$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C8633DEAF4C011EAA7B25986C4F9AE02.roa File: C8633DEAF4C011EAA7B25986C4F9AE02.roa (raw, json) Hash identifier: 2UKR5Ne+INL3gYP5vC9gTKEWBFAKo4pvwX1cl9KzfiQ= Subject key identifier: 63:97:AA:D6:0A:6A:86:A6:73:9D:56:21:EA:29:45:2F:08:5D:C3:15 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 088F Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C8633DEAF4C011EAA7B25986C4F9AE02.roa Signing time: Mon 30 Mar 2026 21:27:04 +0000 ROA not before: Mon 30 Mar 2026 21:27:04 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 24373 IP address blocks: 116.204.208.0/24 maxlen: 24 116.204.209.0/24 maxlen: 24 116.204.210.0/24 maxlen: 24 116.204.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Mar 30 21:27:04 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69caeaa7-40fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:df:3f:db:9c:a1:b8:52:46:af:75:ba:53: 5f:69:c8:90:2b:1e:a0:c7:a1:13:ac:36:4d:3c:72: 2f:6b:37:65:1e:25:bd:8a:fe:d5:b5:68:c5:32:65: cc:8c:6a:48:f1:07:90:a7:b9:a8:06:ca:19:8e:71: c8:67:03:a8:69:d8:bc:81:63:eb:be:80:e6:19:fd: ab:31:3e:60:76:36:65:b8:23:3e:02:28:48:52:c9: 84:0e:10:97:eb:79:f6:da:34:5f:89:0d:bb:75:61: 67:c3:9e:08:a6:03:0a:3b:2c:c7:3d:5f:99:0e:73: 82:22:6f:c4:e7:2b:3e:9a:52:65:8e:a1:7e:bd:83: f6:95:2f:33:6d:d0:12:f2:43:c1:9e:f1:e9:89:26: d4:de:21:6b:c0:2d:bf:1d:a0:e3:57:ad:3c:2d:d9: 24:c2:a6:79:fe:ca:24:00:9e:e0:35:9c:b4:93:17: 7e:20:f8:46:0d:08:a9:a8:ab:e2:b7:25:a6:38:98: 67:77:d1:a1:70:a0:47:87:7a:26:91:fc:a9:42:5f: 15:cd:94:f1:3f:8e:43:ca:e0:09:f5:1c:27:0b:d6: 59:12:b0:a1:2e:5b:2d:7d:68:66:3f:99:b3:71:b9: 24:d9:66:85:fa:e2:f8:a6:bd:40:5b:6d:e3:5a:e2: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:97:AA:D6:0A:6A:86:A6:73:9D:56:21:EA:29:45:2F:08:5D:C3:15 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C8633DEAF4C011EAA7B25986C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 116.204.208.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:8b:97:d2:57:02:f9:5c:b9:c8:46:2e:55:b0:82:3b:4e:f9: 17:cf:6f:47:5d:d7:00:39:3a:d8:9d:02:8f:6d:49:a5:08:1e: 38:63:c9:91:d9:a5:7a:3d:b5:1b:ef:be:07:ba:f4:b9:e3:95: 02:67:07:97:6a:2d:b4:7a:fe:ac:3f:72:20:9b:7c:0e:c0:99: fc:68:e1:a0:6f:da:fc:39:cf:cc:af:d3:c9:1d:72:2e:b2:5b: ab:36:d7:0a:a9:72:c5:35:e0:13:05:97:df:86:6e:23:f5:f8: 53:6e:ba:18:72:2c:43:a1:b2:8e:e8:41:d0:d5:46:66:01:69: 84:72:b9:45:26:d2:d3:37:cd:0d:d8:40:16:88:b7:c2:e5:15: 8c:93:8b:ba:cb:c0:94:a6:cd:f2:14:56:ae:06:1d:2d:76:db: 10:8b:b2:b2:12:1d:d7:fe:eb:d7:16:7c:b3:3d:57:a7:7c:c4: 55:43:58:55:b0:cf:4f:1b:c0:e2:d6:79:f7:82:b4:10:25:fd: 44:cf:e4:5e:88:77:6a:c8:d0:cd:d9:ce:f8:8d:88:ed:66:37: 32:ab:2b:bf:d3:58:66:ee:1d:0b:33:db:22:07:69:e7:6d:f8: 97:26:9e:17:60:58:8f:04:49:82:2e:91:f1:9d:b4:24:8c:72: 6b:55:ef:06 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjYwMzMwMjEyNzA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhZWFhNy00MGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9bfP9ucobhSRq91ulNfaciQKx6gx6ETrDZNPHIvazdlHiW9iv7VtWjFMmXM jGpI8QeQp7moBsoZjnHIZwOoadi8gWPrvoDmGf2rMT5gdjZluCM+AihIUsmEDhCX 63n22jRfiQ27dWFnw54IpgMKOyzHPV+ZDnOCIm/E5ys+mlJljqF+vYP2lS8zbdAS 8kPBnvHpiSbU3iFrwC2/HaDjV608LdkkwqZ5/sokAJ7gNZy0kxd+IPhGDQipqKvi tyWmOJhnd9GhcKBHh3omkfypQl8VzZTxP45DyuAJ9RwnC9ZZErChLlstfWhmP5mz cbkk2WaF+uL4pr1AW23jWuJfzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGOXqtYK aoamc51WIeopRS8IXcMVMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvQzg2MzNERUFG NEMwMTFFQUE3QjI1OTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCdMzQMA0GCSqGSIb3DQEBCwUAA4IBAQBPi5fSVwL5XLnIRi5VsII7 TvkXz29HXdcAOTrYnQKPbUmlCB44Y8mR2aV6PbUb774HuvS545UCZweXai20ev6s P3Igm3wOwJn8aOGgb9r8Oc/Mr9PJHXIuslurNtcKqXLFNeATBZffhm4j9fhTbroY cixDobKO6EHQ1UZmAWmEcrlFJtLTN80N2EAWiLfC5RWMk4u6y8CUps3yFFauBh0t dtsQi7KyEh3X/uvXFnyzPVenfMRVQ1hVsM9PG8Di1nn3grQQJf1Ez+ReiHdqyNDN 2c74jYjtZjcyqyu/01hm7h0LM9siB2nnbfiXJp4XYFiPBEmCLpHxnbQkjHJrVe8G -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:24 2026 by rpki-client