$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa File: 887BE0D0405D11ECA642D813C4F9AE02.roa (raw, json) Hash identifier: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k= Subject key identifier: F7:0C:42:6C:BA:02:11:91:19:8D:62:B7:AF:F2:44:70:83:AC:23:DA Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Certificate serial: 0525 Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa Signing time: Wed 04 Mar 2026 23:31:56 +0000 ROA not before: Wed 04 Mar 2026 23:31:56 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 55433 IP address blocks: 196.1.1.0/24 maxlen: 24 196.1.109.0/24 maxlen: 24 196.1.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08 Validity Not Before: Mar 4 23:31:56 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a8c0ec-0554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:92:d1:f6:77:c0:31:30:9d:36:60:7a:6f: 2e:6d:2b:02:fa:51:8a:e2:59:34:46:03:06:c6:da: d3:3d:41:c1:99:2d:cf:8d:12:c9:7f:5a:89:11:31: b8:62:57:d9:9b:f4:b4:56:23:c9:5c:c5:c3:4d:b8: da:75:62:a7:81:8b:17:ef:10:57:f1:31:67:9d:80: 8d:a6:c0:d5:9c:f8:f7:67:3d:33:b9:b6:c5:46:1d: 92:b2:9f:e4:f9:dd:ab:7e:f1:1c:22:4e:2e:57:57: fd:16:eb:92:4d:9b:76:69:1f:ac:77:47:79:d5:c0: 4d:4a:70:21:67:3e:23:1c:35:87:94:bb:73:8f:dd: f1:d7:5f:87:be:8d:8f:1b:1c:6a:94:4d:ad:ba:46: 1e:54:90:3d:25:e6:c9:38:e5:4c:d1:34:0f:dd:e2: 98:21:48:d0:f8:75:31:c5:eb:7f:bb:db:53:eb:34: 67:98:af:39:67:5d:26:e6:a5:df:f5:df:4f:85:49: bd:b8:b2:cd:b7:d8:49:2a:85:69:eb:b6:25:36:dd: 66:bb:16:3b:20:b3:bd:18:e2:69:81:ee:38:28:19: 04:8d:2b:6b:3d:50:c6:12:0f:ab:cd:28:57:42:f5: e8:3f:12:03:c5:14:ba:55:71:55:d1:a9:7c:8a:da: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:42:6C:BA:02:11:91:19:8D:62:B7:AF:F2:44:70:83:AC:23:DA X509v3 Authority Key Identifier: keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/887BE0D0405D11ECA642D813C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 196.1.1.0/24 196.1.109.0/24 196.1.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:54:d4:eb:18:42:81:48:7d:a2:ca:04:f6:5c:48:a3:ca:50: a1:2a:39:f8:f9:5f:37:73:dd:34:bb:cf:ea:05:49:0e:6a:9e: 17:78:28:1b:86:3e:96:22:f6:5e:aa:d0:a7:3d:1f:32:d1:91: 89:de:66:44:30:fe:c7:5c:74:d4:81:dd:cb:93:7d:7b:8d:fc: 59:b7:24:58:95:ec:c3:70:73:b6:ad:38:1b:f2:7e:51:d8:8e: 74:20:8f:b9:8f:54:77:65:33:9d:cb:19:04:7a:99:8f:0f:0c: a4:8f:e4:22:e3:93:4e:24:cb:8d:86:28:96:cf:22:03:b3:eb: 5a:08:e4:ff:cc:fd:58:7b:3e:73:d5:4d:51:6c:3d:6f:88:2c: 15:96:9f:56:fe:08:96:f8:33:ba:24:1e:13:9b:1a:b4:51:d0: ac:4d:81:e2:be:02:36:8d:a9:23:13:20:b1:85:4a:86:22:1f: 06:4d:4d:25:78:25:30:c5:30:9b:7a:aa:05:06:5d:4a:6d:36: 82:7e:a0:1f:eb:62:a6:c4:8a:85:8e:4c:e4:58:ed:d7:78:aa: 6d:b2:7c:68:12:be:fc:f0:f5:07:cc:8b:68:9c:df:cb:de:ac: 52:6d:00:bf:f0:53:81:d0:e4:04:be:b9:92:9c:ef:a5:29:c8: 92:65:41:51 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD RDg4MkRBMDgwHhcNMjYwMzA0MjMzMTU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4YzBlYy0wNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroCS0fZ3wDEwnTZgem8ubSsC+lGK4lk0RgMGxtrTPUHBmS3PjRLJf1qJETG4 YlfZm/S0ViPJXMXDTbjadWKngYsX7xBX8TFnnYCNpsDVnPj3Zz0zubbFRh2Ssp/k +d2rfvEcIk4uV1f9FuuSTZt2aR+sd0d51cBNSnAhZz4jHDWHlLtzj93x11+Hvo2P GxxqlE2tukYeVJA9JebJOOVM0TQP3eKYIUjQ+HUxxet/u9tT6zRnmK85Z10m5qXf 9d9PhUm9uLLNt9hJKoVp67YlNt1muxY7ILO9GOJpge44KBkEjStrPVDGEg+rzShX QvXoPxIDxRS6VXFV0al8itrr6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPcMQmy6 AhGRGY1it6/yRHCDrCPaMB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJDRTMvNUQ3ODk5RjQ0MDU5MTFFQ0EwQUZBQTREQzRGOUFFMDIvODg3QkUwRDA0 MDVEMTFFQ0E2NDJEODEzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAxAEBAwQAxAFtAwQAxAFxMA0GCSqGSIb3DQEBCwUAA4IBAQANVNTr GEKBSH2iygT2XEijylChKjn4+V83c900u8/qBUkOap4XeCgbhj6WIvZeqtCnPR8y 0ZGJ3mZEMP7HXHTUgd3Lk317jfxZtyRYlezDcHO2rTgb8n5R2I50II+5j1R3ZTOd yxkEepmPDwykj+Qi45NOJMuNhiiWzyIDs+taCOT/zP1Yez5z1U1RbD1viCwVlp9W /giW+DO6JB4Tmxq0UdCsTYHivgI2jakjEyCxhUqGIh8GTU0leCUwxTCbeqoFBl1K bTaCfqAf62KmxIqFjkzkWO3XeKptsnxoEr788PUHzItonN/L3qxSbQC/8FOB0OQE vrmSnO+lKciSZUFR -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:33 2026 by rpki-client