$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa File: 488867FE1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: 2Sz68AS1B+QHPUANUppAbvYCET+6dMYfPmKWVXl24U0= Subject key identifier: 96:B4:34:54:33:B8:1E:BF:02:9F:3D:54:AE:3B:03:C8:40:79:EB:80 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3C14 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa Signing time: Mon 06 Jul 2026 15:12:34 +0000 ROA not before: Mon 06 Jul 2026 15:12:34 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 38326 IP address blocks: 210.86.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15380 (0x3c14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 6 15:12:34 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a4bc5e1-7cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:7d:5c:3c:78:a7:99:c0:7c:41:69:94:64: 6a:b8:5d:23:fc:47:7b:c9:2b:57:4e:46:14:db:37: 17:d7:06:a2:24:9d:13:8c:f5:27:33:a4:e2:2b:30: dd:16:8c:cf:27:b9:2b:b2:9b:a3:13:05:06:64:b5: 4b:ef:90:ad:8b:99:eb:dc:9b:28:63:64:58:d0:79: 47:02:7a:5a:9c:74:0e:e9:1f:d2:f0:be:fc:87:4c: 79:5f:b8:3d:cf:a8:98:c9:dc:7d:68:ca:4f:85:fb: cb:f3:82:a3:39:b1:78:7c:96:7e:2a:74:7d:91:eb: 68:e9:ad:21:50:b8:06:62:04:9e:03:f0:da:42:40: fa:80:2c:42:9e:c9:f6:bc:55:9f:9d:58:27:95:b8: ce:cb:23:93:36:db:a9:c9:04:1a:5d:1a:82:9e:a1: 22:78:1b:72:2c:8a:7d:7b:9e:c7:30:cd:63:6a:cc: eb:1e:29:af:18:fc:fb:23:f2:30:70:26:08:b6:ee: 30:c8:51:46:df:61:ee:38:7d:d2:88:f6:07:9d:d4: 3b:52:8a:a3:e4:41:d6:f4:e9:7f:4b:43:1e:4b:7d: 41:a0:1a:af:c8:4e:24:b7:73:89:8c:95:25:60:34: 35:c6:4a:78:5d:a1:04:ae:48:fc:f1:2a:4b:bb:be: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:34:54:33:B8:1E:BF:02:9F:3D:54:AE:3B:03:C8:40:79:EB:80 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/488867FE1E0111E9A590C837C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.86.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:d2:af:40:a8:32:9e:ec:f5:f8:b9:36:93:47:a3:ae:64:c4: a6:15:7f:73:0b:8c:1d:2b:9c:49:87:d5:7d:c0:89:80:08:ba: 5c:02:5e:fd:e1:1f:cb:0e:29:8b:cf:62:b8:c8:6c:50:a2:50: f4:29:24:4a:48:22:c8:84:2c:e0:af:cc:fb:b8:a2:56:81:0b: cf:03:12:cb:19:62:bc:39:63:8e:41:99:02:e9:93:8a:43:28: 76:ae:30:0c:25:2e:40:68:c2:ea:f5:13:6f:a8:11:b5:80:5e: 50:70:5b:d6:ad:6c:e6:e8:ee:20:46:c8:1e:d8:5f:9e:aa:7c: 92:24:6a:fc:66:90:f9:fb:a7:f8:1c:c1:56:c7:29:48:7f:38: d0:fe:37:3f:f6:fd:60:d4:07:89:92:ea:d9:ff:9b:21:83:e3: ab:f9:c7:8a:66:62:ef:14:d9:0b:a3:51:c0:8d:70:fd:3e:a2: 73:fc:a0:7f:c7:61:be:49:c3:f6:90:13:56:89:1b:62:aa:61: c8:5f:91:7c:bf:df:42:a8:1c:55:62:ae:0f:dc:c3:50:6c:4c: 13:46:15:0b:94:40:72:4e:14:50:1c:ba:ac:56:02:21:ac:c5: 03:00:55:f5:ae:6d:a5:3a:b5:5d:7e:2a:b8:66:a1:d5:e8:43: a2:57:4d:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICPBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjM0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiYzVlMS03Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjx9XDx4p5nAfEFplGRquF0j/Ed7yStXTkYU2zcX1waiJJ0TjPUnM6TiKzDd FozPJ7krspujEwUGZLVL75Cti5nr3JsoY2RY0HlHAnpanHQO6R/S8L78h0x5X7g9 z6iYydx9aMpPhfvL84KjObF4fJZ+KnR9keto6a0hULgGYgSeA/DaQkD6gCxCnsn2 vFWfnVgnlbjOyyOTNtupyQQaXRqCnqEieBtyLIp9e57HMM1jaszrHimvGPz7I/Iw cCYItu4wyFFG32HuOH3SiPYHndQ7Uoqj5EHW9Ol/S0MeS31BoBqvyE4kt3OJjJUl YDQ1xkp4XaEErkj88SpLu74DKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJa0NFQz uB6/Ap89VK47A8hAeeuAMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDg4ODY3RkUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0lbdMA0GCSqGSIb3DQEBCwUAA4IBAQAe0q9AqDKe7PX4uTaTR6Ou ZMSmFX9zC4wdK5xJh9V9wImACLpcAl794R/LDimLz2K4yGxQolD0KSRKSCLIhCzg r8z7uKJWgQvPAxLLGWK8OWOOQZkC6ZOKQyh2rjAMJS5AaMLq9RNvqBG1gF5QcFvW rWzm6O4gRsge2F+eqnySJGr8ZpD5+6f4HMFWxylIfzjQ/jc/9v1g1AeJkurZ/5sh g+Or+ceKZmLvFNkLo1HAjXD9PqJz/KB/x2G+ScP2kBNWiRtiqmHIX5F8v99CqBxV Yq4P3MNQbEwTRhULlEByThRQHLqsVgIhrMUDAFX1rm2lOrVdfiq4ZqHV6EOiV01c -----END CERTIFICATE-----Generated at Fri Jul 24 15:10:32 2026 by rpki-client