$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/53BCB840EA4211EB846B8757C4F9AE02.roa File: 53BCB840EA4211EB846B8757C4F9AE02.roa (raw, json) Hash identifier: q1CDVIUDzbHZ2EEoYDXk7ZVUl9f4fiBWEYZ1wyR1YGM= Subject key identifier: A9:4A:DF:B7:90:6E:2F:F3:C7:65:BB:08:65:9E:96:96:7F:E5:DE:1F Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 068C Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/53BCB840EA4211EB846B8757C4F9AE02.roa Signing time: Fri 04 Sep 2026 22:43:52 +0000 ROA not before: Fri 04 Sep 2026 22:43:52 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 14340 IP address blocks: 104.161.128.0/18 maxlen: 24 104.161.248.0/23 maxlen: 24 104.161.252.0/24 maxlen: 24 104.161.253.0/24 maxlen: 24 161.32.64.0/18 maxlen: 24 161.32.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Sep 4 22:43:52 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a9b49a8-b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:14:be:97:23:3c:70:95:c3:66:00:b3:cf: 3e:d2:69:c7:94:0a:46:a0:e1:1b:f5:de:9c:85:90: 2d:cc:9a:ef:88:22:c0:d1:9d:8a:19:e3:5f:2c:62: c1:16:79:10:c4:52:3d:ce:73:4d:b7:07:3d:91:2c: 98:04:4f:46:c5:05:23:0e:40:6d:91:d6:ee:c2:9d: b0:f8:19:3e:8a:f6:4d:e3:c5:6c:2c:12:6e:3e:a1: 59:4b:f9:0d:59:00:b7:83:37:55:72:88:e3:de:50: 31:f7:03:f1:c8:8f:45:e5:08:55:b3:59:f9:b8:4d: 75:c3:26:2a:e7:6a:38:12:05:77:18:0e:40:50:0d: 5e:5a:f2:a3:53:08:e4:35:c8:2e:4b:35:5e:90:ae: 01:c3:53:31:91:b2:69:66:b8:e4:b9:30:d3:89:03: a8:0f:d1:37:9e:46:d2:6d:b4:e1:83:bd:46:ed:0f: 74:70:93:74:00:02:ba:3e:1a:f2:8a:b8:c5:74:98: 9a:ac:a9:00:b8:e6:ab:58:07:da:b7:19:c8:c2:8c: b4:31:47:42:1a:a2:9e:e0:62:8d:4e:97:5c:ce:f1: ab:e0:d7:d0:3f:8c:39:3e:00:b0:33:9b:54:c8:50: 63:22:7d:8f:a9:69:2f:22:f2:5d:6d:83:f9:ae:59: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4A:DF:B7:90:6E:2F:F3:C7:65:BB:08:65:9E:96:96:7F:E5:DE:1F X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/53BCB840EA4211EB846B8757C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 104.161.128.0/18 104.161.248.0/23 104.161.252.0/23 161.32.64.0-161.32.255.255 Signature Algorithm: sha256WithRSAEncryption 53:bf:dd:79:a3:c6:0a:c8:86:7a:b7:83:44:ad:8e:75:11:0a: cd:72:31:50:94:5c:94:f4:9f:4b:bd:a9:c1:4e:cf:b6:47:5a: b1:e9:78:4a:0b:69:22:fc:60:d6:df:71:a8:6f:91:5a:76:46: 26:4a:68:eb:65:47:5f:e7:5b:24:62:f0:27:80:51:cc:a0:0a: a2:10:a8:27:ed:cb:0c:3c:1d:2b:1c:e1:d8:da:cf:47:eb:ef: ac:bb:fc:dd:be:89:42:ae:2f:21:f3:84:ee:b8:56:93:10:de: ac:6c:78:86:1d:06:af:5b:51:cf:67:a6:9d:8b:78:e7:4a:af: 33:9b:62:4b:ec:7b:12:eb:45:48:2c:cd:68:32:65:fa:52:05: f4:13:a4:85:cc:2c:6c:b9:42:be:0a:60:aa:dd:7d:ff:71:db: 54:65:d3:f7:5f:d2:c8:df:49:30:e6:01:09:9a:2a:83:c9:d7: b9:92:23:75:de:1a:27:24:cc:59:79:9e:d1:06:54:e3:93:e4: 7a:4d:f3:29:44:8c:dc:25:12:08:61:66:75:d3:cf:d9:7a:aa: ce:0c:0d:64:1c:69:21:7c:5a:81:72:5e:cc:5e:25:bb:39:a6: 23:d6:f7:c7:0e:f9:12:f6:e1:2f:5d:0b:86:86:dd:b7:f7:38: 97:e9:59:d0 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjYwOTA0MjI0MzUyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTliNDlhOC1iNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VcUvpcjPHCVw2YAs88+0mnHlApGoOEb9d6chZAtzJrviCLA0Z2KGeNfLGLB FnkQxFI9znNNtwc9kSyYBE9GxQUjDkBtkdbuwp2w+Bk+ivZN48VsLBJuPqFZS/kN WQC3gzdVcojj3lAx9wPxyI9F5QhVs1n5uE11wyYq52o4EgV3GA5AUA1eWvKjUwjk NcguSzVekK4Bw1MxkbJpZrjkuTDTiQOoD9E3nkbSbbThg71G7Q90cJN0AAK6Phry irjFdJiarKkAuOarWAfatxnIwoy0MUdCGqKe4GKNTpdczvGr4NfQP4w5PgCwM5tU yFBjIn2PqWkvIvJdbYP5rlk77QIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFKlK37eQ bi/zx2W7CGWelpZ/5d4fMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvNTNCQ0I4NDBF QTQyMTFFQjg0NkI4NzU3QzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAl BAIAATAfAwQGaKGAAwQBaKH4AwQBaKH8MAsDBAahIEADAwChIDANBgkqhkiG9w0B AQsFAAOCAQEAU7/deaPGCsiGereDRK2OdREKzXIxUJRclPSfS72pwU7Ptkdasel4 SgtpIvxg1t9xqG+RWnZGJkpo62VHX+dbJGLwJ4BRzKAKohCoJ+3LDDwdKxzh2NrP R+vvrLv83b6JQq4vIfOE7rhWkxDerGx4hh0Gr1tRz2emnYt450qvM5tiS+x7EutF SCzNaDJl+lIF9BOkhcwsbLlCvgpgqt19/3HbVGXT91/SyN9JMOYBCZoqg8nXuZIj dd4aJyTMWXme0QZU45Pkek3zKUSM3CUSCGFmddPP2XqqzgwNZBxpIXxagXJezF4l uzmmI9b3xw75EvbhL10Lhobdt/c4l+lZ0A== -----END CERTIFICATE-----Generated at Tue Sep 22 03:42:44 2026 by rpki-client