$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/0DF331C28F9411EAA5E7B573C4F9AE02.roa File: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (raw, json) Hash identifier: H0Q9Dnfcv7v0NLSRVYRS5bV6BNFCWPP9Zw2TMZ3l3UQ= Subject key identifier: 78:1E:42:AA:5B:77:63:AF:BF:82:24:D7:7B:3E:21:C5:3E:38:17:8A Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0DED Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/0DF331C28F9411EAA5E7B573C4F9AE02.roa Signing time: Sat 10 Oct 2026 16:22:22 +0000 ROA not before: Sat 10 Oct 2026 16:22:22 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 7642 IP address blocks: 83.137.200.0/21 maxlen: 21 83.137.200.0/23 maxlen: 24 83.137.202.0/23 maxlen: 24 83.137.204.0/23 maxlen: 24 83.137.206.0/23 maxlen: 24 185.215.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Oct 10 16:22:22 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aca663d-de82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:ac:c9:f4:a4:31:52:21:ca:3e:2d:b2:e8: ac:b8:39:08:34:cc:5f:39:73:d7:5c:03:c7:e6:a9: 2c:59:0d:e7:44:57:0e:02:43:d8:bd:28:ca:c4:c9: 01:60:8f:7e:27:94:fa:b7:1c:4a:93:fe:ee:ce:54: a6:9c:71:5b:b1:60:26:45:1c:c0:05:27:8c:7d:5f: e6:d0:84:ac:fc:38:67:c6:11:39:9c:8f:1f:05:15: aa:fc:7b:09:dc:29:21:12:30:10:be:8a:00:28:82: b9:2c:8f:6e:c6:2a:ac:fe:f3:be:0a:dc:51:45:e1: 2a:e1:df:c2:67:23:29:34:d3:5c:39:92:7a:16:8a: 61:44:c8:b6:24:b0:a1:51:d0:3a:1f:26:19:5a:79: 44:9a:56:bc:58:d4:ca:e3:8d:92:b5:dc:36:eb:ca: 7d:8d:f9:a5:e4:19:0d:5b:ef:3b:4d:35:9b:8d:af: 84:e4:6a:12:88:4d:45:b3:6c:e6:34:59:77:63:5e: 65:5c:9b:a8:3b:14:51:d7:4a:61:1c:be:b7:84:8a: f8:50:c2:41:b0:2c:44:6b:d2:f9:e8:f4:78:10:1f: 00:75:55:c3:37:48:b7:b0:4d:31:f0:f3:be:8d:a4: e4:e3:ac:a4:09:ac:64:81:2a:59:e0:27:64:33:01: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:42:AA:5B:77:63:AF:BF:82:24:D7:7B:3E:21:C5:3E:38:17:8A X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/0DF331C28F9411EAA5E7B573C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 83.137.200.0/21 185.215.32.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:80:3b:9e:fd:69:81:23:a2:2d:14:21:fc:7e:97:55:91:fc: 2d:7f:7f:cc:75:ce:58:57:7b:bd:a1:d1:49:80:79:25:ff:6e: 38:74:a8:44:14:57:aa:cd:4c:f3:df:7a:4c:c1:f6:e9:c9:ff: 94:82:1c:3c:4c:ec:35:a7:45:a7:24:ab:8a:63:29:ad:95:66: 5c:a1:6b:30:fe:f8:d9:c7:e6:24:2b:50:5c:f9:0b:b4:cd:0c: a1:bd:ec:d1:34:49:4d:df:e2:1a:44:2a:4d:b1:18:73:bf:40: 98:61:ff:44:4e:f1:cd:0d:91:17:df:0b:13:1b:90:ed:77:12: 36:2c:8a:4e:e6:e3:24:d0:40:8f:ba:7d:6b:b4:6d:37:0e:ab: 50:5a:05:7b:e8:e7:34:ac:2e:e2:fc:11:6d:77:8c:aa:fa:5d: 56:cb:20:f0:71:56:18:f0:6d:7f:c4:99:64:03:f8:3a:e2:9a: 75:48:e9:7d:af:c9:a1:df:7d:63:33:7e:84:ed:5b:2f:3e:d3: 22:c9:cb:ec:5a:f3:0e:59:77:8c:57:bf:7c:ec:50:b9:80:23: c5:73:93:c0:db:f5:7e:ce:e0:ff:aa:c1:bc:2d:d1:48:f6:55: 48:87:8f:da:02:0f:70:0d:67:56:3b:18:33:87:a3:c1:c3:e8: c0:01:de:81 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYxMDEwMTYyMjIyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhNjYzZC1kZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiCsyfSkMVIhyj4tsuisuDkINMxfOXPXXAPH5qksWQ3nRFcOAkPYvSjKxMkB YI9+J5T6txxKk/7uzlSmnHFbsWAmRRzABSeMfV/m0ISs/DhnxhE5nI8fBRWq/HsJ 3CkhEjAQvooAKIK5LI9uxiqs/vO+CtxRReEq4d/CZyMpNNNcOZJ6FophRMi2JLCh UdA6HyYZWnlEmla8WNTK442Stdw268p9jfml5BkNW+87TTWbja+E5GoSiE1Fs2zm NFl3Y15lXJuoOxRR10phHL63hIr4UMJBsCxEa9L56PR4EB8AdVXDN0i3sE0x8PO+ jaTk46ykCaxkgSpZ4CdkMwH+JQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHgeQqpb d2Ovv4Ik13s+IcU+OBeKMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEMzM0EvOEY0N0E5RkFFOTdEMTFFOUE5REI1RTUyQzRGOUFFMDIvMERGMzMxQzI4 Rjk0MTFFQUE1RTdCNTczQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQDU4nIAwQCudcgMA0GCSqGSIb3DQEBCwUAA4IBAQA7gDue/WmBI6It FCH8fpdVkfwtf3/Mdc5YV3u9odFJgHkl/244dKhEFFeqzUzz33pMwfbpyf+Ughw8 TOw1p0WnJKuKYymtlWZcoWsw/vjZx+YkK1Bc+Qu0zQyhvezRNElN3+IaRCpNsRhz v0CYYf9ETvHNDZEX3wsTG5DtdxI2LIpO5uMk0ECPun1rtG03DqtQWgV76Oc0rC7i /BFtd4yq+l1WyyDwcVYY8G1/xJlkA/g64pp1SOl9r8mh331jM36E7VsvPtMiycvs WvMOWXeMV7987FC5gCPFc5PA2/V+zuD/qsG8LdFI9lVIh4/aAg9wDWdWOxgzh6PB w+jAAd6B -----END CERTIFICATE-----Generated at Thu Oct 29 03:49:24 2026 by rpki-client