$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa File: D1B6FD008D6D11EB9DB49A32C4F9AE02.roa (raw, json) Hash identifier: RMgMpAILdiB9+DUyceO7qh1W7GyiTWufDuFfVE50Kys= Subject key identifier: BF:08:A4:8F:F2:7E:31:E2:78:CE:79:DF:E7:CB:EF:CF:B9:8C:8C:B7 Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 075B Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa Signing time: Sat 20 Jun 2026 22:26:17 +0000 ROA not before: Sat 20 Jun 2026 22:26:17 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 1221 IP address blocks: 203.5.32.0/24 maxlen: 24 203.5.33.0/24 maxlen: 24 203.5.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: Jun 20 22:26:17 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a371389-524c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:72:64:07:4b:e9:90:91:25:1d:36:1a:0b: 06:b7:c5:bf:c6:89:a4:95:bb:7a:b8:84:c0:a3:00: 83:35:66:5f:d8:73:93:41:0f:69:94:51:70:36:7e: 82:a3:66:0b:c0:00:e4:97:62:fd:d4:82:da:64:6b: 23:61:40:7d:6e:83:47:05:11:47:68:99:1f:ff:49: 2c:ec:67:af:0d:e7:81:10:28:e4:ec:e1:0d:7d:97: fd:e2:c9:e7:ab:48:d2:d2:f0:00:0f:df:cd:b3:bd: cb:33:3e:5f:78:2d:73:ef:d1:00:f5:5c:eb:bf:b4: ed:23:45:df:7d:46:6d:69:77:ac:8d:23:52:34:69: f5:c3:cc:d4:37:1c:be:6a:76:97:4a:9a:b8:4f:0c: 3a:7d:d7:03:45:b0:2d:60:2b:78:74:38:d5:11:ea: 60:c2:c2:bf:b8:de:bb:f2:8a:7f:47:f1:22:23:ca: ef:0e:7c:5a:50:14:d8:cd:6f:07:69:27:1b:13:2e: 95:c9:54:78:3c:77:42:91:35:d6:37:ff:b4:aa:89: da:61:39:68:71:fd:4d:f3:60:15:d0:28:25:d1:50: 28:e3:26:6c:7d:91:7d:c9:ac:86:ae:f2:8b:4a:2f: 1c:16:21:26:0b:5e:f6:46:99:a2:f9:55:6b:70:82: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:08:A4:8F:F2:7E:31:E2:78:CE:79:DF:E7:CB:EF:CF:B9:8C:8C:B7 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D1B6FD008D6D11EB9DB49A32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.5.32.0/23 203.5.37.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:83:5c:1a:8a:53:dc:0b:13:80:d9:45:e3:31:45:1b:a5:47: f0:50:e9:c4:45:44:7c:f9:b1:fe:16:b0:84:ba:c1:86:91:df: 5b:7a:66:c8:19:5d:53:52:bb:c0:50:97:44:41:ae:24:20:24: a4:6a:a0:fa:c3:bf:dd:68:e3:48:39:8d:ff:93:82:11:b0:b1: a9:b2:2b:9f:d1:39:66:fd:64:35:51:ae:be:dd:ed:71:75:ec: 35:90:39:98:05:94:34:cb:a0:85:08:48:f4:08:54:db:d1:2d: 3d:b0:b8:b9:cb:87:8c:da:fd:71:60:8d:9b:72:11:17:ef:3a: 64:31:2d:c9:5b:79:25:cd:37:58:11:11:ef:98:d7:36:ce:d9: 2c:88:ed:d0:84:ba:02:b2:7d:d8:66:e8:36:b0:e4:b8:b2:91: 97:95:9c:3b:33:9f:ae:38:e8:76:89:02:97:bc:34:9c:fe:2c: 57:6e:4d:0c:5c:0e:c2:a9:94:8f:f7:b6:44:ea:70:ab:21:75: bb:db:dc:bf:c0:b4:47:67:7d:13:e4:7a:49:e6:21:27:f4:2c: 93:2a:0d:1a:1a:67:77:4d:e7:a0:ed:ca:7d:85:4b:2d:4c:94: fa:06:76:7e:8e:34:47:16:02:11:b8:ca:7f:c1:48:f8:d2:5d: 89:79:cd:43 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjYwNjIwMjIyNjE3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM3MTM4OS01MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwZyZAdL6ZCRJR02GgsGt8W/xomklbt6uITAowCDNWZf2HOTQQ9plFFwNn6C o2YLwADkl2L91ILaZGsjYUB9boNHBRFHaJkf/0ks7GevDeeBECjk7OENfZf94snn q0jS0vAAD9/Ns73LMz5feC1z79EA9Vzrv7TtI0XffUZtaXesjSNSNGn1w8zUNxy+ anaXSpq4Tww6fdcDRbAtYCt4dDjVEepgwsK/uN678op/R/EiI8rvDnxaUBTYzW8H aScbEy6VyVR4PHdCkTXWN/+0qonaYTlocf1N82AV0Cgl0VAo4yZsfZF9yayGrvKL Si8cFiEmC172Rpmi+VVrcIK+NwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL8IpI/y fjHieM553+fL78+5jIy3MB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4OEIvRjM2Qjc5QjA4MDc3MTFFQkI5MjVGMTU0QzRGOUFFMDIvRDFCNkZEMDA4 RDZEMTFFQjlEQjQ5QTMyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBywUgAwQAywUlMA0GCSqGSIb3DQEBCwUAA4IBAQBdg1wailPcCxOA 2UXjMUUbpUfwUOnERUR8+bH+FrCEusGGkd9bembIGV1TUrvAUJdEQa4kICSkaqD6 w7/daONIOY3/k4IRsLGpsiuf0Tlm/WQ1Ua6+3e1xdew1kDmYBZQ0y6CFCEj0CFTb 0S09sLi5y4eM2v1xYI2bchEX7zpkMS3JW3klzTdYERHvmNc2ztksiO3QhLoCsn3Y Zug2sOS4spGXlZw7M5+uOOh2iQKXvDSc/ixXbk0MXA7CqZSP97ZE6nCrIXW729y/ wLRHZ30T5HpJ5iEn9CyTKg0aGmd3Teeg7cp9hUstTJT6BnZ+jjRHFgIRuMp/wUj4 0l2Jec1D -----END CERTIFICATE-----Generated at Tue Jul 21 23:51:32 2026 by rpki-client