$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/60D65D4E85A911F18503AAE15BA30FBC.roa File: 60D65D4E85A911F18503AAE15BA30FBC.roa (raw, json) Hash identifier: knaW+lZw0fbnWRCsePO7EIeENsLvn4xCIFMtjXiYkn0= Subject key identifier: 78:81:E8:4D:A0:7F:C4:E0:26:13:B2:D7:E9:64:82:13:9A:1F:5D:64 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 0167 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/60D65D4E85A911F18503AAE15BA30FBC.roa Signing time: Wed 22 Jul 2026 08:44:51 +0000 ROA not before: Wed 22 Jul 2026 08:44:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140224 IP address blocks: 177.4.0.0/20 maxlen: 24 177.4.32.0/20 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.64.0/20 maxlen: 24 177.5.112.0/20 maxlen: 24 177.5.176.0/20 maxlen: 24 177.6.176.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 179.236.96.0/21 maxlen: 24 179.236.104.0/21 maxlen: 24 191.223.32.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 22 08:44:51 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a608303-e190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:d5:21:2e:a1:cf:f8:5b:92:f4:ef:7a:cd: 28:01:32:6f:4a:09:a1:20:f3:d0:d9:ed:7b:f7:56: 4e:2f:af:53:88:68:7e:ec:10:35:f8:58:ba:ab:15: 4e:69:56:f1:8f:12:cc:0f:72:50:de:1a:80:8e:b8: 28:d5:b3:20:84:dc:59:a7:c2:c3:67:e1:c4:a9:4c: e1:bc:8f:ec:2c:27:ca:d1:d0:38:fb:1b:78:c0:27: 83:87:c1:a5:71:04:2f:be:8e:9b:66:4c:15:37:89: d2:63:16:69:5b:02:e8:57:10:a5:2c:fc:ef:02:07: 47:23:8c:29:98:0b:dc:c8:91:6a:01:33:48:4e:c5: a3:2e:a8:9a:48:8e:f3:07:c7:93:0d:6b:63:02:f7: 1e:55:c7:88:c4:d1:20:0a:7e:25:20:54:bc:36:79: 57:20:af:3b:86:90:7a:c3:45:62:be:e5:c8:b8:72: bb:70:5d:cb:5b:25:62:ff:88:c1:21:cf:8d:61:b8: 85:10:e3:df:5d:c0:45:21:e3:34:db:f9:cb:33:f7: f7:f5:f7:20:a1:3c:26:e7:fc:17:a1:bb:db:6e:61: ae:f4:91:58:bb:4a:c7:9b:ff:f5:04:7c:f6:77:07: 74:fb:be:71:90:e0:08:40:97:13:16:a9:4f:46:d1: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:81:E8:4D:A0:7F:C4:E0:26:13:B2:D7:E9:64:82:13:9A:1F:5D:64 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/60D65D4E85A911F18503AAE15BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.4.0.0/20 177.4.32.0/20 177.4.80.0/20 177.5.64.0/20 177.5.112.0/20 177.5.176.0/20 177.6.176.0/20 177.201.224.0/20 179.236.96.0/20 191.223.32.0/20 200.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption 38:5b:4f:40:e6:4f:a5:a2:18:e3:af:85:cb:62:2a:e4:93:19: 82:50:01:e2:34:49:0b:4c:a5:e8:8c:c0:d1:17:b5:80:5b:b7: 43:49:dd:76:30:4a:23:33:7d:d2:15:a2:fb:28:5b:f7:56:90: b8:5c:59:47:72:09:59:51:98:89:f2:f7:02:9e:1c:03:e4:95: 3d:6b:f2:dc:bf:7c:fc:9d:e4:5e:23:e1:cd:86:21:48:83:b4: fe:6f:03:c1:1a:89:9f:39:e5:ba:32:b2:79:aa:0d:fe:ca:88: 6a:11:4f:ec:e7:12:d2:43:b2:23:63:c9:f5:04:f6:a4:75:c5: 5b:1d:a8:6e:5b:3f:62:ef:09:52:8c:dc:e1:1d:3e:3a:1b:43: a1:11:39:4d:06:f0:90:c9:c0:93:66:6c:56:bd:f8:c6:92:ca: db:13:c9:0b:c3:9e:dc:df:97:84:ca:05:32:ce:1f:97:43:bc: 27:25:4b:2b:bb:10:85:36:78:ee:95:2d:f8:f1:78:3f:e9:83: 23:b2:07:2e:d8:d1:a2:18:4d:7e:e9:33:89:bf:67:af:c9:9b: 51:5e:17:ed:2f:15:61:a7:c3:19:fb:0f:a0:42:91:e6:27:1f: 9d:bc:d1:ec:e2:4f:fb:32:f1:d7:75:56:42:a9:c0:65:0b:da: 9f:30:e7:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzIyMDg0NDUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYwODMwMy1lMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMXVIS6hz/hbkvTves0oATJvSgmhIPPQ2e1791ZOL69TiGh+7BA1+Fi6qxVO aVbxjxLMD3JQ3hqAjrgo1bMghNxZp8LDZ+HEqUzhvI/sLCfK0dA4+xt4wCeDh8Gl cQQvvo6bZkwVN4nSYxZpWwLoVxClLPzvAgdHI4wpmAvcyJFqATNITsWjLqiaSI7z B8eTDWtjAvceVceIxNEgCn4lIFS8NnlXIK87hpB6w0VivuXIuHK7cF3LWyVi/4jB Ic+NYbiFEOPfXcBFIeM02/nLM/f39fcgoTwm5/wXobvbbmGu9JFYu0rHm//1BHz2 dwd0+75xkOAIQJcTFqlPRtFmLQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFHiB6E2g f8TgJhOy1+lkghOaH11kMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvNjBENjVENEU4 NUE5MTFGMTg1MDNBQUUxNUJBMzBGQkMucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQEsQQAAwQEsQQgAwQEsQRQAwQEsQVAAwQEsQVwAwQEsQWwAwQEsQaw AwQEscngAwQEs+xgAwQEv98gAwQEyN7gMA0GCSqGSIb3DQEBCwUAA4IBAQA4W09A 5k+lohjjr4XLYirkkxmCUAHiNEkLTKXojMDRF7WAW7dDSd12MEojM33SFaL7KFv3 VpC4XFlHcglZUZiJ8vcCnhwD5JU9a/Lcv3z8neReI+HNhiFIg7T+bwPBGomfOeW6 MrJ5qg3+yohqEU/s5xLSQ7IjY8n1BPakdcVbHahuWz9i7wlSjNzhHT46G0OhETlN BvCQycCTZmxWvfjGksrbE8kLw57c35eEygUyzh+XQ7wnJUsruxCFNnjulS348Xg/ 6YMjsgcu2NGiGE1+6TOJv2evyZtRXhftLxVhp8MZ+w+gQpHmJx+dvNHs4k/7MvHX dVZCqcBlC9qfMOdD -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:40 2026 by rpki-client