$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa File: 88B3BAE252C911EA93D1814FC4F9AE02.roa (raw, json) Hash identifier: YRQ+bXrfPzReAwar2sEx5jMNc+LD4qPZaGejVDwwgW4= Subject key identifier: 4E:BA:8A:E6:B9:A6:C2:61:39:73:58:FA:8A:8E:6C:65:3A:F7:37:45 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C29 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa Signing time: Mon 06 Jul 2026 15:13:16 +0000 ROA not before: Mon 06 Jul 2026 15:13:16 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 55554 IP address blocks: 27.123.19.0/24 maxlen: 24 61.91.221.0/24 maxlen: 24 113.21.240.0/24 maxlen: 24 113.21.242.0/24 maxlen: 24 122.144.27.0/24 maxlen: 24 122.144.29.0/24 maxlen: 24 122.144.30.0/24 maxlen: 24 122.144.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15401 (0x3c29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:13:16 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc60c-d3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:ce:c2:3a:3b:1f:e1:bd:4e:25:ba:71:a6: 52:69:a8:8b:7d:95:7b:8a:95:44:c2:fd:00:d3:21: 1d:c8:34:42:ab:b4:43:e0:90:f4:42:91:93:d4:ac: 64:c0:bd:88:e8:4d:2f:cb:ef:59:76:da:41:a0:20: 51:ac:c7:8c:be:f2:70:4c:a6:55:15:c0:5d:43:c9: 70:22:4f:e7:1f:da:37:48:fb:d1:ac:08:c4:51:24: aa:1a:02:b4:22:9d:b7:f7:9c:c5:9b:12:c7:40:c1: 7c:ff:a8:c2:27:59:83:63:ac:dc:c2:e6:10:cc:48: e9:b0:f3:4f:fa:c7:6d:c1:20:85:18:16:7e:8b:f0: e8:86:0f:98:41:63:b9:91:31:e7:51:3b:30:71:03: 89:c7:e0:4b:0d:da:74:15:76:2a:58:e1:92:b6:a1: cc:af:a0:2e:ce:97:4d:86:ab:8a:e6:31:8c:39:f9: 0d:88:95:37:1e:a4:8b:88:ee:f3:7f:84:cb:14:2c: 6b:bd:35:ee:62:9f:fd:87:f0:35:d8:d1:8f:1c:bb: 3a:3c:c7:25:4a:b2:25:ad:0e:67:07:20:c1:d7:ab: ee:e4:01:84:b7:34:17:67:93:42:64:e3:76:1a:2b: 83:97:4c:cb:fe:38:8a:df:e4:1f:09:57:4b:cc:6a: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:8A:E6:B9:A6:C2:61:39:73:58:FA:8A:8E:6C:65:3A:F7:37:45 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/88B3BAE252C911EA93D1814FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.123.19.0/24 61.91.221.0/24 113.21.240.0/24 113.21.242.0/24 122.144.27.0/24 122.144.29.0-122.144.31.255 Signature Algorithm: sha256WithRSAEncryption 64:c5:1b:aa:39:7f:18:ac:5e:8b:c7:6c:c4:56:75:cb:e4:bc: 09:f7:e5:22:65:84:c2:af:2b:1e:d5:06:d9:a1:58:e9:e7:d3: 05:6e:6c:56:a4:b9:4e:4b:e1:d0:9b:fb:ef:7b:23:15:f6:2f: d2:2a:94:2c:e4:c3:ad:39:5d:5e:25:96:3c:13:31:8e:8c:4f: 4d:40:b7:d6:dd:51:5d:17:c1:be:7b:2f:57:ce:00:95:22:ca: 85:df:6a:f6:5f:02:91:9d:64:27:37:c6:10:e3:6f:f1:5c:20: 3a:68:89:30:10:53:93:0a:13:3e:24:a1:8f:8a:43:f8:05:8b: 3c:1b:ec:3f:b5:52:74:98:21:68:3e:03:c0:7c:6e:89:dd:f1: 41:ff:7f:51:31:d2:14:3f:41:31:83:23:40:76:88:91:5d:15: f6:c1:b5:f8:80:27:d1:6b:5c:fd:d2:2f:01:95:2a:46:6d:71: 7f:34:85:d6:a0:db:20:66:f6:bc:6e:7b:d2:1d:91:6f:01:4c: 5c:55:1a:ee:d0:06:6a:9c:6f:e8:8a:6c:d6:5f:25:c4:6b:97: 2c:5c:50:21:01:79:b2:59:c0:43:0a:53:9d:31:ba:38:f8:67: c1:ff:30:91:1d:c2:36:f8:6b:5b:8e:7b:7d:b0:05:b9:ab:39: b3:08:51:67 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICPCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMzE2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzYwYy1kM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySLOwjo7H+G9TiW6caZSaaiLfZV7ipVEwv0A0yEdyDRCq7RD4JD0QpGT1Kxk wL2I6E0vy+9ZdtpBoCBRrMeMvvJwTKZVFcBdQ8lwIk/nH9o3SPvRrAjEUSSqGgK0 Ip2395zFmxLHQMF8/6jCJ1mDY6zcwuYQzEjpsPNP+sdtwSCFGBZ+i/Dohg+YQWO5 kTHnUTswcQOJx+BLDdp0FXYqWOGStqHMr6AuzpdNhquK5jGMOfkNiJU3HqSLiO7z f4TLFCxrvTXuYp/9h/A12NGPHLs6PMclSrIlrQ5nByDB16vu5AGEtzQXZ5NCZON2 GiuDl0zL/jiK3+QfCVdLzGqxFwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFE66iua5 psJhOXNY+oqObGU69zdFMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvODhCM0JBRTI1 MkM5MTFFQTkzRDE4MTRGQzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQAG3sTAwQAPVvdAwQAcRXwAwQAcRXyAwQAepAbMAwDBAB6kB0DBAV6 kAAwDQYJKoZIhvcNAQELBQADggEBAGTFG6o5fxisXovHbMRWdcvkvAn35SJlhMKv Kx7VBtmhWOnn0wVubFakuU5L4dCb++97IxX2L9IqlCzkw605XV4lljwTMY6MT01A t9bdUV0Xwb57L1fOAJUiyoXfavZfApGdZCc3xhDjb/FcIDpoiTAQU5MKEz4koY+K Q/gFizwb7D+1UnSYIWg+A8B8bond8UH/f1Ex0hQ/QTGDI0B2iJFdFfbBtfiAJ9Fr XP3SLwGVKkZtcX80hdag2yBm9rxue9IdkW8BTFxVGu7QBmqcb+iKbNZfJcRrlyxc UCEBebJZwEMKU50xujj4Z8H/MJEdwjb4a1uOe32wBbmrObMIUWc= -----END CERTIFICATE-----Generated at Tue Jul 21 19:38:42 2026 by rpki-client