$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa File: 368F5308A27311EFA8731822C4F9AE02.roa (raw, json) Hash identifier: Hs0kfftH2V+1dVTeEFiwGCNE8QZlZWgBetHvEQLVaTU= Subject key identifier: 0A:77:B3:C1:15:F1:24:9F:88:12:41:4E:6F:0E:FA:0B:5F:23:38:30 Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 05CD Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa Signing time: Thu 02 Oct 2025 23:24:34 +0000 ROA not before: Thu 02 Oct 2025 23:24:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 104.161.192.0/20 maxlen: 24 104.161.208.0/20 maxlen: 24 161.32.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1485 (0x5cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Oct 2 23:24:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68df09b2-5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:5d:fd:98:a1:1c:da:a9:34:27:a1:fc:28: a6:0f:5d:37:7d:78:b3:4b:34:28:7d:13:4a:a5:c7: 3c:e4:9e:18:db:13:73:02:96:a4:13:9e:82:b4:4e: 09:44:3d:fd:eb:34:02:26:f6:9a:17:63:f6:17:af: 39:8c:c7:c1:cf:26:41:17:73:cd:26:88:a5:1c:bc: fa:4f:64:96:40:b9:6f:19:b0:78:de:9a:aa:da:3e: f2:e2:e6:34:1e:5b:d0:53:94:6f:1b:8e:b1:f0:e1: 3b:1d:b7:ee:63:46:65:de:98:c5:64:91:7c:7a:10: 89:cb:29:73:a2:2a:9b:74:a2:2d:3f:f4:57:c3:c6: 0a:05:77:50:2a:3d:86:cc:90:d5:24:71:85:c9:07: 14:52:ad:f4:b7:d2:b4:87:8c:9f:e0:af:73:95:f4: 5a:b4:59:31:55:5b:be:02:14:f3:e3:d4:31:ce:d3: c1:83:a2:d2:05:b1:d7:96:46:0a:81:37:9a:ac:6e: 9a:11:1f:10:95:ac:b4:f5:3d:e8:25:2d:6e:3c:cf: 97:a9:48:1c:a4:c9:9b:42:61:b3:60:20:4e:59:6a: 50:98:2d:ba:a9:55:b5:54:1b:c4:a5:ac:c7:50:29: 91:45:bf:73:c0:b7:7e:f2:82:a9:06:de:bf:e5:95: e2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:B3:C1:15:F1:24:9F:88:12:41:4E:6F:0E:FA:0B:5F:23:38:30 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 104.161.192.0/19 161.32.64.0/20 Signature Algorithm: sha256WithRSAEncryption 12:b5:ed:b4:ae:2d:f6:29:30:5f:29:e0:66:c1:f1:be:0d:32: 87:e9:56:f0:3a:69:9b:ad:40:17:bd:8c:1e:58:a8:c7:b9:2c: 9b:8d:cf:8e:54:73:fe:36:dc:2d:1e:ad:d4:45:a5:a2:d5:b1: 0d:f2:52:39:9e:a2:fb:a3:29:59:69:e4:2a:88:78:f0:01:6d: 62:ca:29:54:93:77:6c:08:b2:6a:2b:ee:9c:c2:15:e1:55:e0: df:32:02:81:28:63:3c:76:b8:a1:7e:30:8e:6f:29:21:cb:49: fd:29:3f:14:be:bc:2b:db:5a:7b:8d:c2:fc:6b:fd:f0:80:4e: d0:33:12:aa:5d:a0:9f:18:cb:b8:a4:ed:5c:8a:a3:11:e0:9f: 26:9b:14:34:51:dc:3c:5f:4a:70:f2:de:da:71:d1:41:ac:92: 68:91:10:ba:33:5c:83:e4:53:d6:76:fd:49:1e:a4:8b:76:15: 55:ff:69:c1:cf:d0:80:87:41:be:fc:0a:e3:03:68:b3:d0:24: 2b:3f:54:49:fa:60:71:ac:3e:aa:39:93:47:5a:c2:b2:25:44: f9:e2:d6:dd:f2:69:49:da:36:c4:e9:9c:62:b1:c6:91:88:57: dc:0c:2f:a7:27:37:9d:29:37:48:b1:4e:e9:12:3e:f8:ca:2d: ed:54:6f:1a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjUxMDAyMjMyNDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmMDliMi01ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp1d/ZihHNqpNCeh/CimD103fXizSzQofRNKpcc85J4Y2xNzApakE56CtE4J RD396zQCJvaaF2P2F685jMfBzyZBF3PNJoilHLz6T2SWQLlvGbB43pqq2j7y4uY0 HlvQU5RvG46x8OE7HbfuY0Zl3pjFZJF8ehCJyylzoiqbdKItP/RXw8YKBXdQKj2G zJDVJHGFyQcUUq30t9K0h4yf4K9zlfRatFkxVVu+AhTz49QxztPBg6LSBbHXlkYK gTearG6aER8Qlay09T3oJS1uPM+XqUgcpMmbQmGzYCBOWWpQmC26qVW1VBvEpazH UCmRRb9zwLd+8oKpBt6/5ZXi7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAp3s8EV 8SSfiBJBTm8O+gtfIzgwMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMzY4RjUzMDhB MjczMTFFRkE4NzMxODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAVoocADBAShIEAwDQYJKoZIhvcNAQELBQADggEBABK17bSu LfYpMF8p4GbB8b4NMofpVvA6aZutQBe9jB5YqMe5LJuNz45Uc/423C0erdRFpaLV sQ3yUjmeovujKVlp5CqIePABbWLKKVSTd2wIsmor7pzCFeFV4N8yAoEoYzx2uKF+ MI5vKSHLSf0pPxS+vCvbWnuNwvxr/fCATtAzEqpdoJ8Yy7ik7VyKoxHgnyabFDRR 3DxfSnDy3tpx0UGskmiRELozXIPkU9Z2/UkepIt2FVX/acHP0ICHQb78CuMDaLPQ JCs/VEn6YHGsPqo5k0dawrIlRPni1t3yaUnaNsTpnGKxxpGIV9wML6cnN50pN0ix TukSPvjKLe1Ubxo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:21 2025 by rpki-client