$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa File: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json) Hash identifier: T8o+ga1nDOEzu15VI4QOG5FiERyu/ShMzm5Nq2E4nfQ= Subject key identifier: 72:F8:23:1F:77:B7:70:C0:3C:9F:CC:20:72:1E:FC:1B:6D:43:B6:64 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 1470 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa Signing time: Thu 10 Sep 2026 17:33:24 +0000 ROA not before: Thu 10 Sep 2026 17:33:24 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 135887 IP address blocks: 144.138.0.0/16 maxlen: 24 147.10.0.0/16 maxlen: 24 149.167.0.0/16 maxlen: 24 155.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5232 (0x1470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Sep 10 17:33:24 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aa2e9e4-5032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:ab:d9:c0:73:7c:4f:e4:a3:78:b6:a0:f8: 65:c0:01:fd:df:ac:ac:88:74:e6:8f:12:a5:29:10: 26:5a:63:ed:25:f7:c2:a6:da:d2:52:2b:78:e4:38: 5f:2a:12:3a:4c:c2:f2:17:80:99:0b:99:19:fd:b6: 8a:f0:7f:f0:b4:d9:9b:4d:14:8d:ab:31:6f:37:35: 21:4e:17:2c:99:69:a3:0f:40:d9:36:49:80:3b:c6: f9:4a:be:94:c1:28:2e:c0:49:3b:10:f1:ce:e5:ab: ee:1f:fd:ef:e2:bd:80:4d:db:2a:62:f7:f4:58:19: b0:ff:88:af:b8:ed:3a:9c:87:87:f7:c4:a7:84:ee: 8d:fd:b7:0e:95:d2:9d:a6:8e:f8:6d:66:e9:e9:74: 01:23:ef:fa:61:31:76:fd:4c:6d:54:a4:12:d3:d4: 83:b3:8d:96:17:88:16:47:7f:61:35:d3:6d:34:e7: a7:aa:02:88:99:3a:45:dc:83:43:e5:53:4a:b6:44: a6:00:1d:9f:32:c2:30:25:a1:da:a7:f5:3f:60:0e: f3:b2:5d:7f:f3:8f:4f:e8:cf:09:28:1b:7b:6c:bd: eb:eb:a6:a9:a2:2e:fc:30:e2:ee:cf:c0:69:e6:ae: 3a:68:10:98:4d:8b:ca:cc:19:7a:7a:97:74:ab:00: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:23:1F:77:B7:70:C0:3C:9F:CC:20:72:1E:FC:1B:6D:43:B6:64 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.138.0.0/16 147.10.0.0/16 149.167.0.0/16 155.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:2a:d4:e1:26:92:f2:ce:ae:2a:cb:46:35:f5:e0:9f:eb:f4: f9:d5:ac:33:3f:2c:96:1d:9d:fa:92:b0:f6:8e:b6:0b:d6:b4: f9:04:72:ed:c3:a0:04:ed:16:c6:0d:48:d0:f6:a9:63:f0:01: 79:3d:f0:3a:ec:b6:e6:03:d8:44:65:85:c3:00:09:2c:9c:d1: 13:f6:4a:a0:c1:6a:72:f5:39:f1:3c:36:7f:6e:11:0d:92:90: b2:24:89:c4:63:8a:61:a8:11:5c:59:c8:c6:89:11:1c:7c:d2: 5b:e3:d9:0e:49:c0:67:55:05:99:9e:a0:aa:c9:13:ca:e7:d1: 0e:51:e3:6b:6f:d4:32:88:26:41:9a:e6:51:2d:0b:ce:27:11: 7b:27:56:74:99:53:ef:b6:ef:9b:a1:0b:cb:d5:c6:a3:ca:2b: 63:52:d6:76:05:ce:07:47:87:ca:0a:e0:99:30:9c:b3:1d:37: de:2d:bd:dd:9f:18:03:d2:d5:ca:8c:3c:50:f3:85:e4:85:db: 69:3d:48:81:cb:2d:73:42:00:b7:81:d5:da:56:59:14:5c:00: e5:38:03:5b:56:91:43:f0:2b:b0:d6:7d:2e:25:05:7a:84:f4: 96:8d:b1:ea:4a:8c:0e:de:17:90:9a:54:12:3a:cd:6e:49:3a: 2c:fb:c5:68 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICFHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjYwOTEwMTczMzI0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEyZTllNC01MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwGr2cBzfE/ko3i2oPhlwAH936ysiHTmjxKlKRAmWmPtJffCptrSUit45Dhf KhI6TMLyF4CZC5kZ/baK8H/wtNmbTRSNqzFvNzUhThcsmWmjD0DZNkmAO8b5Sr6U wSguwEk7EPHO5avuH/3v4r2ATdsqYvf0WBmw/4ivuO06nIeH98SnhO6N/bcOldKd po74bWbp6XQBI+/6YTF2/UxtVKQS09SDs42WF4gWR39hNdNtNOenqgKImTpF3IND 5VNKtkSmAB2fMsIwJaHap/U/YA7zsl1/849P6M8JKBt7bL3r66apoi78MOLuz8Bp 5q46aBCYTYvKzBl6epd0qwDYYQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFHL4Ix93 t3DAPJ/MIHIe/BttQ7ZkMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMUJDOTZEOEMx QkExMTFFQThCREQ2MTE0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwMAkIoDAwCTCgMDAJWnAwMAm48wDQYJKoZIhvcNAQELBQADggEBADwq 1OEmkvLOrirLRjX14J/r9PnVrDM/LJYdnfqSsPaOtgvWtPkEcu3DoATtFsYNSND2 qWPwAXk98DrstuYD2ERlhcMACSyc0RP2SqDBanL1OfE8Nn9uEQ2SkLIkicRjimGo EVxZyMaJERx80lvj2Q5JwGdVBZmeoKrJE8rn0Q5R42tv1DKIJkGa5lEtC84nEXsn VnSZU++275uhC8vVxqPKK2NS1nYFzgdHh8oK4JkwnLMdN94tvd2fGAPS1cqMPFDz heSF22k9SIHLLXNCALeB1dpWWRRcAOU4A1tWkUPwK7DWfS4lBXqE9JaNsepKjA7e F5CaVBI6zW5JOiz7xWg= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:34 2026 by rpki-client