOe4wGEGG6gwDBIXzSoc4L vUKWyIgPgveXthmn+8X4+FoMc1NTCdxC/yWaibz7ceelQKJe4+W1MrIdVEARUtZs oeStrQgUogXghkrcpjnIU4eBAslcLBfaQ+P0LZ4nMFe9IjGLTkV3WTOgA9NzJsjp WK3DmlM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:28:20 2025 by rpki-client