$ rpki-client -vvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/A8AFC432909711F0BDFBAA86C4F9AE02.roa File: A8AFC432909711F0BDFBAA86C4F9AE02.roa (raw, json) Hash identifier: ResLExXl8yuMXGOR84bDKNTRnpa/Fbrh1BqAV2RUGhU= Subject key identifier: 8A:4D:05:01:1F:F0:D3:A4:1E:D2:22:FC:A7:1B:FE:DA:55:CF:61:C5 Certificate issuer: /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Certificate serial: 02 Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/A8AFC432909711F0BDFBAA86C4F9AE02.roa Signing time: Sat 13 Sep 2025 11:49:09 +0000 ROA not before: Sat 13 Sep 2025 11:49:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154224 IP address blocks: 180.148.10.0/23 maxlen: 23 180.148.10.0/24 maxlen: 24 180.148.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4 Validity Not Before: Sep 13 11:49:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68c55a35-37e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:ae:cd:03:e8:a2:3a:e3:07:16:f0:1f:e5: 1e:28:53:95:49:af:cc:f4:84:71:ad:b3:d2:d7:69: 52:c4:f5:4c:71:fd:6c:89:16:d5:a0:5a:7a:de:a0: 39:57:7e:9a:df:5b:0d:1d:0e:4c:b7:c9:ee:de:07: 24:5a:67:b4:02:b2:93:fc:af:ce:8c:3b:9f:6c:e0: 16:f6:01:ad:86:f2:0b:64:83:d3:a0:d1:5f:7c:bc: 95:31:12:6f:13:77:5f:f4:9c:66:33:1b:08:d6:6e: 71:38:52:b8:3f:e4:58:19:38:ca:14:70:8d:c2:1e: fa:34:c1:f5:20:1b:1a:df:31:37:a6:7e:10:2e:64: 97:73:6d:49:b2:07:4b:c3:34:0a:35:bc:8e:ec:75: 60:e3:d8:fa:29:c6:97:3d:0c:6e:07:68:25:d6:64: 6f:25:76:07:d2:b8:be:4b:b5:2a:b7:79:ba:7c:a1: 58:20:7f:29:34:e8:19:0c:82:4b:29:c9:a4:b6:47: e7:2d:11:4d:75:34:dc:50:5c:3c:16:74:85:77:b5: 2c:d5:9d:45:b9:4d:95:fd:ce:c6:5b:20:e2:c0:38: 97:2f:d2:a6:92:8c:21:17:0e:e1:27:da:5e:52:b8: a0:c2:2d:bc:02:3a:27:23:8e:62:96:40:73:fa:58: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:05:01:1F:F0:D3:A4:1E:D2:22:FC:A7:1B:FE:DA:55:CF:61:C5 X509v3 Authority Key Identifier: keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/A8AFC432909711F0BDFBAA86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.148.10.0/23 Signature Algorithm: sha256WithRSAEncryption 80:e4:38:c3:03:a7:3c:60:ae:41:53:1f:03:5c:78:f6:be:e3: 7c:a9:80:83:45:02:98:4a:27:4c:a7:c2:6d:13:fb:cb:ba:96: 30:2f:85:ec:5b:ec:24:30:fd:91:6b:80:7e:b2:20:b3:28:bd: bd:90:86:52:9b:69:0c:05:46:3c:be:65:11:e9:3b:c2:18:81: 48:4a:20:f4:50:24:c2:9b:95:65:bb:bf:f2:c0:ff:38:64:01: 20:30:27:2b:8a:05:98:c3:32:df:79:a6:f6:fc:67:87:3e:bb: aa:b5:1e:9c:d1:44:bb:dc:a7:51:a1:ac:6a:42:62:ad:58:5b: fc:f5:44:af:06:ad:92:1b:f6:90:d0:f2:17:d6:ca:72:23:40: af:5b:8b:fc:a9:7a:ea:70:6c:fa:a2:fe:52:34:92:82:ee:98: 76:0d:7d:89:ce:75:68:d3:5e:e9:85:70:f0:bb:70:61:9c:e8: 0e:93:d8:43:f7:e7:dc:a7:41:91:7d:f4:fd:91:ed:d7:6a:c4: b0:7f:00:1f:62:17:b7:f4:ac:c1:32:e7:df:d3:03:61:20:e3: aa:e5:b6:67:d6:56:67:ce:84:a9:51:ee:94:f9:ad:26:69:92: 45:42:3c:3e:53:ae:cb:b6:3e:cd:a0:75:f2:c2:2a:1d:15:05: ea:e7:9f:e5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NERBQzExMC8GA1UEBRMoOUJCNkIxNEVGQjUyMjQ4RTg0QkJGQjZDODM3OUZEQUVE QjA5OUNGNDAeFw0yNTA5MTMxMTQ5MDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzU1YTM1LTM3ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8F67NA+iiOuMHFvAf5R4oU5VJr8z0hHGts9LXaVLE9Uxx/WyJFtWgWnreoDlX fprfWw0dDky3ye7eByRaZ7QCspP8r86MO59s4Bb2Aa2G8gtkg9Og0V98vJUxEm8T d1/0nGYzGwjWbnE4Urg/5FgZOMoUcI3CHvo0wfUgGxrfMTemfhAuZJdzbUmyB0vD NAo1vI7sdWDj2Popxpc9DG4HaCXWZG8ldgfSuL5LtSq3ebp8oVggfyk06BkMgksp yaS2R+ctEU11NNxQXDwWdIV3tSzVnUW5TZX9zsZbIOLAOJcv0qaSjCEXDuEn2l5S uKDCLbwCOicjjmKWQHP6WCCHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUik0FAR/w 06Qe0iL8pxv+2lXPYcUwHwYDVR0jBBgwFoAUm7axTvtSJI6Eu/tsg3n9rtsJnPQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0REFDL0RCNDgwRkI4OTA5 NjExRjA5Q0I0NjM4NUM0RjlBRTAyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5Q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTdheFR2dFNKSTZFdV90c2czbjlydHNKblBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NERBQy9EQjQ4MEZCODkwOTYxMUYwOUNCNDYzODVDNEY5QUUwMi9BOEFGQzQzMjkw OTcxMUYwQkRGQkFBODZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAbSUCjANBgkqhkiG9w0BAQsFAAOCAQEAgOQ4wwOnPGCuQVMf A1x49r7jfKmAg0UCmEonTKfCbRP7y7qWMC+F7FvsJDD9kWuAfrIgsyi9vZCGUptp DAVGPL5lEek7whiBSEog9FAkwpuVZbu/8sD/OGQBIDAnK4oFmMMy33mm9vxnhz67 qrUenNFEu9ynUaGsakJirVhb/PVErwatkhv2kNDyF9bKciNAr1uL/Kl66nBs+qL+ UjSSgu6Ydg19ic51aNNe6YVw8LtwYZzoDpPYQ/fn3KdBkX30/ZHt12rEsH8AH2IX t/SswTLn39MDYSDjquW2Z9ZWZ86EqVHulPmtJmmSRUI8PlOuy7Y+zaB18sIqHRUF 6uef5Q== -----END CERTIFICATE-----Generated at Fri Sep 19 04:19:08 2025 by rpki-client