$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa File: 83A8C51804CF11E9BA917C34C4F9AE02.roa (raw, json) Hash identifier: gSAAfQzAtkYt2sHlPT97TtU9N3poYaYmuH6f67ruBkI= Subject key identifier: A9:AB:33:CA:80:5C:A0:E6:1A:B3:63:B8:F7:2F:FC:85:3A:16:D1:3B Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 20FA Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa Signing time: Wed 30 Sep 2026 16:30:45 +0000 ROA not before: Wed 30 Sep 2026 16:30:45 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 133776 IP address blocks: 27.152.180.0/24 maxlen: 24 125.77.128.0/19 maxlen: 19 125.77.160.0/20 maxlen: 20 125.77.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8442 (0x20fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Sep 30 16:30:45 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd3934-e537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:21:3e:25:e9:c2:43:d0:ed:7a:f4:df:70: 49:1d:f7:c5:b4:b5:08:83:02:c2:4d:55:3f:2c:f0: 02:cf:2b:a1:76:33:5d:9a:f5:dc:e1:7d:5f:ce:56: ac:33:70:ca:8b:ee:44:e8:b4:6f:13:ce:6f:e9:3a: c3:2c:d0:e2:41:12:43:99:2d:5b:d4:e4:2f:99:97: 0c:6e:f1:0e:e3:26:04:b3:4a:0e:1a:8d:53:3d:c0: a9:d8:0a:cd:81:a4:06:2f:c2:36:3f:b8:11:6a:0d: 77:a4:ac:be:94:51:dd:2c:32:72:1c:b5:3c:a0:39: 7a:a2:9d:fe:44:57:e1:57:61:ea:cf:46:16:6c:28: 62:eb:f2:73:e1:3d:98:65:ca:e1:f0:ee:c3:56:19: 5d:e6:7b:a4:ef:43:6c:c9:95:7c:8f:9c:9b:a8:f2: 26:5b:82:3b:1a:38:bd:1c:f8:98:a6:39:65:94:39: 90:8e:9f:ee:b9:c9:ca:da:2c:3e:99:9b:b7:03:4d: 7c:f9:df:73:32:3f:cc:e0:8b:96:24:06:b7:38:4d: 3c:e7:ac:4f:eb:a4:47:34:3d:50:19:01:34:49:05: f7:c9:e9:8b:4c:12:a8:b3:2d:09:b2:67:50:95:af: ec:81:9b:96:a0:01:73:72:14:b0:f5:96:2a:a0:27: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AB:33:CA:80:5C:A0:E6:1A:B3:63:B8:F7:2F:FC:85:3A:16:D1:3B X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/83A8C51804CF11E9BA917C34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.152.180.0/24 125.77.128.0-125.77.177.255 Signature Algorithm: sha256WithRSAEncryption 60:12:91:2c:87:18:75:11:2a:55:b9:3d:a3:7e:2d:2b:a5:ae: bd:81:93:a7:10:54:45:13:47:c0:78:14:9e:5a:41:af:81:82: ba:28:4a:4e:5e:29:b0:6d:b4:d1:43:04:37:02:df:45:3e:7d: d8:4c:10:69:cb:31:75:b6:27:73:68:9b:ac:0f:64:f2:12:a6: 8c:a5:d8:8c:0e:e7:be:82:5e:c5:dd:dc:2a:4e:4f:02:66:07: a0:d2:12:b9:d1:73:8b:7f:30:ee:e2:26:fc:fb:59:44:03:ba: 00:b8:ee:72:db:37:be:21:b2:4f:aa:a8:97:1c:e7:d7:4e:75: d6:13:b8:64:cd:ed:7c:ef:7d:b7:6f:db:18:81:7d:b6:80:3f: 5e:3b:95:29:54:9b:8f:ff:e0:53:45:35:dc:45:93:97:42:b4: a6:92:c4:b7:53:a7:46:67:7a:b7:94:18:56:da:70:f6:1d:05: 21:09:35:6e:7e:98:70:4c:c1:4e:ec:d5:78:b6:4e:fd:79:a4: 6c:57:85:7c:7a:5b:ba:4b:21:ff:96:83:97:98:c0:03:b7:52: 23:e2:23:cf:48:42:38:52:18:1b:f0:19:6c:ec:e8:5a:69:e1: cd:5c:8b:0b:0f:c7:27:2b:a3:c8:ae:9f:12:46:05:bf:83:b7: aa:9d:7a:71 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICIPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjYwOTMwMTYzMDQ1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkMzkzNC1lNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vIhPiXpwkPQ7Xr033BJHffFtLUIgwLCTVU/LPACzyuhdjNdmvXc4X1fzlas M3DKi+5E6LRvE85v6TrDLNDiQRJDmS1b1OQvmZcMbvEO4yYEs0oOGo1TPcCp2ArN gaQGL8I2P7gRag13pKy+lFHdLDJyHLU8oDl6op3+RFfhV2Hqz0YWbChi6/Jz4T2Y Zcrh8O7DVhld5nuk70NsyZV8j5ybqPImW4I7Gji9HPiYpjlllDmQjp/uucnK2iw+ mZu3A018+d9zMj/M4IuWJAa3OE0856xP66RHND1QGQE0SQX3yemLTBKosy0JsmdQ la/sgZuWoAFzchSw9ZYqoCc4aQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKmrM8qA XKDmGrNjuPcv/IU6FtE7MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODNBOEM1MTgw NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAG5i0MAwDBAd9TYADBAF9TbAwDQYJKoZIhvcNAQELBQADggEBAGAS kSyHGHURKlW5PaN+LSulrr2Bk6cQVEUTR8B4FJ5aQa+BgrooSk5eKbBttNFDBDcC 30U+fdhMEGnLMXW2J3Nom6wPZPISpoyl2IwO576CXsXd3CpOTwJmB6DSErnRc4t/ MO7iJvz7WUQDugC47nLbN74hsk+qqJcc59dOddYTuGTN7Xzvfbdv2xiBfbaAP147 lSlUm4//4FNFNdxFk5dCtKaSxLdTp0ZnereUGFbacPYdBSEJNW5+mHBMwU7s1Xi2 Tv15pGxXhXx6W7pLIf+Wg5eYwAO3UiPiI89IQjhSGBvwGWzs6Fpp4c1ciwsPxycr o8iunxJGBb+Dt6qdenE= -----END CERTIFICATE-----Generated at Tue Oct 27 12:49:33 2026 by rpki-client