$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa File: 68EBA63A48B911EFB80D9535C4F9AE02.roa (raw, json) Hash identifier: tX6hwKferIVMkSYMI8hzg3HEG28VMd7DHAYXOto5Mlo= Subject key identifier: CA:06:94:7A:C2:A0:77:FF:C7:A6:FB:08:F8:21:A8:EA:34:AA:38:69 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 01AE Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa Signing time: Thu 27 Aug 2026 04:55:43 +0000 ROA not before: Thu 27 Aug 2026 04:55:43 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 6453 IP address blocks: 192.8.33.0/24 maxlen: 24 192.8.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 04:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Aug 27 04:55:43 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8fc34f-e3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:0e:50:f7:0e:4a:e1:8b:f8:77:bd:95:f4: 4e:c0:89:cb:dc:46:ed:df:ea:a9:67:76:ff:9b:7f: 22:4c:06:e6:d7:21:d3:ad:58:8e:5a:1f:f6:33:76: a3:25:e9:7a:7d:83:79:43:c2:a4:5c:ec:1a:55:fb: 60:84:be:7a:22:8b:4a:22:44:ed:5a:b8:d4:d0:fb: 27:3f:13:29:be:99:1a:8c:d1:d3:72:24:35:26:54: 3d:e1:eb:3b:1c:cc:20:71:35:45:85:09:69:6c:24: 0b:e3:d3:36:62:42:4a:2f:b6:73:26:63:f6:18:01: 72:0a:b4:c0:ba:62:c7:80:53:97:d3:11:f5:66:4c: 41:20:12:d1:56:06:22:58:7c:bf:06:3c:d2:bc:46: bc:a1:30:ea:0c:4b:91:47:6e:ab:52:51:93:a4:ed: 49:72:a3:8b:66:0e:01:5d:bd:b9:a9:52:23:43:88: ad:aa:e5:85:06:10:d5:55:5b:c2:cf:35:40:67:db: 02:2d:dd:ff:ed:73:93:26:44:48:e5:ff:ca:bb:6c: c9:2e:e3:ed:a0:20:46:50:89:c7:30:57:19:e8:79: 85:34:4a:11:e5:e0:57:83:cc:b9:4b:a5:7c:6a:9f: 62:62:ba:90:9e:8a:87:8c:57:5d:bd:fc:85:8b:ec: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:06:94:7A:C2:A0:77:FF:C7:A6:FB:08:F8:21:A8:EA:34:AA:38:69 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/68EBA63A48B911EFB80D9535C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.8.33.0/24 192.8.238.0/24 Signature Algorithm: sha256WithRSAEncryption 54:4c:89:6c:d2:ad:ba:ce:e0:9d:d0:19:5c:8b:60:3a:b9:a1: ac:37:26:fb:28:2e:da:37:71:42:42:bb:7c:19:da:2a:fe:ec: da:14:99:ab:83:4b:a5:15:4c:10:5d:4b:17:37:8e:4c:db:11: 59:49:c1:dd:d2:54:6c:d1:7b:50:df:cb:77:05:d6:76:72:f4: fc:51:78:63:76:cd:f7:cf:40:19:c4:a9:c8:20:65:c4:8d:8f: 4d:3d:93:c5:de:dd:c9:89:eb:10:5d:61:87:60:9e:4b:e0:1c: af:11:a2:5e:2c:a9:04:7d:01:7c:e0:95:76:b5:1c:89:49:d6: 5b:49:e6:af:42:1a:2f:ac:34:1c:4a:14:c1:77:aa:a3:29:17: 02:22:ce:b3:4d:62:f5:ae:f0:e7:43:00:e0:18:47:6c:f1:8f: 4b:eb:f2:9e:88:14:47:52:ab:8a:4e:17:9b:7f:a9:57:b2:04: 68:1e:3f:44:14:37:00:45:05:8c:3b:57:21:85:ad:b2:bf:dc: 00:49:c0:3d:5f:9d:a7:26:18:47:31:4c:15:42:fc:16:66:88: d4:da:00:50:f8:ba:c2:5c:1c:a2:03:5a:43:7b:28:df:a1:e2: ba:7a:9d:22:f7:f7:4f:c0:65:49:cc:5e:85:59:5f:65:75:4f: 33:ac:ed:e4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjYwODI3MDQ1NTQzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmYzM0Zi1lM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhvEOUPcOSuGL+He9lfROwInL3Ebt3+qpZ3b/m38iTAbm1yHTrViOWh/2M3aj Jel6fYN5Q8KkXOwaVftghL56IotKIkTtWrjU0PsnPxMpvpkajNHTciQ1JlQ94es7 HMwgcTVFhQlpbCQL49M2YkJKL7ZzJmP2GAFyCrTAumLHgFOX0xH1ZkxBIBLRVgYi WHy/BjzSvEa8oTDqDEuRR26rUlGTpO1JcqOLZg4BXb25qVIjQ4itquWFBhDVVVvC zzVAZ9sCLd3/7XOTJkRI5f/Ku2zJLuPtoCBGUInHMFcZ6HmFNEoR5eBXg8y5S6V8 ap9iYrqQnoqHjFddvfyFi+yOGQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMoGlHrC oHf/x6b7CPghqOo0qjhpMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4MkYvNkQyMDc1RjY0MDcwMTFFRkJEQTlENjZGQzRGOUFFMDIvNjhFQkE2M0E0 OEI5MTFFRkI4MEQ5NTM1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAwAghAwQAwAjuMA0GCSqGSIb3DQEBCwUAA4IBAQBUTIls0q26zuCd 0Blci2A6uaGsNyb7KC7aN3FCQrt8Gdoq/uzaFJmrg0ulFUwQXUsXN45M2xFZScHd 0lRs0XtQ38t3BdZ2cvT8UXhjds33z0AZxKnIIGXEjY9NPZPF3t3JiesQXWGHYJ5L 4ByvEaJeLKkEfQF84JV2tRyJSdZbSeavQhovrDQcShTBd6qjKRcCIs6zTWL1rvDn QwDgGEds8Y9L6/KeiBRHUquKThebf6lXsgRoHj9EFDcARQWMO1chha2yv9wAScA9 X52nJhhHMUwVQvwWZojU2gBQ+LrCXByiA1pDeyjfoeK6ep0i9/dPwGVJzF6FWV9l dU8zrO3k -----END CERTIFICATE-----Generated at Sat Sep 5 00:49:11 2026 by rpki-client