$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/38216BFE9A2711F1AC1341F35811F970.roa File: 38216BFE9A2711F1AC1341F35811F970.roa (raw, json) Hash identifier: ehZOhCm/N9mqNloQEM0g1Ww+m+pcdNZLTx27BwAa5LA= Subject key identifier: FB:88:42:04:A3:9E:0C:C8:95:97:4A:2D:77:12:E7:1A:B5:C4:34:A6 Certificate issuer: /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03 Certificate serial: 01AE Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/38216BFE9A2711F1AC1341F35811F970.roa Signing time: Fri 21 Aug 2026 04:56:46 +0000 ROA not before: Fri 21 Aug 2026 04:56:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135051 IP address blocks: 122.252.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03 Validity Not Before: Aug 21 04:56:46 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a87da8e-35c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:0b:10:a9:c8:f1:95:74:49:ef:24:46:e4: a3:71:a6:08:47:bb:9e:da:7c:b7:5a:b6:bd:39:6d: 42:fe:84:45:ed:b9:bb:55:d5:5e:67:f8:64:2f:26: 02:c3:54:09:92:c1:a7:c6:f6:e7:8b:1e:5d:04:92: 3f:40:b2:67:7f:1c:be:1b:96:64:49:48:84:1f:c4: 7b:45:ed:ca:5f:da:41:9e:54:bb:7a:e0:35:32:88: 49:04:ae:78:0b:4f:d0:31:17:25:f8:a5:b7:16:cd: 4b:d0:dd:15:4c:81:ad:23:fa:b2:c0:72:d2:18:8a: 7f:4b:8e:cc:03:c9:52:08:30:04:20:a8:26:1d:eb: ca:d6:b1:e3:ce:c7:7d:95:5c:f3:0e:19:f1:cd:fa: be:e2:d7:6e:0a:70:38:7e:2b:3e:6a:51:0f:8c:34: 70:20:56:d7:10:48:a4:bd:5c:b3:0b:46:96:19:13: b0:36:5c:8c:6b:c9:56:23:60:09:d7:b0:ac:94:df: 54:ba:44:83:14:bb:3e:df:2c:50:94:8a:29:d2:da: c6:ed:ee:bf:de:d2:e7:b8:ea:b9:77:63:eb:ea:e9: 3c:2f:cc:e6:ee:90:27:58:15:7d:b2:79:ca:02:c3: 5b:e6:3f:58:cd:1d:2a:cb:11:6d:f5:60:32:40:a7: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:88:42:04:A3:9E:0C:C8:95:97:4A:2D:77:12:E7:1A:B5:C4:34:A6 X509v3 Authority Key Identifier: keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/38216BFE9A2711F1AC1341F35811F970.roa sbgp-ipAddrBlock: critical IPv4: 122.252.144.0/21 Signature Algorithm: sha256WithRSAEncryption b3:da:0e:0b:1e:17:06:d6:b3:d2:ae:f0:ea:89:87:8d:72:6d: b8:a0:b1:ef:d2:4c:c3:ee:57:28:c1:e1:69:79:86:63:48:21: 5c:7c:72:37:3e:75:89:db:ff:17:06:3c:5e:27:07:99:84:41: c3:2c:b6:c8:41:b6:43:1c:5d:1f:0c:db:39:9a:c2:ef:ba:63: 0f:fe:d6:ed:5a:1e:65:bd:89:4c:96:06:c9:b7:bf:a9:75:72: 74:8a:0a:ff:64:b6:83:4b:84:ef:c2:0a:78:63:f7:3e:2d:24: 73:ba:b2:61:06:8c:70:6e:d3:6a:b6:38:a4:d8:3d:fb:7b:00: 83:b9:0f:9e:3b:08:de:6a:79:7a:9a:4d:64:85:97:8c:f9:25: 6b:7c:cd:5d:50:32:d4:cf:0e:23:43:32:44:e2:65:a9:6a:40: d6:7b:28:80:06:42:0c:6a:e7:68:b3:4a:9d:f2:d1:1b:d5:6e: 12:e2:55:be:63:9d:c9:a7:54:ca:ee:d9:ef:ab:15:95:a7:c2: 89:fd:78:e1:bf:03:29:bf:1f:d2:00:4e:d1:94:2f:76:76:c7: d5:0f:5b:1b:13:40:99:6f:d7:5e:58:91:e9:04:14:c9:f0:af: e7:4a:b7:94:cd:01:b2:b6:fc:a2:66:31:c8:35:1a:7d:09:2b: fb:3c:22:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU0NEIxMTAvBgNVBAUTKDgxMjI0M0U2QjVEMERFMTFBRTcwQzcyN0IzOUQxRjIx RTNBRUFDMDMwHhcNMjYwODIxMDQ1NjQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3ZGE4ZS0zNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn64LEKnI8ZV0Se8kRuSjcaYIR7ue2ny3Wra9OW1C/oRF7bm7VdVeZ/hkLyYC w1QJksGnxvbnix5dBJI/QLJnfxy+G5ZkSUiEH8R7Re3KX9pBnlS7euA1MohJBK54 C0/QMRcl+KW3Fs1L0N0VTIGtI/qywHLSGIp/S47MA8lSCDAEIKgmHevK1rHjzsd9 lVzzDhnxzfq+4tduCnA4fis+alEPjDRwIFbXEEikvVyzC0aWGROwNlyMa8lWI2AJ 17CslN9UukSDFLs+3yxQlIop0trG7e6/3tLnuOq5d2Pr6uk8L8zm7pAnWBV9snnK AsNb5j9YzR0qyxFt9WAyQKdBSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPuIQgSj ngzIlZdKLXcS5xq1xDSmMB8GA1UdIwQYMBaAFIEiQ+a10N4RrnDHJ7OdHyHjrqwD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTQ0Qi82MzUwNjk0QzRF MEMxMUVGOTIxODc0N0VDNEY5QUUwMi9nU0pENXJYUTNoR3VjTWNuczUwZkllT3Vy QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dTSkQ1clhRM2hHdWNNY25zNTBmSWVPdXJBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkU0NEIvNjM1MDY5NEM0RTBDMTFFRjkyMTg3NDdFQzRGOUFFMDIvMzgyMTZCRkU5 QTI3MTFGMUFDMTM0MUYzNTgxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDevyQMA0GCSqGSIb3DQEBCwUAA4IBAQCz2g4LHhcG1rPSrvDqiYeN cm24oLHv0kzD7lcoweFpeYZjSCFcfHI3PnWJ2/8XBjxeJweZhEHDLLbIQbZDHF0f DNs5msLvumMP/tbtWh5lvYlMlgbJt7+pdXJ0igr/ZLaDS4Tvwgp4Y/c+LSRzurJh BoxwbtNqtjik2D37ewCDuQ+eOwjeanl6mk1khZeM+SVrfM1dUDLUzw4jQzJE4mWp akDWeyiABkIMaudos0qd8tEb1W4S4lW+Y53Jp1TK7tnvqxWVp8KJ/XjhvwMpvx/S AE7RlC92dsfVD1sbE0CZb9deWJHpBBTJ8K/nSreUzQGytvyiZjHINRp9CSv7PCKN -----END CERTIFICATE-----Generated at Sat Oct 3 15:02:53 2026 by rpki-client