$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa File: 0CDEC76081E111F185BF86D772A30FBC.roa (raw, json) Hash identifier: b8lXEIEcdAb1VrCtKBkF16IsS0D2BpJAoeVZKrPCbYM= Subject key identifier: CA:FB:57:6E:B1:6B:2B:F5:0A:F3:ED:A4:F9:F4:96:18:ED:5F:21:21 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 014F Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa Signing time: Fri 17 Jul 2026 13:11:41 +0000 ROA not before: Fri 17 Jul 2026 13:11:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 40115 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.0.0/20 maxlen: 24 177.4.32.0/20 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.5.64.0/20 maxlen: 24 177.5.112.0/20 maxlen: 24 177.5.176.0/20 maxlen: 24 177.6.176.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 179.236.96.0/21 maxlen: 24 179.236.104.0/21 maxlen: 24 191.223.32.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 17 13:11:41 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5a2a0d-baa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:42:22:92:75:bd:e8:ea:39:e2:87:57:55: 8f:64:bf:41:8b:62:69:8f:6b:19:f3:bd:88:b8:8e: 49:ef:a1:a9:73:9a:6c:df:39:75:78:39:58:3a:03: b3:fd:f6:83:e7:31:0b:ba:72:05:41:b2:db:d4:ca: ba:cb:3c:6e:e8:cf:ec:71:10:90:8b:e0:7d:9d:27: 10:2a:85:92:6b:4e:b7:cc:90:e6:a0:83:e9:d2:f1: 24:86:30:b7:ad:7d:4a:c2:d9:32:a4:12:7b:77:dd: 74:fe:53:17:f0:60:97:1a:e4:c1:28:85:f4:f5:bf: dd:14:d8:20:e8:6b:98:1b:aa:03:45:00:bf:b1:25: 8c:e0:ef:3b:15:f2:ad:86:ca:6c:57:4b:52:f0:bd: 4e:f8:e9:1d:22:49:ef:24:d1:98:46:44:e4:dc:5b: 42:3e:ea:09:ef:e0:be:d3:97:96:55:06:8f:94:f9: 88:6e:72:4e:77:fe:a3:f3:71:de:9c:8d:65:29:30: 11:6a:ae:89:7e:44:96:06:67:d9:0f:2d:7c:e5:72: e9:5c:9d:95:63:74:9d:98:ae:f8:15:2d:a0:e8:45: a7:ef:3d:0f:dc:97:43:1d:fe:2d:7e:fa:49:85:8b: 26:d9:40:83:78:2d:34:bb:64:f0:28:b2:19:52:3d: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FB:57:6E:B1:6B:2B:F5:0A:F3:ED:A4:F9:F4:96:18:ED:5F:21:21 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.0.0/20 177.4.32.0/20 177.4.80.0/20 177.5.48.0-177.5.79.255 177.5.112.0/20 177.5.176.0/20 177.6.176.0/20 177.7.128.0/20 177.201.224.0/20 179.236.96.0/20 191.223.32.0/20 200.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption 49:08:31:e3:98:b5:c6:56:0e:61:33:90:91:74:d1:ff:e2:29: 18:a0:fe:fb:a4:4f:0d:a5:37:2f:79:26:d8:3e:73:a7:b4:28: 02:ee:2d:8b:b0:5a:3c:09:b1:16:c4:5d:17:24:95:b4:22:c5: b2:a6:95:ae:73:cb:02:3d:95:05:29:78:f2:25:da:e1:7d:2e: 21:59:c3:75:24:16:3a:57:32:4c:90:27:fa:26:63:33:8d:b5: 81:6b:3c:77:b6:d7:7d:eb:ec:b7:13:2c:2d:99:24:00:0e:fa: 7f:d7:2c:f2:8b:e6:a2:b3:07:0b:6b:4d:7c:2c:06:88:61:b8: b7:73:7f:32:b8:f3:9a:47:6f:0e:9d:f9:72:89:d2:64:9d:4d: 2a:3d:01:d9:01:f5:1d:53:9c:37:f4:0c:fd:1d:4d:cd:6a:c6: 3b:ec:50:9c:98:9d:5a:e8:f1:01:52:53:46:52:06:d5:5c:63: ce:a7:44:ea:97:b0:78:b7:a4:20:a2:a0:d8:dd:2d:f7:cf:8a: c4:c7:fc:7b:77:65:bc:ae:6b:b5:ff:e8:6d:7b:d1:35:3c:96: f9:7a:bb:35:b7:62:eb:80:2a:c4:f0:45:55:c5:61:1f:95:37: c5:a1:d4:6c:b1:a4:b9:a7:4d:0d:e5:8d:09:c5:ea:f3:57:31: b0:4b:b6:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzE3MTMxMTQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhMmEwZC1iYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxFCIpJ1vejqOeKHV1WPZL9Bi2Jpj2sZ872IuI5J76Gpc5ps3zl1eDlYOgOz /faD5zELunIFQbLb1Mq6yzxu6M/scRCQi+B9nScQKoWSa063zJDmoIPp0vEkhjC3 rX1KwtkypBJ7d910/lMX8GCXGuTBKIX09b/dFNgg6GuYG6oDRQC/sSWM4O87FfKt hspsV0tS8L1O+OkdIknvJNGYRkTk3FtCPuoJ7+C+05eWVQaPlPmIbnJOd/6j83He nI1lKTARaq6JfkSWBmfZDy185XLpXJ2VY3SdmK74FS2g6EWn7z0P3JdDHf4tfvpJ hYsm2UCDeC00u2TwKLIZUj3oTwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFMr7V26x ayv1CvPtpPn0lhjtXyEhMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvMENERUM3NjA4 MUUxMTFGMTg1QkY4NkQ3NzJBMzBGQkMucm9hMIGBBggrBgEFBQcBBwEB/wRyMHAw bgQCAAEwaAMEBLECEAMEBLECsAMEBLEDIAMEBLEDUAMEBLEEAAMEBLEEIAMEBLEE UDAMAwQEsQUwAwQEsQVAAwQEsQVwAwQEsQWwAwQEsQawAwQEsQeAAwQEscngAwQE s+xgAwQEv98gAwQEyN7gMA0GCSqGSIb3DQEBCwUAA4IBAQBJCDHjmLXGVg5hM5CR dNH/4ikYoP77pE8NpTcveSbYPnOntCgC7i2LsFo8CbEWxF0XJJW0IsWyppWuc8sC PZUFKXjyJdrhfS4hWcN1JBY6VzJMkCf6JmMzjbWBazx3ttd96+y3EywtmSQADvp/ 1yzyi+aiswcLa018LAaIYbi3c38yuPOaR28OnflyidJknU0qPQHZAfUdU5w39Az9 HU3NasY77FCcmJ1a6PEBUlNGUgbVXGPOp0Tql7B4t6QgoqDY3S33z4rEx/x7d2W8 rmu1/+hte9E1PJb5ers1t2LrgCrE8EVVxWEflTfFodRssaS5p00N5Y0JxerzVzGw S7Yx -----END CERTIFICATE-----Generated at Thu Jul 23 22:31:07 2026 by rpki-client