$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa File: 7ABEE1BA81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: h8DMPc5Lsn0cJcVn51LzH4ctSw1vWekT5WPDhh2K7kc= Subject key identifier: A9:B8:87:B7:92:3F:1F:01:04:BF:6C:E2:56:19:3B:73:50:57:C4:DF Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 015A Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa Signing time: Fri 17 Jul 2026 13:21:55 +0000 ROA not before: Fri 17 Jul 2026 13:21:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 395886 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 200.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 17 13:21:55 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5a2c73-f2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:38:ce:c3:28:b1:05:c9:17:45:59:87:34: fa:86:24:d3:48:9d:b0:eb:cc:30:b1:17:a2:89:a2: 6b:47:6b:8d:70:05:41:cc:eb:cf:7b:b7:7c:8e:04: 4e:16:0c:5f:06:bf:18:19:de:b0:ec:fd:0d:7c:47: c2:61:ea:f0:03:35:4c:51:53:d2:02:d7:4c:a1:44: c2:8d:e1:0a:9e:7a:ac:fa:76:82:ff:8d:14:29:fb: 4a:b2:8d:ab:43:bd:51:2a:2f:b9:7e:53:50:7d:19: b2:e6:f9:29:17:fd:4d:20:37:48:3c:8c:5f:8d:e7: cf:34:93:18:24:a8:7b:70:6b:11:0f:e8:bb:01:84: 88:11:09:ca:7e:dc:1b:f4:fa:83:33:56:e3:c7:55: ef:96:38:51:d0:3d:93:cc:09:db:76:b9:86:01:88: 4b:95:f4:41:c3:db:9c:a7:66:3c:4d:a8:92:ad:55: 19:02:b1:0f:d0:19:6b:c6:f5:e0:0e:fa:4a:b5:4a: cc:ae:60:38:e4:86:92:04:09:73:48:2b:0d:d9:f8: 6a:b8:be:13:d4:87:12:b0:98:d9:9a:16:ba:fd:08: b8:7e:b1:67:f3:91:c3:12:ac:d0:3c:9f:32:83:31: df:3a:e8:d7:a8:a5:bb:86:d1:d4:31:49:d9:4a:ec: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:87:B7:92:3F:1F:01:04:BF:6C:E2:56:19:3B:73:50:57:C4:DF X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 200.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption b1:27:3c:5c:84:79:e3:2c:7e:1a:03:4c:d1:e0:98:00:aa:59: 69:f3:13:95:21:a3:61:e5:25:a1:10:30:33:b9:5e:13:08:58: d1:c3:90:b7:b2:fa:0e:0a:17:61:5f:7b:ec:9e:ab:aa:fd:cf: 12:9b:a7:38:1a:ea:54:ba:d5:e8:05:74:50:c3:d6:a7:95:8f: 60:8d:fe:50:58:5a:10:0e:c1:b4:e6:02:31:b3:42:6e:52:2f: 6a:83:ae:6d:04:b3:e7:30:4c:36:5a:b1:d7:96:dd:25:21:13: 67:f4:97:bc:dd:93:6a:39:d2:a3:9d:49:84:40:9c:f9:5d:bf: d5:c4:b7:d0:a4:aa:65:a8:4d:1e:10:3a:eb:50:a3:21:90:17: e0:75:96:78:f5:36:7e:8a:6b:04:8e:d6:dd:d6:d5:c2:d1:cd: 48:98:62:35:cc:f2:e5:eb:04:86:03:49:9e:ae:18:8f:85:ce: 36:99:1f:ca:63:77:6b:30:fb:48:32:f9:e4:8b:7e:86:51:4a: 35:d5:89:c4:f5:15:8f:1b:e5:c3:a3:48:5b:b1:ca:f5:82:92: 6e:70:91:dd:6e:49:e4:8e:6f:72:cd:1c:a3:7c:5b:c8:8e:d3: 4a:8b:c0:1c:1d:f5:1c:d8:60:c9:86:8f:c2:4c:f9:d6:41:b5: b1:0a:51:0c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzE3MTMyMTU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhMmM3My1mMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI44zsMosQXJF0VZhzT6hiTTSJ2w68wwsReiiaJrR2uNcAVBzOvPe7d8jgRO FgxfBr8YGd6w7P0NfEfCYerwAzVMUVPSAtdMoUTCjeEKnnqs+naC/40UKftKso2r Q71RKi+5flNQfRmy5vkpF/1NIDdIPIxfjefPNJMYJKh7cGsRD+i7AYSIEQnKftwb 9PqDM1bjx1XvljhR0D2TzAnbdrmGAYhLlfRBw9ucp2Y8TaiSrVUZArEP0BlrxvXg DvpKtUrMrmA45IaSBAlzSCsN2fhquL4T1IcSsJjZmha6/Qi4frFn85HDEqzQPJ8y gzHfOujXqKW7htHUMUnZSuyyFwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFKm4h7eS Px8BBL9s4lYZO3NQV8TfMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0FCRUUxQkE4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEyN7gMA0GCSqGSIb3DQEBCwUAA4IBAQCxJzxc hHnjLH4aA0zR4JgAqllp8xOVIaNh5SWhEDAzuV4TCFjRw5C3svoOChdhX3vsnquq /c8Sm6c4GupUutXoBXRQw9anlY9gjf5QWFoQDsG05gIxs0JuUi9qg65tBLPnMEw2 WrHXlt0lIRNn9Je83ZNqOdKjnUmEQJz5Xb/VxLfQpKplqE0eEDrrUKMhkBfgdZZ4 9TZ+imsEjtbd1tXC0c1ImGI1zPLl6wSGA0merhiPhc42mR/KY3drMPtIMvnki36G UUo11YnE9RWPG+XDo0hbscr1gpJucJHdbknkjm9yzRyjfFvIjtNKi8AcHfUc2GDJ ho/CTPnWQbWxClEM -----END CERTIFICATE-----Generated at Fri Jul 24 03:37:26 2026 by rpki-client