$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/06D203C2DC1E11F18E4326E71B66CEF9.roa File: 06D203C2DC1E11F18E4326E71B66CEF9.roa (raw, json) Hash identifier: RTjmHoRn57xMzeJcnkYGjIMtRZ1wXuVVNkKgYhS5kKg= Subject key identifier: 10:7C:DD:38:8F:5A:A1:AC:FB:8F:BD:FF:9E:79:AD:9F:D7:17:B9:F2 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0B1B Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/06D203C2DC1E11F18E4326E71B66CEF9.roa Signing time: Mon 09 Nov 2026 09:49:53 +0000 ROA not before: Mon 09 Nov 2026 09:49:53 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 9381 IP address blocks: 138.19.0.0/16 maxlen: 24 155.137.128.0/17 maxlen: 17 155.137.128.0/18 maxlen: 24 155.137.192.0/18 maxlen: 24 165.84.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 9 09:49:53 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6af19741-b379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:11:52:a1:c4:23:49:4a:7c:a9:91:c5:5d: 85:eb:c7:2a:f8:a8:dc:2b:ff:e2:a3:28:40:79:f7: 95:c7:a6:44:4c:b6:02:c5:c0:11:1d:cd:e0:30:27: 5a:90:34:84:61:1c:61:15:92:24:1f:16:fc:1a:ed: e5:c9:b5:12:7c:ee:33:23:5b:09:0b:32:a6:94:c3: 4a:91:ba:8c:9b:c9:37:53:d2:b5:8d:98:b6:f9:f1: 09:76:1d:21:bc:18:b6:7c:93:b6:f9:6b:3f:19:3c: 13:9e:a7:4a:5b:ce:22:a8:ec:7e:20:d4:02:09:4e: 1b:20:ad:c0:bb:41:1b:b3:df:ce:09:81:0f:b7:e9: 49:4e:02:11:01:d9:8b:26:85:c5:b8:cb:50:af:b5: 7a:ff:a2:fc:1b:06:51:23:b7:1a:63:59:83:39:52: 63:60:f4:53:78:07:66:d9:e3:11:d2:64:56:69:b6: a9:a2:83:39:64:fa:ba:73:28:46:ae:cc:90:cf:07: d8:6c:65:a8:50:f4:5b:19:fc:f2:d8:fd:7f:8b:53: 09:7f:bf:c4:35:b6:be:bc:5b:12:35:4c:3e:9b:f1: 95:72:ab:4d:94:96:8c:ab:fa:35:06:87:b8:a3:03: 49:e0:25:db:02:d4:29:c0:c3:a5:12:38:b2:19:4a: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:DD:38:8F:5A:A1:AC:FB:8F:BD:FF:9E:79:AD:9F:D7:17:B9:F2 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/06D203C2DC1E11F18E4326E71B66CEF9.roa sbgp-ipAddrBlock: critical IPv4: 138.19.0.0/16 155.137.128.0/17 165.84.128.0/18 Signature Algorithm: sha256WithRSAEncryption 89:2e:03:26:c8:5a:63:12:4c:5b:dd:10:91:e3:e8:61:23:fb: 48:13:6c:be:4b:87:e3:e4:68:31:00:62:09:8d:d1:55:09:de: 2f:56:30:b8:f1:10:73:35:92:2f:99:ca:cf:a8:25:09:bc:16: 81:21:1b:c1:6f:95:d8:46:27:22:b7:a4:7f:9e:29:15:30:bb: a9:b0:3c:d1:5e:0e:68:50:21:7a:01:bc:d9:f1:a7:5f:b0:9a: 92:54:55:d9:30:2b:4a:ed:e3:e3:e7:d3:f1:2e:b4:95:54:db: 3a:e0:ca:45:49:c1:a6:b3:e9:e1:47:e1:42:2d:87:8a:9a:d3: 4a:82:78:51:10:49:3a:a6:a9:36:d0:5a:8d:bc:d7:14:62:2e: 99:3e:06:2c:e9:66:55:09:1d:d2:bb:ec:9b:2b:4f:00:bc:20: af:f5:7e:e1:a1:70:6e:1d:af:87:22:14:ee:62:03:6f:f3:b1: 5a:d1:5c:ea:c9:d5:49:b7:d9:61:18:12:c8:5f:52:36:ab:04: c6:0c:32:df:28:f1:b6:96:8f:1e:d7:2e:26:90:c3:38:71:f1: 10:16:31:db:8f:55:70:8a:c6:a8:43:15:73:8b:09:59:aa:67: 13:95:f8:3b:1c:fb:7b:20:50:11:7d:04:e4:0d:3f:33:1f:be: 06:e0:31:e3 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYxMTA5MDk0OTUzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWYxOTc0MS1iMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBURUqHEI0lKfKmRxV2F68cq+KjcK//ioyhAefeVx6ZETLYCxcARHc3gMCda kDSEYRxhFZIkHxb8Gu3lybUSfO4zI1sJCzKmlMNKkbqMm8k3U9K1jZi2+fEJdh0h vBi2fJO2+Ws/GTwTnqdKW84iqOx+INQCCU4bIK3Au0Ebs9/OCYEPt+lJTgIRAdmL JoXFuMtQr7V6/6L8GwZRI7caY1mDOVJjYPRTeAdm2eMR0mRWabapooM5ZPq6cyhG rsyQzwfYbGWoUPRbGfzy2P1/i1MJf7/ENba+vFsSNUw+m/GVcqtNlJaMq/o1Boe4 owNJ4CXbAtQpwMOlEjiyGUr8mwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFBB83TiP WqGs+4+9/555rZ/XF7nyMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvM0IxQ0RGQkM4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvMDZEMjAzQzJE QzFFMTFGMThFNDMyNkU3MUI2NkNFRjkucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwMAihMDBAebiYADBAalVIAwDQYJKoZIhvcNAQELBQADggEBAIkuAybI WmMSTFvdEJHj6GEj+0gTbL5Lh+PkaDEAYgmN0VUJ3i9WMLjxEHM1ki+Zys+oJQm8 FoEhG8FvldhGJyK3pH+eKRUwu6mwPNFeDmhQIXoBvNnxp1+wmpJUVdkwK0rt4+Pn 0/EutJVU2zrgykVJwaaz6eFH4UIth4qa00qCeFEQSTqmqTbQWo281xRiLpk+Bizp ZlUJHdK77JsrTwC8IK/1fuGhcG4dr4ciFO5iA2/zsVrRXOrJ1Um32WEYEshfUjar BMYMMt8o8baWjx7XLiaQwzhx8RAWMduPVXCKxqhDFXOLCVmqZxOV+Dsc+3sgUBF9 BOQNPzMfvgbgMeM= -----END CERTIFICATE-----Generated at Sun Nov 15 10:21:30 2026 by rpki-client