$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa File: 4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa (raw, json) Hash identifier: X9BGtBs1osigY8tUwUmWLsAjtgQ3b+t0twb857Yii5o= Subject key identifier: 86:BC:C8:CA:D3:39:E0:3B:37:3D:BE:FA:75:74:D4:68:96:D6:18:98 Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Certificate serial: 0198 Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa Signing time: Wed 17 Jun 2026 05:34:32 +0000 ROA not before: Wed 17 Jun 2026 05:34:32 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 18390 IP address blocks: 203.4.136.0/24 maxlen: 24 203.4.137.0/24 maxlen: 24 203.4.138.0/24 maxlen: 24 203.4.139.0/24 maxlen: 24 203.4.140.0/24 maxlen: 24 203.4.141.0/24 maxlen: 24 203.4.142.0/24 maxlen: 24 203.4.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Validity Not Before: Jun 17 05:34:32 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3231e8-2f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:f3:6e:d1:a8:d2:18:3f:89:ca:78:e4:bd: 3f:41:bf:e5:33:20:54:d4:67:7f:e1:24:c8:95:55: 3c:fd:36:6b:56:ca:18:7a:f5:f1:4f:a5:ef:aa:70: 17:6c:2e:15:c6:6c:62:c2:cd:85:c0:7c:30:a7:81: 31:36:db:c1:57:f3:7d:70:2c:88:32:f3:6a:36:93: 87:14:de:47:6d:aa:9a:81:0d:e0:82:e9:7d:ef:97: 77:31:ba:33:e9:f3:df:e2:6d:eb:9a:44:f9:93:04: 17:d4:56:5c:ef:e3:70:88:8f:7c:5c:02:6d:55:27: c8:8f:f7:f6:97:1e:20:e3:ae:a7:b9:f3:5f:8c:05: b7:f7:e7:17:5f:03:82:56:d4:eb:8c:36:92:6d:a6: 17:a6:00:9f:d2:90:30:bc:03:e8:36:ce:aa:dd:c2: 9a:90:bf:55:aa:65:16:f0:42:2a:86:2c:5c:d2:71: 03:ed:4b:46:31:97:87:cc:49:b4:0d:be:1e:6e:1d: 1e:0c:4b:18:a1:33:59:26:50:34:7e:ba:c1:1c:cc: 1e:58:37:f1:df:33:ba:63:66:2e:13:fb:1b:20:db: 2f:8f:73:fc:31:7e:98:9a:a6:ee:91:c2:ed:41:eb: 30:70:e9:91:24:ab:63:21:d5:a9:9e:46:09:dd:fc: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BC:C8:CA:D3:39:E0:3B:37:3D:BE:FA:75:74:D4:68:96:D6:18:98 X509v3 Authority Key Identifier: keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/4ABCFD508D3A11F0B6F4F46FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.4.136.0/21 Signature Algorithm: sha256WithRSAEncryption 04:04:82:5a:80:68:d0:21:aa:c6:24:14:74:11:b9:ea:b3:b0: d6:93:4e:7c:28:85:75:4a:90:8f:1f:43:a3:82:de:7f:f1:66: 10:81:90:39:74:b9:ab:ef:41:a8:53:a3:b7:55:88:2a:56:53: da:80:9a:77:91:97:34:20:d6:11:2e:66:86:73:09:67:76:9d: 32:ca:5c:b3:21:1a:1c:7d:df:22:d1:ae:60:ef:07:7c:ae:a7: d7:ef:25:fc:aa:ae:98:27:15:d8:85:63:8b:e3:0a:cf:8b:8f: f9:59:41:a8:fc:8b:59:a6:30:fd:49:ab:6f:51:78:19:6f:4f: 3f:57:bd:2a:79:52:15:dc:7c:74:9f:17:b9:1c:90:c5:77:e0: ad:d2:bd:7d:fa:a0:62:3f:ed:85:9e:f4:b8:7a:0e:2f:08:eb: c3:2d:62:51:73:a0:dc:d0:7d:49:2c:0b:5f:c7:5f:8d:56:97: d9:29:8d:81:64:07:01:be:a4:75:71:da:9f:e3:3d:b1:b1:fd: 76:b7:d5:09:00:59:31:cd:0f:dc:11:42:1f:10:31:aa:83:87: f0:c9:34:3e:1c:06:db:29:b0:3e:c7:b7:78:a6:12:ee:f9:db: 90:37:b5:ec:80:75:18:bd:78:cb:c5:71:35:c7:34:4c:ef:ca: 59:0c:8c:7c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz MjY5OENBRkEwHhcNMjYwNjE3MDUzNDMyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyMzFlOC0yZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXnzbtGo0hg/icp45L0/Qb/lMyBU1Gd/4STIlVU8/TZrVsoYevXxT6XvqnAX bC4Vxmxiws2FwHwwp4ExNtvBV/N9cCyIMvNqNpOHFN5HbaqagQ3ggul975d3Mboz 6fPf4m3rmkT5kwQX1FZc7+NwiI98XAJtVSfIj/f2lx4g466nufNfjAW39+cXXwOC VtTrjDaSbaYXpgCf0pAwvAPoNs6q3cKakL9VqmUW8EIqhixc0nED7UtGMZeHzEm0 Db4ebh0eDEsYoTNZJlA0frrBHMweWDfx3zO6Y2YuE/sbINsvj3P8MX6YmqbukcLt QeswcOmRJKtjIdWpnkYJ3fztjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIa8yMrT OeA7Nz2++nV01GiW1hiYMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0 MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5 dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFMTkvMTBDN0YwQUExNDBGMTFFRjhBNEE3MDE2QzRGOUFFMDIvNEFCQ0ZENTA4 RDNBMTFGMEI2RjRGNDZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDywSIMA0GCSqGSIb3DQEBCwUAA4IBAQAEBIJagGjQIarGJBR0Ebnq s7DWk058KIV1SpCPH0Ojgt5/8WYQgZA5dLmr70GoU6O3VYgqVlPagJp3kZc0INYR LmaGcwlndp0yylyzIRocfd8i0a5g7wd8rqfX7yX8qq6YJxXYhWOL4wrPi4/5WUGo /ItZpjD9SatvUXgZb08/V70qeVIV3Hx0nxe5HJDFd+Ct0r19+qBiP+2FnvS4eg4v COvDLWJRc6Dc0H1JLAtfx1+NVpfZKY2BZAcBvqR1cdqf4z2xsf12t9UJAFkxzQ/c EUIfEDGqg4fwyTQ+HAbbKbA+x7d4phLu+duQN7XsgHUYvXjLxXE1xzRM78pZDIx8 -----END CERTIFICATE-----Generated at Wed Jun 17 09:25:00 2026 by rpki-client