$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa File: 52EF768073C511EB98AF9867C4F9AE02.roa (raw, json) Hash identifier: 4w/uXYfZSRmzJc52RjrImrLh+EqtuXeWbymI1Ev9aJY= Subject key identifier: 0B:39:CE:EC:43:3C:1C:2A:E7:B2:E4:AC:C7:D4:30:F3:3D:70:81:9D Certificate issuer: /CN=A9185F82/serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Certificate serial: 06CD Authority key identifier: 81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa Signing time: Wed 24 Sep 2025 22:43:47 +0000 ROA not before: Wed 24 Sep 2025 22:43:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132347 IP address blocks: 43.224.120.0/24 maxlen: 24 43.224.121.0/24 maxlen: 24 43.224.122.0/24 maxlen: 24 43.224.123.0/24 maxlen: 24 103.14.140.0/24 maxlen: 24 103.14.141.0/24 maxlen: 24 103.14.142.0/24 maxlen: 24 103.14.143.0/24 maxlen: 24 2404:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1741 (0x6cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F82, serialNumber=812C635AB83126615EC9344E7EC6E902EDAC69F5 Validity Not Before: Sep 24 22:43:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d47423-dcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:79:3d:a0:03:60:2e:cc:74:09:ac:a5:b1: 5a:65:71:a1:40:dd:6a:47:92:ee:57:13:74:c9:d9: 3c:c3:89:a5:d4:f7:a7:17:e2:95:b4:13:54:54:04: 53:5f:a3:05:2a:80:08:21:38:c5:d1:65:64:4b:8e: c2:bc:24:33:1b:6c:81:8c:85:1a:d1:cf:48:58:10: 2c:78:52:83:95:00:6d:b6:82:52:d9:ed:f4:55:2f: 93:3e:6f:29:0a:87:4f:3a:fe:fa:ac:f7:df:91:86: b3:d1:1e:6d:ca:11:cf:7c:1b:a4:44:8d:91:6c:15: fb:52:d4:e5:30:43:43:20:92:9e:80:a9:73:d9:dd: 41:2a:31:cd:dc:bd:36:14:19:dd:6f:57:30:58:5d: a0:91:55:18:cd:ba:20:00:a8:f2:d7:59:78:a6:3f: 28:14:bf:06:6d:1e:77:9e:b0:02:01:e6:b6:04:8d: 05:44:d7:3d:4f:e0:61:b3:c0:30:fa:c3:c1:6a:a9: 0f:c4:16:a0:62:06:e6:a7:3f:9f:43:f4:ae:d1:27: 5a:44:e9:50:63:0f:d5:57:1f:79:9b:3b:7e:6c:0d: db:7a:a0:ed:56:e6:e3:ec:73:36:a9:99:96:fb:ad: ae:dc:c1:83:f3:68:6f:bb:a5:c3:a4:10:0c:28:be: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:39:CE:EC:43:3C:1C:2A:E7:B2:E4:AC:C7:D4:30:F3:3D:70:81:9D X509v3 Authority Key Identifier: keyid:81:2C:63:5A:B8:31:26:61:5E:C9:34:4E:7E:C6:E9:02:ED:AC:69:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/gSxjWrgxJmFeyTROfsbpAu2safU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSxjWrgxJmFeyTROfsbpAu2safU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F82/4091BC7073C311EBB839E664C4F9AE02/52EF768073C511EB98AF9867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.120.0/22 103.14.140.0/22 IPv6: 2404:ab00::/32 Signature Algorithm: sha256WithRSAEncryption 96:7e:37:db:a3:9d:ff:db:8f:0f:26:bb:f6:87:4e:db:bc:6d: ba:05:6d:49:b3:27:0e:0e:99:21:39:2b:7f:b7:f6:f2:e6:c5: 7f:8b:55:84:88:02:de:fc:e8:9d:a4:16:a8:1c:ba:4c:0c:9a: b5:d6:8c:f0:53:4e:d3:cf:a6:fa:bb:a1:c6:5d:84:10:5d:cb: df:a8:80:3a:1c:25:b6:66:95:d5:eb:6c:7b:81:33:2c:cb:3e: dc:1d:d0:17:b6:cd:22:e5:fd:7f:0a:0e:eb:a4:0d:01:fc:91: fd:68:6c:cd:ee:39:de:87:84:7c:cd:f3:2f:9f:a6:78:e1:46: c6:9d:c9:cf:3c:71:04:24:7e:9b:17:24:d5:23:df:ce:cf:82: f8:55:bc:90:6e:ac:14:42:82:9f:ec:53:b0:3d:c7:54:f9:6e: e0:b1:94:65:ea:cc:21:84:63:d7:7a:c4:01:35:b8:9a:50:b8: 4d:54:62:7b:f3:4e:f8:0b:37:de:4a:7b:77:79:9a:67:e8:f1: 08:18:f7:25:15:a8:fc:bf:60:db:cb:26:cf:91:25:a2:b4:de: 5d:d7:e6:a8:fb:d4:00:29:fa:82:a1:50:7c:b4:ce:44:c5:ee: 05:3a:36:1f:19:6d:b2:62:08:94:43:fe:7b:1a:51:1d:2e:4e: a5:17:cc:99 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGODIxMTAvBgNVBAUTKDgxMkM2MzVBQjgzMTI2NjE1RUM5MzQ0RTdFQzZFOTAy RURBQzY5RjUwHhcNMjUwOTI0MjI0MzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0NzQyMy1kY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqv55PaADYC7MdAmspbFaZXGhQN1qR5LuVxN0ydk8w4ml1PenF+KVtBNUVART X6MFKoAIITjF0WVkS47CvCQzG2yBjIUa0c9IWBAseFKDlQBttoJS2e30VS+TPm8p CodPOv76rPffkYaz0R5tyhHPfBukRI2RbBX7UtTlMENDIJKegKlz2d1BKjHN3L02 FBndb1cwWF2gkVUYzbogAKjy11l4pj8oFL8GbR53nrACAea2BI0FRNc9T+Bhs8Aw +sPBaqkPxBagYgbmpz+fQ/Su0SdaROlQYw/VVx95mzt+bA3beqDtVubj7HM2qZmW +62u3MGD82hvu6XDpBAMKL7UcwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAs5zuxD PBwq57LkrMfUMPM9cIGdMB8GA1UdIwQYMBaAFIEsY1q4MSZhXsk0Tn7G6QLtrGn1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY4Mi80MDkxQkM3MDcz QzMxMUVCQjgzOUU2NjRDNEY5QUUwMi9nU3hqV3JneEptRmV5VFJPZnNicEF1MnNh ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTeGpXcmd4Sm1GZXlUUk9mc2JwQXUyc2FmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVGODIvNDA5MUJDNzA3M0MzMTFFQkI4MzlFNjY0QzRGOUFFMDIvNTJFRjc2ODA3 M0M1MTFFQjk4QUY5ODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4HgDBAJnDowwDQQCAAIwBwMFACQEqwAwDQYJKoZIhvcN AQELBQADggEBAJZ+N9ujnf/bjw8mu/aHTtu8bboFbUmzJw4OmSE5K3+39vLmxX+L VYSIAt786J2kFqgcukwMmrXWjPBTTtPPpvq7ocZdhBBdy9+ogDocJbZmldXrbHuB MyzLPtwd0Be2zSLl/X8KDuukDQH8kf1obM3uOd6HhHzN8y+fpnjhRsadyc88cQQk fpsXJNUj387PgvhVvJBurBRCgp/sU7A9x1T5buCxlGXqzCGEY9d6xAE1uJpQuE1U YnvzTvgLN95Ke3d5mmfo8QgY9yUVqPy/YNvLJs+RJaK03l3X5qj71AAp+oKhUHy0 zkTF7gU6Nh8ZbbJiCJRD/nsaUR0uTqUXzJk= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:50 2025 by rpki-client