$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa File: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (raw, json) Hash identifier: J+CMbNZrME0nCprHry/q7z2CnJlQDl5Z2CihIzoUMZU= Subject key identifier: 52:46:C9:85:05:F5:82:E3:2A:D3:22:91:1F:E3:1F:68:C6:7B:86:1F Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0E22 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa Signing time: Wed 30 Sep 2026 18:35:27 +0000 ROA not before: Wed 30 Sep 2026 18:35:27 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 137531 IP address blocks: 59.152.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3618 (0xe22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Sep 30 18:35:27 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd566f-efae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:62:10:03:16:3a:3f:af:1e:6b:f7:39:34:57: f1:8b:ad:f3:fc:f0:78:63:51:7f:25:10:53:5b:53: 88:92:2f:fa:b1:01:98:8a:a3:46:8a:58:9c:40:c2: af:0f:3f:81:05:d8:8f:e7:31:33:12:4c:4a:d7:f2: 5c:83:05:30:da:f9:25:32:01:75:86:67:40:89:b8: 90:26:b4:c6:6e:be:98:b2:57:28:1c:b7:b8:5d:e7: 76:33:c7:c9:a7:b7:e8:aa:56:48:06:43:e7:31:4d: 16:da:47:68:81:03:89:61:73:5a:68:85:ca:7f:50: fc:12:f7:2d:29:c4:e3:b9:38:67:25:29:f8:2b:39: 48:a3:53:0f:c1:ab:de:3e:68:f4:13:70:f3:86:1f: bc:08:fc:f0:a0:de:c4:cb:a6:79:8a:4a:60:25:f5: 60:3f:ea:0a:3b:95:2a:3b:0c:93:cd:fa:dc:0d:8e: 41:6c:59:af:ba:4f:61:1d:5c:97:9f:59:7b:39:71: 86:94:43:bb:0b:8f:a6:d8:14:cd:18:72:b9:56:27: d0:4c:58:14:40:65:b0:cc:40:42:b6:22:35:88:ec: c3:e1:02:f2:f7:3b:74:a2:72:e6:41:58:cb:32:9f: 45:16:05:fa:e4:b7:89:f2:d5:56:a1:91:5c:19:20: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:C9:85:05:F5:82:E3:2A:D3:22:91:1F:E3:1F:68:C6:7B:86:1F X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.108.0/24 Signature Algorithm: sha256WithRSAEncryption 12:cd:db:35:31:79:4d:55:0f:0f:3c:d6:0f:6d:15:49:a8:06: 3d:4a:64:95:d8:ca:2d:2d:51:b5:73:df:ec:3f:d5:57:7e:74: 0b:cc:dc:cd:91:b6:c2:e9:e3:f8:23:c4:ef:67:10:4a:fa:43: a9:14:57:9d:dd:ee:ef:d1:e2:46:06:ee:0f:1f:75:31:89:38: f3:3b:fb:c1:c7:27:74:4c:c1:a2:9c:1f:49:56:8d:6c:67:92: bc:93:66:f3:a1:3f:56:7e:e7:d5:47:3f:78:cc:ee:5a:34:69: 26:cd:12:fb:c9:ad:27:40:9a:ed:ab:6e:4b:1f:48:95:45:1f: e1:b8:6e:3a:35:ed:96:6f:a1:4e:f2:c3:0c:f9:3a:79:2b:46: 23:74:d5:fa:c3:3d:4d:c3:2b:dd:84:0f:38:2f:7e:c5:e0:d8: 4b:2f:b8:a1:23:50:fb:74:c0:25:0a:fb:09:e0:f4:d0:08:65: 77:84:7c:39:cb:cd:51:63:31:f2:08:cc:8c:fa:ed:d1:c4:88: 7a:04:0d:e9:79:90:2b:d5:ed:a4:fe:7c:68:e2:a3:e3:5c:c2: 21:f3:51:5f:fa:f0:7c:b7:78:2d:6c:03:b7:67:2d:f0:87:e5: 41:98:40:a4:a2:43:cb:b9:06:f9:75:8e:df:16:46:68:9c:15: 74:39:ae:e3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwOTMwMTgzNTI3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNTY2Zi1lZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhGIQAxY6P68ea/c5NFfxi63z/PB4Y1F/JRBTW1OIki/6sQGYiqNGilicQMKv Dz+BBdiP5zEzEkxK1/JcgwUw2vklMgF1hmdAibiQJrTGbr6YslcoHLe4Xed2M8fJ p7foqlZIBkPnMU0W2kdogQOJYXNaaIXKf1D8EvctKcTjuThnJSn4KzlIo1MPwave Pmj0E3Dzhh+8CPzwoN7Ey6Z5ikpgJfVgP+oKO5UqOwyTzfrcDY5BbFmvuk9hHVyX n1l7OXGGlEO7C4+m2BTNGHK5VifQTFgUQGWwzEBCtiI1iOzD4QLy9zt0onLmQVjL Mp9FFgX65LeJ8tVWoZFcGSBHIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFJGyYUF 9YLjKtMikR/jH2jGe4YfMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvM0JDNEM1NzY0 MjZEMTFFRkFEOUU3RDEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAO5hsMA0GCSqGSIb3DQEBCwUAA4IBAQASzds1MXlNVQ8PPNYPbRVJ qAY9SmSV2MotLVG1c9/sP9VXfnQLzNzNkbbC6eP4I8TvZxBK+kOpFFed3e7v0eJG Bu4PH3UxiTjzO/vBxyd0TMGinB9JVo1sZ5K8k2bzoT9WfufVRz94zO5aNGkmzRL7 ya0nQJrtq25LH0iVRR/huG46Ne2Wb6FO8sMM+Tp5K0YjdNX6wz1NwyvdhA84L37F 4NhLL7ihI1D7dMAlCvsJ4PTQCGV3hHw5y81RYzHyCMyM+u3RxIh6BA3peZAr1e2k /nxo4qPjXMIh81Ff+vB8t3gtbAO3Zy3wh+VBmECkokPLuQb5dY7fFkZonBV0Oa7j -----END CERTIFICATE-----Generated at Wed Oct 28 16:33:46 2026 by rpki-client