$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa File: A865A1925B1611F083088661C4F9AE02.roa (raw, json) Hash identifier: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs= Subject key identifier: 61:9A:F5:B7:39:59:FE:0D:9D:14:1E:5E:EC:D2:1D:4B:71:C6:77:A7 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 18BD Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa Signing time: Tue 08 Jul 2025 17:25:58 +0000 ROA not before: Tue 08 Jul 2025 17:25:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141180 IP address blocks: 119.13.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6333 (0x18bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jul 8 17:25:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d54a6-1110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:0a:9a:b6:ab:ea:16:d3:8f:14:2a:d1:87: 15:6c:48:db:06:c4:96:33:4b:a1:62:38:41:18:4e: 25:e6:e1:8c:ae:eb:cf:08:5c:52:ec:0a:eb:1f:e6: 3b:e6:99:cd:64:21:88:df:13:c9:39:da:8a:4a:eb: d4:02:ed:c8:9d:55:ec:fe:4c:3b:d9:f2:c9:dd:a3: 9f:2c:7f:72:27:11:bd:0a:9b:6a:89:54:b3:56:0f: ff:25:75:4b:4f:88:c6:5e:cf:e1:c0:6b:36:9c:d2: 75:de:6e:dc:fc:af:80:69:0d:3f:bf:a0:8b:f4:f0: 47:f6:ed:70:d4:df:29:21:6b:d4:c0:78:1a:ab:64: e1:6a:a9:34:3f:07:1f:71:6c:b1:bc:82:91:ed:83: e2:d5:8b:27:c8:91:2e:90:12:3f:f1:0f:d9:17:5b: 27:7d:8a:11:ac:a8:eb:e8:c5:8b:4c:fe:c4:cf:10: aa:38:da:a4:93:7b:2f:11:10:d3:94:72:5e:21:d9: 4e:ee:d0:40:9c:f4:fd:0d:61:58:e1:26:3d:6a:94: 30:ff:72:bb:7d:6f:3d:a6:88:93:d8:75:e1:99:46: 5f:05:84:41:7a:c4:54:90:ce:f2:87:1b:f1:ab:2c: bd:1b:2e:44:b3:b7:6e:92:d1:29:55:5a:5d:6f:80: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9A:F5:B7:39:59:FE:0D:9D:14:1E:5E:EC:D2:1D:4B:71:C6:77:A7 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/A865A1925B1611F083088661C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.13.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:2d:e8:48:1b:90:04:c1:92:e1:1b:9c:a2:d1:fd:82:bb:e3: 13:8b:88:92:d5:55:59:f6:c2:85:26:26:48:aa:36:83:92:df: 3d:de:85:eb:cc:04:35:33:9f:c6:38:04:d5:52:5e:4d:cb:16: f1:33:d6:ae:41:7b:54:e3:cd:c8:58:d2:4b:fe:83:6c:65:c5: db:40:29:2e:fc:86:4c:99:a7:2a:b3:6a:f1:16:15:06:f6:9d: 09:65:44:ed:42:f7:6f:4c:53:1b:b7:4a:57:4c:51:f3:5a:a9: b2:76:b4:4c:53:20:03:b2:08:e2:30:1e:07:a4:9a:76:98:dd: bf:21:f7:a8:3d:c6:c9:0c:94:04:ed:0a:d9:a8:fb:84:ef:1a: 7c:3e:6d:4a:ed:12:ac:d9:dd:f4:59:80:84:13:b7:ae:93:5d: d6:57:d6:54:8d:30:68:fa:21:46:bb:42:56:3c:5a:c0:90:bb: 68:5a:14:6a:1e:98:f4:59:3d:a1:6a:71:a0:43:e5:3d:67:2e: 61:df:12:a4:39:1f:b7:47:16:72:6c:60:23:9c:9e:fa:04:db: 71:3d:b8:0d:f3:78:05:25:96:0f:36:76:e3:f4:62:0d:fb:77: 98:26:3d:d9:21:2f:e2:39:4e:b8:66:74:e6:79:d3:4b:b6:b7: df:3d:d0:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjUwNzA4MTcyNTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkNTRhNi0xMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCEKmrar6hbTjxQq0YcVbEjbBsSWM0uhYjhBGE4l5uGMruvPCFxS7ArrH+Y7 5pnNZCGI3xPJOdqKSuvUAu3InVXs/kw72fLJ3aOfLH9yJxG9CptqiVSzVg//JXVL T4jGXs/hwGs2nNJ13m7c/K+AaQ0/v6CL9PBH9u1w1N8pIWvUwHgaq2Thaqk0Pwcf cWyxvIKR7YPi1YsnyJEukBI/8Q/ZF1snfYoRrKjr6MWLTP7EzxCqONqkk3svERDT lHJeIdlO7tBAnPT9DWFY4SY9apQw/3K7fW89poiT2HXhmUZfBYRBesRUkM7yhxvx qyy9Gy5Es7duktEpVVpdb4B6JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGa9bc5 Wf4NnRQeXuzSHUtxxnenMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvNzI1ODNBRkE2OTU3MTFFOEE0MkJFNjgwQzRGOUFFMDIvQTg2NUExOTI1 QjE2MTFGMDgzMDg4NjYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3DaAwDQYJKoZIhvcNAQELBQADggEBAFwt6EgbkATBkuEb nKLR/YK74xOLiJLVVVn2woUmJkiqNoOS3z3ehevMBDUzn8Y4BNVSXk3LFvEz1q5B e1TjzchY0kv+g2xlxdtAKS78hkyZpyqzavEWFQb2nQllRO1C929MUxu3SldMUfNa qbJ2tExTIAOyCOIwHgekmnaY3b8h96g9xskMlATtCtmo+4TvGnw+bUrtEqzZ3fRZ gIQTt66TXdZX1lSNMGj6IUa7QlY8WsCQu2haFGoemPRZPaFqcaBD5T1nLmHfEqQ5 H7dHFnJsYCOcnvoE23E9uA3zeAUllg82duP0Yg37d5gmPdkhL+I5TrhmdOZ500u2 t9890Jw= -----END CERTIFICATE-----Generated at Sat Oct 25 06:49:21 2025 by rpki-client