$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/AC38C0F6D40511F18C8F75EC2866CEF9.roa File: AC38C0F6D40511F18C8F75EC2866CEF9.roa (raw, json) Hash identifier: TX6SOZtlOKLo8jNFken+KMZIiH3LPHRhwbfk+Qx/ls8= Subject key identifier: 29:1C:AE:29:59:03:8D:60:72:F3:83:C6:2B:98:5D:BF:3A:A6:2A:52 Certificate issuer: /CN=A917EBAA/serialNumber=BCBF127963651CC33F6BB68D5DEBD05BE1874CE3 Certificate serial: 0A Authority key identifier: BC:BF:12:79:63:65:1C:C3:3F:6B:B6:8D:5D:EB:D0:5B:E1:87:4C:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/AC38C0F6D40511F18C8F75EC2866CEF9.roa Signing time: Mon 02 Nov 2026 06:22:28 +0000 ROA not before: Mon 02 Nov 2026 06:22:28 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 136181 IP address blocks: 116.66.232.0/23 maxlen: 23 116.66.232.0/24 maxlen: 24 116.66.233.0/24 maxlen: 24 2402:8020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.crl rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Nov 2026 09:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EBAA, serialNumber=BCBF127963651CC33F6BB68D5DEBD05BE1874CE3 Validity Not Before: Nov 2 06:22:28 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae82c24-d76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:ef:44:eb:7d:f5:0c:e1:59:dc:8d:2b:78: e4:f3:11:c3:4e:b5:cc:fc:cf:b5:aa:a9:e3:a3:0c: 9d:30:19:4d:a6:e9:fe:e4:d6:3b:2e:53:67:06:1d: 85:ac:17:ae:ab:c4:93:86:29:13:56:79:02:81:bc: be:3f:62:b2:03:1a:d8:ba:38:05:b0:88:4f:d9:e3: 94:35:d0:af:8a:fb:38:88:c2:e9:f6:48:9a:28:aa: 87:1c:11:1e:17:49:99:38:48:69:0b:5a:85:4f:73: b8:22:83:05:30:c8:2d:34:8e:f8:00:0e:6b:c0:e2: ac:8f:77:c1:6a:dd:6d:18:b1:68:3a:8f:57:a2:13: 93:83:78:e5:2b:e2:66:ea:5f:1e:16:be:e2:c1:d6: 9f:65:0c:2b:c2:25:3e:db:2d:af:4f:53:59:96:ec: 5f:e4:95:e4:96:b7:c0:ab:1c:86:3a:28:81:5c:fa: 82:a7:5b:12:b4:19:f9:7a:51:05:10:82:a9:96:84: f2:5a:d3:74:17:2b:f7:52:f3:48:2e:18:ad:8a:06: 6d:15:5d:21:ef:57:5d:83:c1:87:f5:4d:e2:1b:65: 97:c8:8a:9e:68:29:ed:42:f9:48:f8:07:84:57:91: 6f:52:09:fc:3e:03:83:72:8c:0b:c4:c1:66:36:f3: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:AE:29:59:03:8D:60:72:F3:83:C6:2B:98:5D:BF:3A:A6:2A:52 X509v3 Authority Key Identifier: keyid:BC:BF:12:79:63:65:1C:C3:3F:6B:B6:8D:5D:EB:D0:5B:E1:87:4C:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/vL8SeWNlHMM_a7aNXevQW-GHTOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vL8SeWNlHMM_a7aNXevQW-GHTOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EBAA/9467F36CD40411F1B9BADEC32866CEF9/AC38C0F6D40511F18C8F75EC2866CEF9.roa sbgp-ipAddrBlock: critical IPv4: 116.66.232.0/23 IPv6: 2402:8020::/32 Signature Algorithm: sha256WithRSAEncryption a3:81:8c:fd:8e:a6:a6:68:9c:27:1a:1b:0b:2b:a9:f3:c1:71: 90:14:2c:23:d5:60:59:cb:f7:22:81:b6:47:9e:db:12:ed:b1: c2:26:2a:0c:43:4a:8a:40:b1:47:7e:bd:df:f7:8d:a5:f4:e1: 9f:1a:ce:07:51:15:8b:21:54:ad:cc:bf:f3:83:87:2b:4a:85: 32:4d:3a:3f:3b:e4:69:a0:86:6e:f6:b1:d3:4b:e7:db:5f:ed: 35:60:57:4e:d2:fd:87:85:19:90:74:b6:ff:e9:9f:09:c4:71: da:35:b5:de:3d:7e:b0:2f:41:3d:22:ce:5c:3f:74:72:fe:fc: 6c:3c:e1:cf:0f:3d:80:ff:81:8f:8a:1e:f5:9c:54:a6:c8:09: 6f:b5:dc:c0:0f:72:31:eb:75:dd:f1:1f:ab:c7:6e:fc:95:44: bb:4b:63:21:9f:9e:6d:ed:62:31:85:e6:be:56:45:2f:e1:e1: a8:6d:7a:c8:e5:90:32:6b:8c:30:2e:a6:24:78:07:61:44:81: 40:aa:6c:f9:7f:72:1d:b8:cd:d8:14:e7:3c:27:d5:04:10:d9: 15:df:b9:fa:f3:e2:c5:81:02:33:10:ed:97:28:e2:1b:0d:f6: 33:37:ce:6e:2d:cc:44:53:e1:d7:d8:b9:ab:5a:22:1c:15:4f: 73:82:fb:f2 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUJBQTExMC8GA1UEBRMoQkNCRjEyNzk2MzY1MUNDMzNGNkJCNjhENURFQkQwNUJF MTg3NENFMzAeFw0yNjExMDIwNjIyMjhaFw0yODAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZTgyYzI0LWQ3NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuNe9E6331DOFZ3I0reOTzEcNOtcz8z7WqqeOjDJ0wGU2m6f7k1jsuU2cGHYWs F66rxJOGKRNWeQKBvL4/YrIDGti6OAWwiE/Z45Q10K+K+ziIwun2SJooqoccER4X SZk4SGkLWoVPc7gigwUwyC00jvgADmvA4qyPd8Fq3W0YsWg6j1eiE5ODeOUr4mbq Xx4WvuLB1p9lDCvCJT7bLa9PU1mW7F/kleSWt8CrHIY6KIFc+oKnWxK0Gfl6UQUQ gqmWhPJa03QXK/dS80guGK2KBm0VXSHvV12DwYf1TeIbZZfIip5oKe1C+Uj4B4RX kW9SCfw+A4NyjAvEwWY28w5LAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUKRyuKVkD jWBy84PGK5hdvzqmKlIwHwYDVR0jBBgwFoAUvL8SeWNlHMM/a7aNXevQW+GHTOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQkFBLzk0NjdGMzZDRDQw NDExRjFCOUJBREVDMzI4NjZDRUY5L3ZMOFNlV05sSE1NX2E3YU5YZXZRVy1HSFRP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkw4U2VXTmxITU1fYTdhTlhldlFXLUdIVE9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUJBQS85NDY3RjM2Q0Q0MDQxMUYxQjlCQURFQzMyODY2Q0VGOS9BQzM4QzBGNkQ0 MDUxMUYxOEM4Rjc1RUMyODY2Q0VGOS5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAF0QugwDQQCAAIwBwMFACQCgCAwDQYJKoZIhvcNAQELBQADggEBAKOB jP2OpqZonCcaGwsrqfPBcZAULCPVYFnL9yKBtkee2xLtscImKgxDSopAsUd+vd/3 jaX04Z8azgdRFYshVK3Mv/ODhytKhTJNOj875Gmghm72sdNL59tf7TVgV07S/YeF GZB0tv/pnwnEcdo1td49frAvQT0izlw/dHL+/Gw84c8PPYD/gY+KHvWcVKbICW+1 3MAPcjHrdd3xH6vHbvyVRLtLYyGfnm3tYjGF5r5WRS/h4ahtesjlkDJrjDAupiR4 B2FEgUCqbPl/ch24zdgU5zwn1QQQ2RXfufrz4sWBAjMQ7Zco4hsN9jM3zm4tzERT 4dfYuataIhwVT3OC+/I= -----END CERTIFICATE-----Generated at Sun Nov 8 17:30:39 2026 by rpki-client