$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa File: C006CA2248B311EFB8A4C178C4F9AE02.roa (raw, json) Hash identifier: OxfaWe+94tIlTAT4+byZPb7wx3bdqZGYJ/nQcDtlMWw= Subject key identifier: 3B:20:3A:2F:43:60:EB:D0:7C:36:35:A0:47:D5:1F:CF:2B:7D:3C:BB Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 01AC Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa Signing time: Thu 27 Aug 2026 04:55:39 +0000 ROA not before: Thu 27 Aug 2026 04:55:39 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 36224 IP address blocks: 192.8.33.0/24 maxlen: 24 192.8.188.0/24 maxlen: 24 192.8.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Aug 27 04:55:39 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8fc34b-5105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:05:b3:05:30:20:00:dd:36:0d:f1:bb:af: 10:99:3c:4d:18:25:34:66:ba:1f:56:15:24:a2:6a: 0e:67:a7:24:d8:7f:d0:da:07:e7:a1:d3:41:e6:4a: 68:d6:61:f6:8c:18:75:53:6c:f0:68:11:73:ef:ee: 86:c8:07:c8:05:9a:b6:fe:ff:45:ca:5d:ed:6f:a2: ff:f0:b0:26:5c:15:9a:22:98:5d:b5:bd:8b:4c:61: b0:bb:40:b5:5b:07:7b:58:9e:9f:98:f4:e4:d6:22: 9a:b1:fb:47:b2:3b:78:6a:06:5a:62:36:63:f2:55: bf:3e:ab:1a:9d:e6:49:08:62:9d:86:d4:26:fb:56: 17:b8:e3:99:6e:5c:4c:31:87:d5:28:32:61:90:57: 4b:1c:47:3b:f3:73:e2:a6:6b:c0:38:ff:62:a7:19: 4d:c4:05:a7:8d:11:2e:fb:3c:61:6d:5e:5a:66:05: 79:da:c5:b3:4a:38:40:4a:18:b4:2c:72:92:fa:1d: 2d:b5:e0:4b:3c:91:2f:8e:f2:65:35:a3:d5:22:ff: 49:95:4c:1c:b9:e1:f8:f9:a3:a9:6d:51:db:8a:fd: 77:1b:1b:5f:67:8b:fa:cd:d8:62:ff:07:69:3a:89: 36:6a:b6:b3:c9:f8:84:de:ab:69:1b:3a:9a:d2:55: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:3A:2F:43:60:EB:D0:7C:36:35:A0:47:D5:1F:CF:2B:7D:3C:BB X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/C006CA2248B311EFB8A4C178C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.8.33.0/24 192.8.188.0/24 192.8.238.0/24 Signature Algorithm: sha256WithRSAEncryption ad:26:ca:cf:d3:cb:01:b0:48:90:be:c0:bc:01:91:e3:bc:1c: cb:48:d3:4c:df:7f:fc:56:0f:2d:d1:c1:56:e5:f3:dc:9f:d9: d8:b5:73:4c:cb:33:b4:ab:4c:90:bd:41:e6:4b:c1:78:c1:b5: ea:fb:24:34:06:16:be:2a:0c:ef:79:ed:e0:1b:ef:4d:72:23: 7c:81:af:c4:31:7b:1f:19:e5:87:df:09:c5:42:b2:98:d3:0c: b4:b9:17:fa:0c:94:80:28:c7:88:ef:24:a2:e3:75:b6:5a:fb: ff:50:4f:40:4c:3b:b8:e7:31:93:6f:d4:40:f7:33:02:42:34: 90:b4:62:da:29:92:a6:e4:81:59:68:f6:7a:e4:a7:ec:90:44: 9b:22:29:9f:fc:aa:bb:9f:76:c4:98:e4:dc:2b:2b:19:9f:57: 18:1d:c4:bc:f5:51:0c:83:48:a2:7f:5d:e9:a5:52:8e:93:82: 97:08:26:04:15:77:d5:ae:b7:31:bd:d7:be:ef:87:7e:39:7c: 9d:83:fe:b4:aa:08:ff:c2:f2:39:0b:0d:9c:e1:ce:70:db:34: 7b:ad:27:16:11:c1:fd:3c:e1:e3:ba:f2:ed:24:22:2f:c0:a8: 29:20:7e:1d:a1:45:75:12:01:b7:29:20:bc:f4:ad:75:28:88: 10:c0:d0:68 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjYwODI3MDQ1NTM5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmYzM0Yi01MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbEFswUwIADdNg3xu68QmTxNGCU0ZrofVhUkomoOZ6ck2H/Q2gfnodNB5kpo 1mH2jBh1U2zwaBFz7+6GyAfIBZq2/v9Fyl3tb6L/8LAmXBWaIphdtb2LTGGwu0C1 Wwd7WJ6fmPTk1iKasftHsjt4agZaYjZj8lW/PqsaneZJCGKdhtQm+1YXuOOZblxM MYfVKDJhkFdLHEc783PipmvAOP9ipxlNxAWnjREu+zxhbV5aZgV52sWzSjhAShi0 LHKS+h0tteBLPJEvjvJlNaPVIv9JlUwcueH4+aOpbVHbiv13GxtfZ4v6zdhi/wdp Ook2arazyfiE3qtpGzqa0lXIeQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDsgOi9D YOvQfDY1oEfVH88rfTy7MB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4MkYvNkQyMDc1RjY0MDcwMTFFRkJEQTlENjZGQzRGOUFFMDIvQzAwNkNBMjI0 OEIzMTFFRkI4QTRDMTc4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAwAghAwQAwAi8AwQAwAjuMA0GCSqGSIb3DQEBCwUAA4IBAQCtJsrP 08sBsEiQvsC8AZHjvBzLSNNM33/8Vg8t0cFW5fPcn9nYtXNMyzO0q0yQvUHmS8F4 wbXq+yQ0Bha+Kgzvee3gG+9NciN8ga/EMXsfGeWH3wnFQrKY0wy0uRf6DJSAKMeI 7ySi43W2Wvv/UE9ATDu45zGTb9RA9zMCQjSQtGLaKZKm5IFZaPZ65KfskESbIimf /Kq7n3bEmOTcKysZn1cYHcS89VEMg0iif13ppVKOk4KXCCYEFXfVrrcxvde+74d+ OXydg/60qgj/wvI5Cw2c4c5w2zR7rScWEcH9POHjuvLtJCIvwKgpIH4doUV1EgG3 KSC89K11KIgQwNBo -----END CERTIFICATE-----Generated at Sat Sep 5 09:01:51 2026 by rpki-client