$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa File: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (raw, json) Hash identifier: AcCENIzqVrrsD078b0ZlJkMALIKyqIot+TtN4pOJAdI= Subject key identifier: DD:47:1E:B9:0E:A8:7D:26:66:FE:F1:76:3D:EB:8B:2F:B7:DB:9C:E7 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 01CF Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:38:27 +0000 ROA not before: Fri 07 Mar 2025 03:49:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4768 IP address blocks: 192.146.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Mar 7 03:49:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3ecf3-0362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f8:26:43:e5:77:bb:6d:84:70:2d:f4:3a:24: c2:7a:57:c7:ca:70:07:a9:1f:9a:15:1d:83:90:2e: 65:04:68:66:9e:37:50:9b:e3:eb:05:72:b7:22:e3: 69:b2:5f:56:ec:8d:a3:f5:52:f0:b5:70:a8:42:f2: 87:05:c7:d0:29:ee:89:8a:96:02:c2:80:fc:79:e2: d2:2e:bc:4b:f4:3a:49:63:be:ce:d6:1a:71:4f:d9: 89:d2:54:9a:36:99:7c:66:f3:39:b6:c4:25:57:7d: 1b:99:df:b0:bb:20:af:0b:bf:f3:c9:ab:8e:46:83: d5:29:3a:98:f1:2f:8f:74:b5:c2:e7:c0:66:89:21: b5:a2:41:83:16:7e:df:2a:85:00:c5:43:2e:b4:57: 27:39:09:df:ae:14:bb:72:8d:6e:bc:5e:1a:fb:c8: 79:8f:2e:16:92:51:1f:54:4e:7e:9e:e6:bc:c9:21: 7a:e1:86:ac:89:60:4d:73:28:b8:d6:3c:1e:eb:32: c2:b0:f8:19:80:2f:30:e8:ef:f6:ea:cc:c4:d7:6c: c2:28:74:0d:16:a8:b1:67:81:a5:61:b8:9e:2d:b3: a5:f8:64:e4:0e:b4:41:ae:6d:79:69:c5:12:6f:06: b8:bd:4d:e5:fd:71:a1:04:9a:fa:10:99:8c:01:88: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:47:1E:B9:0E:A8:7D:26:66:FE:F1:76:3D:EB:8B:2F:B7:DB:9C:E7 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.146.219.0/24 Signature Algorithm: sha256WithRSAEncryption 93:6d:a7:c5:4f:08:0f:20:3b:8d:67:16:69:1c:26:7c:ce:72: 18:42:c1:59:c1:19:7b:2c:85:58:6f:7b:30:7e:8a:af:35:8c: 55:6a:86:88:94:2c:8b:7d:c0:e2:1c:18:ac:59:d4:ed:45:f2: 19:54:5c:ac:1e:60:85:06:f4:7e:19:dc:69:1a:5e:52:b0:fc: 21:af:11:8c:23:11:ca:bc:d5:bd:b7:32:4f:96:6d:c8:4f:d2: 86:34:2a:b2:fe:15:fa:0c:1f:a0:bf:c8:46:13:df:2f:eb:4f: ea:67:51:e6:05:6b:65:5e:67:cd:2f:af:c7:b0:67:ba:44:5d: cb:9b:9d:ec:3b:ea:56:d5:3b:95:39:7c:c4:11:41:12:c5:b4: 96:4a:15:1b:c9:34:58:b8:f7:7d:67:19:c2:4e:30:1f:7e:90: 88:15:ca:10:00:2d:48:03:a4:7e:d8:b5:5c:3d:2a:1a:3e:53: eb:d3:b0:bc:f2:0a:2f:dd:45:d1:4b:31:07:c4:e7:7e:e6:b1: 70:c8:6a:77:d6:7f:ff:31:1f:32:03:a7:86:5c:b8:36:8d:81: 18:b2:e9:a3:43:74:62:05:ba:58:40:cb:71:aa:d8:7a:de:6a: 98:54:2d:ac:30:a5:0f:aa:f8:14:2a:e9:25:1d:5d:7a:d2:0f: 05:09:28:ce -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwMzA3MDM0OTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWNmMy0wMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPgmQ+V3u22EcC30OiTCelfHynAHqR+aFR2DkC5lBGhmnjdQm+PrBXK3IuNp sl9W7I2j9VLwtXCoQvKHBcfQKe6JipYCwoD8eeLSLrxL9DpJY77O1hpxT9mJ0lSa Npl8ZvM5tsQlV30bmd+wuyCvC7/zyauORoPVKTqY8S+PdLXC58BmiSG1okGDFn7f KoUAxUMutFcnOQnfrhS7co1uvF4a+8h5jy4WklEfVE5+nua8ySF64YasiWBNcyi4 1jwe6zLCsPgZgC8w6O/26szE12zCKHQNFqixZ4GlYbieLbOl+GTkDrRBrm15acUS bwa4vU3l/XGhBJr6EJmMAYhorwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN1HHrkO qH0mZv7xdj3riy+325znMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY5MzcvMjZCNDk4MUU1QjIzMTFFRUI4NzczRjcwQzRGOUFFMDIvOEQ4OEI5MTI1 QjIzMTFFRTg2Q0M2QTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwJLbMA0GCSqGSIb3DQEBCwUAA4IBAQCTbafFTwgPIDuNZxZpHCZ8 znIYQsFZwRl7LIVYb3swfoqvNYxVaoaIlCyLfcDiHBisWdTtRfIZVFysHmCFBvR+ GdxpGl5SsPwhrxGMIxHKvNW9tzJPlm3IT9KGNCqy/hX6DB+gv8hGE98v60/qZ1Hm BWtlXmfNL6/HsGe6RF3Lm53sO+pW1TuVOXzEEUESxbSWShUbyTRYuPd9ZxnCTjAf fpCIFcoQAC1IA6R+2LVcPSoaPlPr07C88gov3UXRSzEHxOd+5rFwyGp31n//MR8y A6eGXLg2jYEYsumjQ3RiBbpYQMtxqth63mqYVC2sMKUPqvgUKuklHV160g8FCSjO -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:16 2026 by rpki-client