$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/88FD3F60EE7D11EE8868470EC4F9AE02.roa File: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (raw, json) Hash identifier: mPrHeMfy08cq9aVZC9AR3g74pMKSKrpAT05D5o1XUwk= Subject key identifier: CE:61:88:71:9A:95:22:21:6A:8C:80:BE:8D:AC:AF:C3:CE:02:57:FC Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 019A Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/88FD3F60EE7D11EE8868470EC4F9AE02.roa Signing time: Wed 27 May 2026 04:35:40 +0000 ROA not before: Wed 27 May 2026 04:35:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152674 IP address blocks: 203.28.252.0/24 maxlen: 24 203.28.253.0/24 maxlen: 24 2001:df3:9fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: May 27 04:35:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a16749c-5734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:0f:12:8c:ae:70:99:25:9b:bd:a0:1d:45: c8:04:24:45:46:c5:51:3f:4c:46:d8:92:e2:8d:c7: a8:ae:f3:8f:9c:3b:b6:fa:63:06:06:6b:59:07:52: a3:30:8e:3d:95:62:79:64:aa:a3:04:29:e5:fc:3f: 43:ef:f0:a0:09:5a:19:9c:a2:59:66:e5:97:f8:2a: bd:73:26:b9:4c:af:50:9f:44:29:5e:ce:97:f4:b0: 15:52:e5:58:f0:95:04:79:a2:78:72:87:16:7e:96: af:dc:9f:e6:3c:4e:48:27:51:c2:e6:b6:c4:0f:07: 57:d5:0a:fa:bf:0d:bd:86:aa:45:e4:d8:dc:c2:98: a0:54:dc:69:c2:33:82:42:1a:db:bc:23:14:60:d0: 52:0b:cc:aa:57:c1:88:2b:86:bd:0c:9c:bc:dc:9e: a9:d8:cc:21:86:7d:c0:64:f4:5a:dd:80:33:f4:5b: 6a:2c:29:59:02:e9:de:fb:85:32:58:2e:a0:ee:0f: a4:09:5c:55:3f:8d:eb:83:00:d5:e3:93:80:1e:32: ca:f1:31:ea:7a:8a:36:bf:f9:b3:93:4e:26:ff:6c: ed:d4:6a:0f:e8:64:fd:c6:ea:49:d6:20:bc:15:97: ed:02:3e:77:bd:a9:ab:7b:3a:66:f9:8f:18:fe:ae: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:88:71:9A:95:22:21:6A:8C:80:BE:8D:AC:AF:C3:CE:02:57:FC X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/88FD3F60EE7D11EE8868470EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.252.0/23 IPv6: 2001:df3:9fc0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:a5:fe:5c:ec:b5:cf:9a:dc:d5:d6:a0:81:ec:8f:db:85:a3: 86:7b:98:1e:25:54:20:f3:a7:51:1c:5f:96:79:a8:32:7d:5f: b9:30:63:dd:f6:36:bc:5d:99:5f:81:fc:cd:f7:91:70:1a:ac: 05:41:ef:cf:c0:d3:c2:44:65:72:af:d6:32:b6:27:c6:9f:ac: 39:77:14:f8:19:c1:d1:cc:6e:7e:cf:f5:7f:5e:5a:6c:c8:d1: ba:de:46:a4:9a:cf:b5:c9:83:2b:3f:cb:5b:13:b2:bf:20:db: 06:1c:7d:02:bb:93:1c:44:b8:53:24:8f:9f:73:b5:cc:15:7c: 27:86:cd:b3:c3:59:52:70:a7:10:6f:be:db:c8:cb:35:09:e5: 18:d6:76:40:1d:c2:46:a5:2c:01:5a:6e:34:0c:e5:2a:67:5a: 59:c1:64:d1:8e:ad:1b:c9:f8:90:4a:36:e9:57:89:d0:b0:dd: 79:a1:fb:fc:27:ca:7d:9a:52:94:5b:fc:5c:4f:fd:2a:c1:c8: 34:a5:bb:8c:32:69:80:8d:2c:f2:2f:9f:a0:bb:38:e7:9b:38: 5f:32:7f:48:1b:1e:15:f5:70:f7:54:a5:95:86:73:29:99:8f: 65:6d:42:ca:87:1a:8f:cc:b0:a4:e5:5a:1a:c9:76:8a:cb:3f: 8a:45:f7:a5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzMxMTAvBgNVBAUTKEY0MTNGNTFEODdCQkZGNEIwQTQxMDcyMTg3NDc2RUJF MDdEMzYxQkYwHhcNMjYwNTI3MDQzNTQwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2NzQ5Yy01NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq68PEoyucJklm72gHUXIBCRFRsVRP0xG2JLijceorvOPnDu2+mMGBmtZB1Kj MI49lWJ5ZKqjBCnl/D9D7/CgCVoZnKJZZuWX+Cq9cya5TK9Qn0QpXs6X9LAVUuVY 8JUEeaJ4cocWfpav3J/mPE5IJ1HC5rbEDwdX1Qr6vw29hqpF5NjcwpigVNxpwjOC QhrbvCMUYNBSC8yqV8GIK4a9DJy83J6p2Mwhhn3AZPRa3YAz9FtqLClZAune+4Uy WC6g7g+kCVxVP43rgwDV45OAHjLK8THqeoo2v/mzk04m/2zt1GoP6GT9xupJ1iC8 FZftAj53vamrezpm+Y8Y/q7jewIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM5hiHGa lSIhaoyAvo2sr8POAlf8MB8GA1UdIwQYMBaAFPQT9R2Hu/9LCkEHIYdHbr4H02G/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDMy8yNEI4RTI1OEVF N0MxMUVFOUYyOTBFODBDNEY5QUUwMi85QlAxSFllN18wc0tRUWNoaDBkdXZnZlRZ YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFliOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBDQzMvMjRCOEUyNThFRTdDMTFFRTlGMjkwRTgwQzRGOUFFMDIvODhGRDNGNjBF RTdEMTFFRTg4Njg0NzBFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByxz8MA8EAgACMAkDBwAgAQ3zn8AwDQYJKoZIhvcNAQELBQADggEB AF6l/lzstc+a3NXWoIHsj9uFo4Z7mB4lVCDzp1EcX5Z5qDJ9X7kwY932NrxdmV+B /M33kXAarAVB78/A08JEZXKv1jK2J8afrDl3FPgZwdHMbn7P9X9eWmzI0breRqSa z7XJgys/y1sTsr8g2wYcfQK7kxxEuFMkj59ztcwVfCeGzbPDWVJwpxBvvtvIyzUJ 5RjWdkAdwkalLAFabjQM5SpnWlnBZNGOrRvJ+JBKNulXidCw3Xmh+/wnyn2aUpRb /FxP/SrByDSlu4wyaYCNLPIvn6C7OOebOF8yf0gbHhX1cPdUpZWGcymZj2VtQsqH Go/MsKTlWhrJdorLP4pF96U= -----END CERTIFICATE-----Generated at Wed Jul 29 01:41:01 2026 by rpki-client