$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/53F5B3FAA11911F1AA6D5C983C11F970.roa File: 53F5B3FAA11911F1AA6D5C983C11F970.roa (raw, json) Hash identifier: W6FAy14Qs/4IBAuF6r/C27RQuwXDjcTuwQ+QiTmoY9c= Subject key identifier: 3A:18:5E:89:38:E4:D2:5C:E6:53:B5:B4:78:F5:A6:69:34:3D:4D:5A Certificate issuer: /CN=A9138A44/serialNumber=D921C018F284F2574B671834A848DD934247FA00 Certificate serial: 03 Authority key identifier: D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/53F5B3FAA11911F1AA6D5C983C11F970.roa Signing time: Wed 26 Aug 2026 06:42:38 +0000 ROA not before: Wed 26 Aug 2026 06:42:38 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136490 IP address blocks: 160.236.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A44, serialNumber=D921C018F284F2574B671834A848DD934247FA00 Validity Not Before: Aug 26 06:42:38 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a8e8ade-cdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:40:05:c0:f5:3c:a9:d1:0a:87:35:7f:9a: 34:3d:51:71:96:48:6e:62:a0:6b:9d:56:ef:f8:45: a3:6b:63:cd:77:d9:4f:ab:dd:62:d2:ea:f6:99:7b: 25:66:67:96:5e:0a:8a:2b:fc:10:b4:ff:b3:04:aa: 95:de:ad:eb:ba:7a:4c:b6:82:f3:36:20:2a:10:e5: 60:74:30:d1:5a:cc:52:fa:4f:27:0f:c3:bc:8f:54: 56:8f:3d:fd:4b:a6:84:9d:af:3b:35:62:6c:c7:32: ff:c7:d1:91:b5:db:30:6c:5f:38:99:13:98:87:00: 8d:62:01:66:65:32:63:15:57:22:08:c5:9a:fe:1f: bf:ed:4a:9d:74:32:de:39:12:f3:3c:6b:4f:25:19: 04:cb:57:bf:c2:6a:ad:c3:b5:fb:60:ca:85:ea:87: ce:aa:40:ab:ab:c8:8c:ba:14:a2:7f:e9:b2:4a:a2: a4:20:67:e8:86:a3:47:3d:a6:8b:36:90:53:d4:41: 52:75:3f:0f:70:02:f6:11:bc:3e:d1:96:3e:9a:28: 71:58:bc:d8:91:0a:d0:c0:5d:97:a1:d2:a7:28:13: c2:33:09:77:8a:b1:89:7d:81:da:b7:5c:7c:3e:34: 13:7c:9a:f1:87:b2:69:94:d9:1e:07:96:4f:f2:69: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:18:5E:89:38:E4:D2:5C:E6:53:B5:B4:78:F5:A6:69:34:3D:4D:5A X509v3 Authority Key Identifier: keyid:D9:21:C0:18:F2:84:F2:57:4B:67:18:34:A8:48:DD:93:42:47:FA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/2SHAGPKE8ldLZxg0qEjdk0JH-gA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2SHAGPKE8ldLZxg0qEjdk0JH-gA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A44/6DFE4BD6A10511F180CEB6EF3511F970/53F5B3FAA11911F1AA6D5C983C11F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.217.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5c:37:5e:a7:94:86:f6:df:09:cd:68:82:d6:85:0c:7d:13: ff:f0:1a:1d:e4:51:ca:4f:05:59:6f:f5:63:85:d4:75:b1:c9: f2:0b:0d:cb:44:44:73:e2:18:f0:9d:1a:3d:cf:4c:fc:95:d4: 30:03:8a:4a:c0:03:57:5b:b5:20:36:c4:df:e3:f2:c9:0a:d0: 25:41:f7:2b:6c:78:87:80:a5:6e:70:e8:af:f7:75:eb:45:73: 83:c0:86:43:9b:49:bf:e7:3c:84:29:bb:78:b8:23:fa:75:e3: 8f:c4:e3:c0:0a:2e:a6:33:6c:70:65:1f:4c:2f:bd:a1:f0:80: 3f:b2:e7:33:02:4f:86:ab:81:1d:06:10:8e:bb:3c:05:bf:22: 6d:ef:63:e8:0d:26:68:fd:08:fd:52:a7:b5:64:96:c7:92:af: 72:b1:f8:c0:94:5e:4c:2c:93:fb:ed:c5:19:84:99:04:2a:dd: b3:2a:6c:91:9a:fa:4a:bf:cd:47:13:2f:fa:dd:be:73:d1:de: 53:a7:10:a9:20:16:3d:f9:63:be:9f:72:ec:ee:4c:72:f6:71: 0f:77:20:1a:dc:8c:cf:8e:30:09:37:9d:0b:f7:68:a6:93:10: 73:48:75:f3:cd:fa:1d:96:e4:62:17:47:bc:f0:31:a2:8d:55: 73:81:1b:c8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEE0NDExMC8GA1UEBRMoRDkyMUMwMThGMjg0RjI1NzRCNjcxODM0QTg0OEREOTM0 MjQ3RkEwMDAeFw0yNjA4MjYwNjQyMzhaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOGU4YWRlLWNkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8jkAFwPU8qdEKhzV/mjQ9UXGWSG5ioGudVu/4RaNrY8132U+r3WLS6vaZeyVm Z5ZeCoor/BC0/7MEqpXereu6eky2gvM2ICoQ5WB0MNFazFL6TycPw7yPVFaPPf1L poSdrzs1YmzHMv/H0ZG12zBsXziZE5iHAI1iAWZlMmMVVyIIxZr+H7/tSp10Mt45 EvM8a08lGQTLV7/Caq3DtftgyoXqh86qQKuryIy6FKJ/6bJKoqQgZ+iGo0c9pos2 kFPUQVJ1Pw9wAvYRvD7Rlj6aKHFYvNiRCtDAXZeh0qcoE8IzCXeKsYl9gdq3XHw+ NBN8mvGHsmmU2R4Hlk/yaQ13AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUOhheiTjk 0lzmU7W0ePWmaTQ9TVowHwYDVR0jBBgwFoAU2SHAGPKE8ldLZxg0qEjdk0JH+gAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QTQ0LzZERkU0QkQ2QTEw NTExRjE4MENFQjZFRjM1MTFGOTcwLzJTSEFHUEtFOGxkTFp4ZzBxRWpkazBKSC1n QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlNIQUdQS0U4bGRMWnhnMHFFamRrMEpILWdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE0NC82REZFNEJENkExMDUxMUYxODBDRUI2RUYzNTExRjk3MC81M0Y1QjNGQUEx MTkxMUYxQUE2RDVDOTgzQzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACg7NkwDQYJKoZIhvcNAQELBQADggEBAFhcN16nlIb23wnNaILWhQx9 E//wGh3kUcpPBVlv9WOF1HWxyfILDctERHPiGPCdGj3PTPyV1DADikrAA1dbtSA2 xN/j8skK0CVB9ytseIeApW5w6K/3detFc4PAhkObSb/nPIQpu3i4I/p144/E48AK LqYzbHBlH0wvvaHwgD+y5zMCT4argR0GEI67PAW/Im3vY+gNJmj9CP1Sp7VklseS r3Kx+MCUXkwsk/vtxRmEmQQq3bMqbJGa+kq/zUcTL/rdvnPR3lOnEKkgFj35Y76f cuzuTHL2cQ93IBrcjM+OMAk3nQv3aKaTEHNIdfPN+h2W5GIXR7zwMaKNVXOBG8g= -----END CERTIFICATE-----Generated at Tue Sep 1 02:41:23 2026 by rpki-client