$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa File: 8D3F53F6A15F11F09B632177C4F9AE02.roa (raw, json) Hash identifier: CP+QsdoDrOnuqR8CFeZWi0RVe73nga/HrDSMYjQFtTw= Subject key identifier: 5C:85:1D:6B:41:F9:36:3F:09:C3:DB:E5:D1:1E:29:81:7C:03:99:30 Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Certificate serial: 87 Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa Signing time: Sun 31 May 2026 20:24:42 +0000 ROA not before: Sun 31 May 2026 20:24:42 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 17995 IP address blocks: 123.253.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Validity Not Before: May 31 20:24:42 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a1c990a-374d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:93:09:ff:64:51:9a:f2:ae:fd:7d:87:01: 9d:da:dd:08:7c:06:f3:18:d1:3b:48:17:78:fe:61: fa:73:aa:34:b2:0f:13:97:aa:f1:4a:d4:34:1e:e9: 13:24:00:e9:bc:68:db:d3:dd:5c:de:49:bc:5d:1d: 9f:b0:42:2f:08:bd:50:18:35:5b:c0:f3:88:1b:5a: b2:8b:a2:b1:4f:54:34:43:22:b9:92:78:1d:37:4f: 1e:ec:6e:1d:ff:4f:e7:cb:17:05:bd:9d:7b:95:24: a7:ac:b1:54:9f:2d:56:27:66:77:45:df:95:e9:37: aa:a7:1c:98:44:0e:c8:2d:9e:1a:22:54:a1:6c:64: 3d:7f:e3:c5:aa:ec:4d:7f:08:73:6b:17:cb:74:5c: 6e:4c:d3:5f:79:41:1b:35:85:74:1a:d1:cc:c0:4c: 3b:ec:ee:ea:e8:7a:02:0b:d7:ab:df:12:22:1c:7b: 91:88:2f:33:24:b8:56:da:24:43:14:d9:1d:b6:48: 13:c8:fa:3f:cb:c8:22:ca:a8:bf:22:d3:2f:45:d4: 34:89:11:23:1b:bc:14:55:8d:20:02:0b:97:ed:b9: 0d:c0:5e:05:51:73:cc:cc:be:ad:b0:59:bd:e7:54: 7b:28:60:45:c3:73:94:33:72:fc:ff:a5:5d:52:3a: cd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:85:1D:6B:41:F9:36:3F:09:C3:DB:E5:D1:1E:29:81:7C:03:99:30 X509v3 Authority Key Identifier: keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/8D3F53F6A15F11F09B632177C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.253.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:ea:84:0e:cf:b2:7b:0d:6e:db:8e:ba:14:81:fc:c7:4c:18: b2:aa:d8:9e:ab:b3:eb:d3:24:42:ce:11:f8:b6:f8:45:f8:37: 88:a2:19:4f:f0:7a:e7:66:19:a2:a1:71:ba:14:ab:8e:f5:08: 48:b3:e6:a0:d7:17:18:69:c7:78:a9:28:66:f5:44:56:f9:ff: b7:81:dd:94:1a:49:18:73:a0:ca:80:7e:33:13:b2:8d:f7:16: 9e:22:7e:f0:ad:ad:68:e4:f6:07:de:7c:30:32:59:69:47:1f: d4:c0:b5:42:d6:90:96:3c:f4:82:c0:e4:14:a5:b8:22:70:a7: 8a:42:8d:9b:0a:c7:64:ed:ea:81:a1:fb:c6:be:1c:a8:62:51: df:42:02:1e:20:dd:d5:38:81:54:e3:5b:e5:6d:7c:63:43:3b: e7:67:71:8e:b6:6e:43:cb:ac:33:5b:48:da:97:ed:30:04:90: ed:9e:2b:6f:83:a0:14:71:67:68:68:0c:3a:1e:9c:9c:fd:59: 16:67:b4:f3:08:b1:4f:bc:01:fb:fe:0e:88:14:56:53:31:d8: 63:e6:ef:2e:d8:0f:2f:aa:61:62:d1:93:6d:c8:92:05:a4:76: f3:c7:f8:98:d0:21:2a:d8:98:06:4b:7d:18:eb:4a:c4:7e:2c: f0:0c:40:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBRTYxMTAvBgNVBAUTKDY0Q0E1NDI2QUM3QTU1MEJEQTEwNTNBMDEyODMxNDRF MkRDRDJCRDcwHhcNMjYwNTMxMjAyNDQyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjOTkwYS0zNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvY6TCf9kUZryrv19hwGd2t0IfAbzGNE7SBd4/mH6c6o0sg8Tl6rxStQ0HukT JADpvGjb091c3km8XR2fsEIvCL1QGDVbwPOIG1qyi6KxT1Q0QyK5kngdN08e7G4d /0/nyxcFvZ17lSSnrLFUny1WJ2Z3Rd+V6TeqpxyYRA7ILZ4aIlShbGQ9f+PFquxN fwhzaxfLdFxuTNNfeUEbNYV0GtHMwEw77O7q6HoCC9er3xIiHHuRiC8zJLhW2iRD FNkdtkgTyPo/y8giyqi/ItMvRdQ0iREjG7wUVY0gAguX7bkNwF4FUXPMzL6tsFm9 51R7KGBFw3OUM3L8/6VdUjrNpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFyFHWtB +TY/CcPb5dEeKYF8A5kwMB8GA1UdIwQYMBaAFGTKVCaselUL2hBToBKDFE4tzSvX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0FFNi82NUQwNDRDNDk0 MTgxMUVBOTQwRkI1MzBDNEY5QUUwMi9aTXBVSnF4NlZRdmFFRk9nRW9NVVRpM05L OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNBRTYvNjVEMDQ0QzQ5NDE4MTFFQTk0MEZCNTMwQzRGOUFFMDIvOEQzRjUzRjZB MTVGMTFGMDlCNjMyMTc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCe/0EMA0GCSqGSIb3DQEBCwUAA4IBAQAs6oQOz7J7DW7bjroUgfzH TBiyqtieq7Pr0yRCzhH4tvhF+DeIohlP8HrnZhmioXG6FKuO9QhIs+ag1xcYacd4 qShm9URW+f+3gd2UGkkYc6DKgH4zE7KN9xaeIn7wra1o5PYH3nwwMllpRx/UwLVC 1pCWPPSCwOQUpbgicKeKQo2bCsdk7eqBofvGvhyoYlHfQgIeIN3VOIFU41vlbXxj QzvnZ3GOtm5Dy6wzW0jal+0wBJDtnitvg6AUcWdoaAw6Hpyc/VkWZ7TzCLFPvAH7 /g6IFFZTMdhj5u8u2A8vqmFi0ZNtyJIFpHbzx/iY0CEq2JgGS30Y60rEfizwDEA8 -----END CERTIFICATE-----Generated at Sat Jun 13 23:21:33 2026 by rpki-client