$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/6553E9461A0611F08E7AD42AC4F9AE02.roa File: 6553E9461A0611F08E7AD42AC4F9AE02.roa (raw, json) Hash identifier: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo= Subject key identifier: C2:F5:0B:2D:74:A8:BB:5B:72:1D:45:CA:E2:98:F2:A6:EC:8F:E3:5E Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1E78 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/6553E9461A0611F08E7AD42AC4F9AE02.roa Signing time: Mon 20 Oct 2025 16:24:04 +0000 ROA not before: Mon 20 Oct 2025 16:24:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58424 IP address blocks: 43.255.112.0/23 maxlen: 24 103.5.124.0/22 maxlen: 24 103.206.200.0/22 maxlen: 24 116.214.24.0/23 maxlen: 24 116.214.30.0/23 maxlen: 24 2407:8180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7800 (0x1e78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Oct 20 16:24:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f66224-b9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:5f:ba:b1:39:ad:46:66:5c:95:5a:c1:b3: 13:57:e4:2c:b8:6c:21:da:7a:54:b3:a8:bd:99:16: a3:15:a2:b9:f4:f9:09:cc:9c:39:f7:60:08:66:89: 4b:5f:cf:be:9e:6d:10:07:ec:a1:bb:6b:07:34:d5: a5:3f:e3:04:78:9a:c4:b3:12:7f:3a:dc:be:ae:1c: ca:d0:c9:fb:e1:a8:9c:7d:91:e0:5a:2d:6e:45:cc: 43:f3:7a:85:84:e3:f8:da:ed:f6:dd:88:4e:55:ae: ed:c2:c0:fa:bf:c6:92:6f:6e:33:01:0c:e5:ce:57: a1:bb:96:45:15:c5:e1:81:c4:ef:48:5d:5a:c2:3f: f5:3e:c3:15:30:04:4b:3b:73:4b:94:b5:92:a9:90: 12:58:6e:d8:39:0f:be:96:a1:62:8c:b3:9b:5f:be: ea:07:24:a5:92:cd:22:b3:b8:c0:e4:af:e9:6e:af: 69:83:5f:ac:d6:6a:79:cc:62:23:89:33:93:3b:65: 55:4f:da:56:93:a3:96:16:3f:9b:ef:04:29:af:b6: 77:cd:90:8e:11:5b:c7:81:d4:2b:08:ab:08:19:c4: 2a:98:5f:a7:b0:da:8a:b9:46:30:af:ad:19:98:69: 0c:6d:35:f4:c8:2a:a9:10:88:1b:0b:6b:6b:a8:7a: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F5:0B:2D:74:A8:BB:5B:72:1D:45:CA:E2:98:F2:A6:EC:8F:E3:5E X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/6553E9461A0611F08E7AD42AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.112.0/23 103.5.124.0/22 103.206.200.0/22 116.214.24.0/23 116.214.30.0/23 IPv6: 2407:8180::/32 Signature Algorithm: sha256WithRSAEncryption 73:86:68:31:bd:0d:18:05:89:b0:30:7e:26:c4:05:af:32:ee: 1e:54:65:f1:e8:ae:6d:08:88:87:15:8e:9e:36:f8:c9:e1:59: 5e:ca:97:da:6b:a5:7e:fc:58:23:a1:34:bd:8a:97:fa:c8:ba: 98:78:b9:b5:5f:6a:77:6c:5c:0f:e3:0c:9b:6f:1b:dc:ae:62: 81:2b:1c:3b:1e:72:ec:ac:f0:d9:10:bd:11:af:e6:56:96:14: e9:6b:18:b2:f2:3e:f2:69:49:95:42:7c:11:11:37:1e:ec:6a: 86:23:ad:b6:38:62:22:35:c2:79:af:a0:90:0c:f4:be:4c:5a: 18:f1:a1:7b:a1:73:31:25:99:34:ef:90:eb:06:22:e2:97:15: b6:70:ae:49:29:5b:a0:b0:ce:5a:13:8a:76:5c:85:06:15:0e: f6:ae:55:02:68:8c:6f:32:94:c1:5b:b1:a7:52:c6:e5:9b:d1: 22:cb:dd:0d:a1:91:bc:28:75:8b:5e:b3:4e:8d:d4:aa:72:77: 1e:d2:99:2a:83:2e:1f:34:69:e6:26:05:38:be:8a:9a:1f:df: 43:af:37:d5:42:49:0a:4b:e7:1c:c3:e6:44:8d:76:45:8d:16: 06:5b:4d:12:c1:bf:0d:76:f9:a7:8a:12:8c:86:d6:ac:cd:ae: c9:52:45:a4 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICHngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjUxMDIwMTYyNDA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY2NjIyNC1iOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YpfurE5rUZmXJVawbMTV+QsuGwh2npUs6i9mRajFaK59PkJzJw592AIZolL X8++nm0QB+yhu2sHNNWlP+MEeJrEsxJ/Oty+rhzK0Mn74aicfZHgWi1uRcxD83qF hOP42u323YhOVa7twsD6v8aSb24zAQzlzlehu5ZFFcXhgcTvSF1awj/1PsMVMARL O3NLlLWSqZASWG7YOQ++lqFijLObX77qBySlks0is7jA5K/pbq9pg1+s1mp5zGIj iTOTO2VVT9pWk6OWFj+b7wQpr7Z3zZCOEVvHgdQrCKsIGcQqmF+nsNqKuUYwr60Z mGkMbTX0yCqpEIgbC2trqHqZRwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFML1Cy10 qLtbch1FyuKY8qbsj+NeMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIzQkMvMzgxMjQ0RkU4RjlCMTFFNkJFQzVDQjI1QzRGOUFFMDIvNjU1M0U5NDYx QTA2MTFGMDhFN0FENDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAEr/3ADBAJnBXwDBAJnzsgDBAF01hgDBAF01h4wDQQCAAIw BwMFACQHgYAwDQYJKoZIhvcNAQELBQADggEBAHOGaDG9DRgFibAwfibEBa8y7h5U ZfHorm0IiIcVjp42+MnhWV7Kl9prpX78WCOhNL2Kl/rIuph4ubVfandsXA/jDJtv G9yuYoErHDsecuys8NkQvRGv5laWFOlrGLLyPvJpSZVCfBERNx7saoYjrbY4YiI1 wnmvoJAM9L5MWhjxoXuhczElmTTvkOsGIuKXFbZwrkkpW6CwzloTinZchQYVDvau VQJojG8ylMFbsadSxuWb0SLL3Q2hkbwodYtes06N1Kpydx7SmSqDLh80aeYmBTi+ ipof30OvN9VCSQpL5xzD5kSNdkWNFgZbTRLBvw12+aeKEoyG1qzNrslSRaQ= -----END CERTIFICATE-----Generated at Thu Nov 6 03:50:03 2025 by rpki-client