$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa File: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: lss52Vk6s5NKAwPIvixoGZCUFwCH6PpKUZ3T9cQ0amo= Subject key identifier: 8A:33:CB:78:15:B8:0F:8D:21:DB:95:43:98:38:78:9B:3F:0F:B1:70 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 35B2 Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa Signing time: Sun 04 Oct 2026 15:17:45 +0000 ROA not before: Sun 04 Oct 2026 15:17:45 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38241 IP address blocks: 202.137.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13746 (0x35b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Oct 4 15:17:45 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac26e19-2c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:f0:a3:93:5a:f5:97:95:d6:0d:55:a3:7d: 7b:30:10:bf:f1:1c:a1:1d:4c:63:b3:18:1d:c1:8f: 85:05:be:72:84:39:eb:10:15:db:74:7f:a8:37:0c: 48:1d:93:8f:c7:d2:cf:ad:f3:e7:92:d3:cb:60:3f: b0:4c:af:5e:6b:39:a5:e2:7c:26:ba:e2:b3:22:5b: c0:c8:29:a8:73:f5:ba:b4:bf:22:85:40:51:5d:5c: 86:7b:11:26:af:3d:92:4d:c0:af:c5:21:95:a0:16: 29:7a:a1:6d:b9:7d:af:21:31:a6:73:66:f5:80:96: a7:87:6d:38:08:e5:aa:db:3a:cf:1a:68:9f:ec:44: 24:a2:c8:cf:bb:83:0a:de:6e:c4:f4:53:1e:c5:b5: c8:bb:87:44:61:16:d6:c0:e8:81:0c:5b:98:d1:4b: a8:72:a4:e8:17:5b:0f:33:da:96:23:22:c3:65:61: 6a:c7:72:dd:03:1a:bd:99:69:43:8f:ab:6a:5e:be: bd:f1:0a:83:da:27:4f:0c:a0:2f:9d:a1:77:53:5c: 3d:3d:4e:f1:c6:1c:3d:82:cb:87:ac:95:f7:4c:02: 09:85:5f:14:24:8f:98:20:f4:98:b1:44:77:37:01: 8e:7a:f7:33:99:bb:f2:af:98:33:3a:82:f2:9b:ce: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:CB:78:15:B8:0F:8D:21:DB:95:43:98:38:78:9B:3F:0F:B1:70 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.137.248.0/22 Signature Algorithm: sha256WithRSAEncryption 06:f7:51:fd:06:32:14:32:bb:2b:78:26:71:b0:87:0c:12:fa: 79:06:bc:5e:9e:ed:2b:6f:47:a3:78:bb:c8:19:c1:9c:00:05: 70:f4:4a:e2:7c:bc:6f:c5:14:c4:af:f8:26:7c:d5:24:f5:bd: 88:0d:2d:d5:bf:96:6d:1c:d8:25:a3:6f:80:fb:2a:f8:9d:21: 60:5c:39:3a:ef:4f:61:1e:43:69:e3:c2:e6:bb:6c:07:04:86: 07:2e:d8:48:1d:8a:fc:63:6f:d9:96:9e:86:1d:67:65:3c:40: b8:79:8b:26:63:f1:b4:07:37:2e:18:7c:bf:3b:cb:8e:ec:bf: 1c:c2:27:e3:02:1a:e2:d5:a5:a6:8d:76:1b:4a:d7:ce:8d:bb: b8:fc:02:5d:d5:a0:95:9d:cc:35:c6:59:45:3f:c2:29:6b:42: e8:0a:1d:03:b0:c2:c3:4f:b8:b1:ea:05:15:b8:05:ae:6f:38: 42:90:27:d6:89:9a:15:1c:41:bc:47:ca:18:1e:ba:30:b7:7c: bc:f6:37:3c:6e:dc:49:31:23:53:bd:45:04:ff:56:c2:a7:1d: 4d:3f:db:b1:54:e0:b8:23:3d:79:a9:c7:90:9d:82:32:55:9f: f8:d2:ea:55:60:3f:c0:9a:eb:39:89:a1:1f:19:b5:ef:24:e9: 19:a8:0d:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjYxMDA0MTUxNzQ1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyNmUxOS0yYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArezwo5Na9ZeV1g1Vo317MBC/8RyhHUxjsxgdwY+FBb5yhDnrEBXbdH+oNwxI HZOPx9LPrfPnktPLYD+wTK9eazml4nwmuuKzIlvAyCmoc/W6tL8ihUBRXVyGexEm rz2STcCvxSGVoBYpeqFtuX2vITGmc2b1gJanh204COWq2zrPGmif7EQkosjPu4MK 3m7E9FMexbXIu4dEYRbWwOiBDFuY0UuocqToF1sPM9qWIyLDZWFqx3LdAxq9mWlD j6tqXr698QqD2idPDKAvnaF3U1w9PU7xxhw9gsuHrJX3TAIJhV8UJI+YIPSYsUR3 NwGOevczmbvyr5gzOoLym87y/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIozy3gV uA+NIduVQ5g4eJs/D7FwMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1ODEvQkI4RkRGRkUxRDkzMTFFMkE5NjM4QUY3MDhCMDJDRDIvN0EzOEQ2Qjg1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyon4MA0GCSqGSIb3DQEBCwUAA4IBAQAG91H9BjIUMrsreCZxsIcM Evp5Brxenu0rb0ejeLvIGcGcAAVw9ErifLxvxRTEr/gmfNUk9b2IDS3Vv5ZtHNgl o2+A+yr4nSFgXDk6709hHkNp48Lmu2wHBIYHLthIHYr8Y2/Zlp6GHWdlPEC4eYsm Y/G0BzcuGHy/O8uO7L8cwifjAhri1aWmjXYbStfOjbu4/AJd1aCVncw1xllFP8Ip a0LoCh0DsMLDT7ix6gUVuAWubzhCkCfWiZoVHEG8R8oYHrowt3y89jc8btxJMSNT vUUE/1bCpx1NP9uxVOC4Iz15qceQnYIyVZ/40upVYD/Amus5iaEfGbXvJOkZqA1o -----END CERTIFICATE-----Generated at Thu Oct 8 12:33:36 2026 by rpki-client