$ rpki-client -vvf rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/3F551C74696A11F19F0E96FC7847A888.roa File: 3F551C74696A11F19F0E96FC7847A888.roa (raw, json) Hash identifier: LOeF5oKzX3hsnldQfxTGyeCZaIlHTWbNNaHQcrweuJQ= Subject key identifier: C1:27:81:6A:FC:81:FD:6D:B7:2A:0D:60:EC:A1:1B:9F:FB:78:BD:A8 Certificate issuer: /CN=A9190E6C/serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46 Certificate serial: 02 Authority key identifier: 52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/3F551C74696A11F19F0E96FC7847A888.roa Signing time: Tue 16 Jun 2026 10:00:48 +0000 ROA not before: Tue 16 Jun 2026 10:00:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138529 IP address blocks: 162.4.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 17:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190E6C, serialNumber=52428ABA8E0AEC81F99D7CD89272A71074086C46 Validity Not Before: Jun 16 10:00:48 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a311ed0-a841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c7:cd:5c:3b:79:c1:87:1c:a8:da:fa:3d:f8: 83:df:cb:77:e6:67:de:31:7a:fd:2a:f4:97:4a:f2: 7b:32:91:76:78:ca:c1:ee:01:d6:af:b2:5c:c4:6b: 3e:b8:5c:b1:d6:1d:a1:9f:cb:14:db:c2:09:99:53: 81:4d:30:a8:16:82:f9:44:0e:dc:b0:49:bc:3d:77: 77:52:18:26:dc:64:9b:97:6a:fb:d9:ee:35:61:aa: 41:84:9b:14:5d:96:c8:75:ae:67:2d:3f:5c:13:1b: 35:de:ee:8f:9a:f2:38:ba:b5:ec:fa:0c:34:df:20: 22:68:91:9c:03:e5:ec:48:df:da:77:53:1b:09:37: 88:06:5f:23:ac:31:2e:34:10:c1:c2:8a:3c:52:69: f7:fd:b1:c7:10:26:57:a3:11:49:0e:ba:72:42:e2: 94:89:19:99:3e:d2:c2:7f:ea:81:20:6a:78:92:44: 4c:35:66:5e:8c:6e:f8:85:ea:00:4c:a8:6b:1d:d8: b9:c6:44:4d:d1:a6:49:4d:1f:a0:f9:06:3a:79:9c: bc:6e:55:d4:67:b9:f4:74:a7:35:ce:ea:76:d0:f2: 20:e1:f0:cc:a7:55:a9:f0:d7:d9:81:52:36:2d:30: 52:f1:2c:7d:b4:a0:8b:8d:6b:07:37:30:0c:40:05: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:27:81:6A:FC:81:FD:6D:B7:2A:0D:60:EC:A1:1B:9F:FB:78:BD:A8 X509v3 Authority Key Identifier: keyid:52:42:8A:BA:8E:0A:EC:81:F9:9D:7C:D8:92:72:A7:10:74:08:6C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/UkKKuo4K7IH5nXzYknKnEHQIbEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UkKKuo4K7IH5nXzYknKnEHQIbEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190E6C/8A0AAF7A696711F1A9E0AEE07847A888/3F551C74696A11F19F0E96FC7847A888.roa sbgp-ipAddrBlock: critical IPv4: 162.4.252.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:7a:8e:36:69:9a:12:52:1b:d9:54:d1:72:f6:6a:54:d2:f4: 35:cc:4e:a3:85:c6:72:5d:b4:f3:35:ab:4d:4d:83:0c:75:7a: ca:02:48:58:b5:52:b7:ae:1b:21:69:d8:41:3c:8b:68:77:1a: 82:90:48:d3:87:53:48:0f:f5:34:b3:8d:29:27:13:4f:57:c1: a2:d2:13:9b:f9:78:e2:2a:51:bd:1a:1b:d5:92:ae:7a:0f:b7: e5:10:76:c0:4f:ff:f3:06:32:f9:58:af:4a:39:86:b5:12:bf: 36:a2:7d:9d:d7:28:c8:be:b3:11:1a:a2:c4:98:9c:4e:46:b1: 5f:eb:7d:31:b5:01:b4:6c:e0:2a:6b:3c:29:84:fb:c3:5e:3a: e3:dc:73:bd:d4:e2:9a:d9:a0:95:b4:b6:28:65:46:8f:e8:85: 6c:2f:c6:06:72:a1:44:5e:da:d2:30:3b:85:74:a6:73:48:5d: 1b:5c:c1:14:4d:e5:23:ee:9d:59:d4:1b:91:b1:41:95:57:54: 16:5e:79:39:49:6c:5e:1f:97:51:4d:6d:08:69:3c:61:5d:bb: 4a:da:93:05:6d:ef:c7:a0:7b:8b:97:f9:43:2f:d3:2a:0d:c3: 3d:1a:5a:16:4f:e4:14:4c:ca:ca:4c:4d:15:0b:a3:43:f1:0c: 29:19:30:61 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MEU2QzExMC8GA1UEBRMoNTI0MjhBQkE4RTBBRUM4MUY5OUQ3Q0Q4OTI3MkE3MTA3 NDA4NkM0NjAeFw0yNjA2MTYxMDAwNDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMzExZWQwLWE4NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlx81cO3nBhxyo2vo9+IPfy3fmZ94xev0q9JdK8nsykXZ4ysHuAdavslzEaz64 XLHWHaGfyxTbwgmZU4FNMKgWgvlEDtywSbw9d3dSGCbcZJuXavvZ7jVhqkGEmxRd lsh1rmctP1wTGzXe7o+a8ji6tez6DDTfICJokZwD5exI39p3UxsJN4gGXyOsMS40 EMHCijxSaff9sccQJlejEUkOunJC4pSJGZk+0sJ/6oEganiSREw1Zl6MbviF6gBM qGsd2LnGRE3RpklNH6D5Bjp5nLxuVdRnufR0pzXO6nbQ8iDh8MynVanw19mBUjYt MFLxLH20oIuNawc3MAxABaUzAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUwSeBavyB /W23Kg1g7KEbn/t4vagwHwYDVR0jBBgwFoAUUkKKuo4K7IH5nXzYknKnEHQIbEYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwRTZDLzhBMEFBRjdBNjk2 NzExRjFBOUUwQUVFMDc4NDdBODg4L1VrS0t1bzRLN0lINW5YellrbktuRUhRSWJF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWtLS3VvNEs3SUg1blh6WWtuS25FSFFJYkVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEU2Qy84QTBBQUY3QTY5NjcxMUYxQTlFMEFFRTA3ODQ3QTg4OC8zRjU1MUM3NDY5 NkExMUYxOUYwRTk2RkM3ODQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACiBPwwDQYJKoZIhvcNAQELBQADggEBAC16jjZpmhJSG9lU0XL2alTS 9DXMTqOFxnJdtPM1q01Ngwx1esoCSFi1UreuGyFp2EE8i2h3GoKQSNOHU0gP9TSz jSknE09XwaLSE5v5eOIqUb0aG9WSrnoPt+UQdsBP//MGMvlYr0o5hrUSvzaifZ3X KMi+sxEaosSYnE5GsV/rfTG1AbRs4CprPCmE+8NeOuPcc73U4prZoJW0tihlRo/o hWwvxgZyoURe2tIwO4V0pnNIXRtcwRRN5SPunVnUG5GxQZVXVBZeeTlJbF4fl1FN bQhpPGFdu0rakwVt78ege4uX+UMv0yoNwz0aWhZP5BRMyspMTRULo0PxDCkZMGE= -----END CERTIFICATE-----Generated at Sat Jul 18 05:18:25 2026 by rpki-client