$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/88CC215E697911F18B9BC60E7E47A888.roa File: 88CC215E697911F18B9BC60E7E47A888.roa (raw, json) Hash identifier: ZJ5dzhsP3HtO0QNcM+fPHZydGHIu6gVwDmbbHaJoxLc= Subject key identifier: 5C:F1:06:B4:43:1A:CE:98:6A:65:50:7B:32:EE:22:C2:58:A9:52:56 Certificate issuer: /CN=A91B49D2/serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Certificate serial: 09 Authority key identifier: 84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/88CC215E697911F18B9BC60E7E47A888.roa Signing time: Tue 16 Jun 2026 11:50:13 +0000 ROA not before: Tue 16 Jun 2026 11:50:13 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133159 IP address blocks: 162.4.251.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49D2, serialNumber=84A8AA3A894B1136305DC79906FBA54334B53DE0 Validity Not Before: Jun 16 11:50:13 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a313875-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4a:cd:fa:e4:e4:4f:9e:c3:d5:e6:57:66:68: f8:8d:b7:09:1c:04:72:bf:6c:71:69:05:b8:ff:ba: e0:80:6a:a6:72:85:22:5b:7f:33:bd:27:48:d4:16: 15:4e:0d:3e:1f:cd:9a:c9:89:ec:8f:d1:62:26:27: 09:ac:15:84:c0:b3:de:3c:31:dc:01:cb:d2:46:4f: 95:37:3f:49:e0:69:8a:09:80:5c:97:06:f7:c7:80: 56:53:65:2c:17:18:3d:d1:97:46:62:07:56:c6:cb: 8d:6b:34:38:89:77:00:6c:6e:46:39:06:d3:0c:e2: 96:60:0d:79:93:71:a9:e9:32:9a:27:53:d0:24:88: 57:3a:d9:70:8f:31:3f:bb:b4:99:11:31:12:c1:28: 39:85:31:93:b0:5e:41:c4:0c:6c:60:78:7a:ce:7d: 22:83:3b:df:e7:d2:e0:76:6a:a6:ea:9b:7f:21:88: 1a:b7:5a:8e:ef:1a:d7:89:ce:6a:45:4f:57:12:b2: f2:2f:d1:8c:06:bd:2c:b3:5e:06:2a:a3:38:b7:fd: 4f:0d:f5:5c:85:8a:08:70:8f:df:7f:95:2a:cc:a9: 0b:b8:5d:2d:13:df:50:bf:dd:05:cc:10:f3:4f:c0: 4c:a3:47:1f:f9:79:b0:e6:f4:89:03:c6:2d:7a:b7: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F1:06:B4:43:1A:CE:98:6A:65:50:7B:32:EE:22:C2:58:A9:52:56 X509v3 Authority Key Identifier: keyid:84:A8:AA:3A:89:4B:11:36:30:5D:C7:99:06:FB:A5:43:34:B5:3D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/hKiqOolLETYwXceZBvulQzS1PeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hKiqOolLETYwXceZBvulQzS1PeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49D2/23FDA4AE697011F1AE32D1EB7B47A888/88CC215E697911F18B9BC60E7E47A888.roa sbgp-ipAddrBlock: critical IPv4: 162.4.251.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ac:4a:fd:76:5c:c1:0c:03:8a:7b:f9:89:19:f4:85:f7:c1: 33:86:1c:23:8a:32:08:87:e0:30:e5:24:e3:f3:1d:fc:c4:38: 91:9d:2f:0c:c2:f0:81:c6:e3:ed:14:50:fc:59:2e:d4:03:b3: 17:5d:a0:f5:8c:61:2f:f4:dd:02:de:ee:38:f3:d1:28:ae:53: df:b0:ef:4b:28:42:3c:65:bc:44:69:22:0c:c4:fd:fd:2f:50: e8:bd:6f:0d:d2:65:b1:0d:89:e4:6c:7f:80:9f:94:a4:d5:3d: 48:d9:94:62:6a:0c:e7:c8:98:94:31:9b:c4:db:53:e3:68:87: 5c:dd:5f:bd:f9:0a:c0:d9:94:46:3a:f3:ef:e5:22:d4:6f:bf: a4:55:d8:1b:5b:02:ca:6f:f0:07:13:06:2b:ad:18:28:57:76: 78:be:2a:34:5c:7d:5f:e4:c5:4e:38:96:60:f2:2e:d7:88:26: 52:4e:4e:bf:e5:59:d8:ce:9a:2e:da:69:de:e2:41:a1:ad:b9: 87:6f:7c:21:88:fc:f5:0a:bf:2f:a3:9e:0c:d0:d7:34:03:5c: f8:cd:92:7d:83:91:29:7b:ce:2a:66:60:df:d6:f9:f5:ef:6a: 84:20:c3:39:3b:83:5b:b4:1d:5c:00:e2:e9:ee:97:22:8e:6c: fe:8a:13:72 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDlEMjExMC8GA1UEBRMoODRBOEFBM0E4OTRCMTEzNjMwNURDNzk5MDZGQkE1NDMz NEI1M0RFMDAeFw0yNjA2MTYxMTUwMTNaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMzEzODc1LTUxMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmSs365ORPnsPV5ldmaPiNtwkcBHK/bHFpBbj/uuCAaqZyhSJbfzO9J0jUFhVO DT4fzZrJieyP0WImJwmsFYTAs948MdwBy9JGT5U3P0ngaYoJgFyXBvfHgFZTZSwX GD3Rl0ZiB1bGy41rNDiJdwBsbkY5BtMM4pZgDXmTcanpMponU9AkiFc62XCPMT+7 tJkRMRLBKDmFMZOwXkHEDGxgeHrOfSKDO9/n0uB2aqbqm38hiBq3Wo7vGteJzmpF T1cSsvIv0YwGvSyzXgYqozi3/U8N9VyFighwj99/lSrMqQu4XS0T31C/3QXMEPNP wEyjRx/5ebDm9IkDxi16t2evAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUXPEGtEMa zphqZVB7Mu4iwlipUlYwHwYDVR0jBBgwFoAUhKiqOolLETYwXceZBvulQzS1PeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0OUQyLzIzRkRBNEFFNjk3 MDExRjFBRTMyRDFFQjdCNDdBODg4L2hLaXFPb2xMRVRZd1hjZVpCdnVsUXpTMVBl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEtpcU9vbExFVFl3WGNlWkJ2dWxRelMxUGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlEMi8yM0ZEQTRBRTY5NzAxMUYxQUUzMkQxRUI3QjQ3QTg4OC84OENDMjE1RTY5 NzkxMUYxOEI5QkM2MEU3RTQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACiBPswDQYJKoZIhvcNAQELBQADggEBAEesSv12XMEMA4p7+YkZ9IX3 wTOGHCOKMgiH4DDlJOPzHfzEOJGdLwzC8IHG4+0UUPxZLtQDsxddoPWMYS/03QLe 7jjz0SiuU9+w70soQjxlvERpIgzE/f0vUOi9bw3SZbENieRsf4CflKTVPUjZlGJq DOfImJQxm8TbU+Noh1zdX735CsDZlEY68+/lItRvv6RV2BtbAspv8AcTBiutGChX dni+KjRcfV/kxU44lmDyLteIJlJOTr/lWdjOmi7aad7iQaGtuYdvfCGI/PUKvy+j ngzQ1zQDXPjNkn2DkSl7zipmYN/W+fXvaoQgwzk7g1u0HVwA4unulyKObP6KE3I= -----END CERTIFICATE-----Generated at Sat Jul 18 05:18:31 2026 by rpki-client