$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa File: 7BBEA23A81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: /S3reswQRe6QG2XFQIdmnPWz87DvWwN0Mt9l8y+jje4= Subject key identifier: 05:0B:A6:89:03:88:A1:09:4E:B8:56:E9:CF:D5:A0:04:57:04:5C:BE Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 01A0 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa Signing time: Wed 16 Sep 2026 18:08:26 +0000 ROA not before: Wed 16 Sep 2026 18:08:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 8796 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 187.126.64.0/20 maxlen: 24 200.97.32.0/20 maxlen: 24 200.217.96.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 201.15.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Sep 16 18:08:26 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6aaadb1a-5744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:fd:d4:60:83:ba:7c:8c:cf:f5:99:14:b9: d2:7d:50:ed:38:2b:58:30:c0:9f:f7:50:80:56:b1: 03:0c:0f:60:42:6b:54:d2:3c:36:d3:6a:49:48:83: 46:9e:94:ed:f9:f1:99:52:ff:90:80:e7:d9:73:bc: 9a:b1:ae:5d:0b:53:f6:e5:19:ae:eb:c5:83:bf:18: 6d:78:14:27:17:65:47:fd:95:70:f0:6c:f8:a4:91: bf:ff:4c:d0:2b:bd:c7:9d:f6:e2:a5:99:a9:f1:10: b8:11:61:82:42:6b:74:3c:c6:ae:bd:00:9f:eb:2d: 9e:2e:b1:79:2f:f0:39:d7:79:7f:6e:e5:ae:0f:74: d2:31:48:7c:c8:c4:e2:02:ff:46:47:57:ec:b8:c1: f7:b7:09:84:82:ab:ed:47:b5:f7:56:8c:53:4f:c8: 7d:13:97:68:56:58:4b:fd:d7:23:a1:fe:49:df:6e: 87:98:90:2b:58:d4:2e:fe:81:9b:e3:cf:09:88:82: 25:a3:04:57:1b:c0:78:96:eb:2f:ab:ad:3f:3e:89: b2:70:04:63:f2:a2:47:4c:af:2f:57:60:6d:b1:01: 5f:fb:0f:15:9c:b2:e7:7e:0e:24:84:38:57:5d:9c: 51:b7:bf:82:e4:97:cf:65:c1:90:0c:f5:67:11:af: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0B:A6:89:03:88:A1:09:4E:B8:56:E9:CF:D5:A0:04:57:04:5C:BE X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 187.126.64.0/20 200.97.32.0/20 200.217.96.0/20 200.222.224.0/20 201.15.160.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:80:35:ce:78:ba:fb:a5:d2:ec:60:a1:eb:99:3a:4a:13:eb: 03:3f:69:03:52:25:42:9b:92:c6:70:01:a9:dd:9b:31:05:bf: 1a:4f:5e:06:17:91:93:77:0e:f0:13:92:77:39:b3:d2:a5:b4: dc:8a:ae:fc:14:d5:42:2b:f3:d7:1d:d8:b0:08:28:3c:90:34: 1e:cb:02:b5:cc:7a:1e:3b:39:97:3b:10:13:6d:04:d3:f5:b5: 05:d6:c0:4b:54:1d:cd:6f:2a:cf:49:81:63:85:cc:6a:12:df: 48:a0:ca:02:83:bb:36:ac:4f:05:d2:29:ef:5f:c6:36:67:41: 68:28:f4:66:c1:5d:3b:0a:1f:b6:bf:ed:aa:51:4f:c8:a0:31: 33:8f:c5:17:c8:3a:ea:2d:7e:f3:35:53:37:e1:6c:4b:03:26: f9:78:4c:f5:2f:3a:da:23:51:5e:e2:7e:bd:6c:a4:fd:15:36: 5f:d5:0a:f8:f3:cf:ca:e1:c4:14:02:b7:bc:82:51:0a:d5:49: 70:4e:1f:7d:14:41:97:0a:1d:4f:d3:d7:84:fa:b8:97:b4:a3: ae:9a:61:eb:00:97:a4:a6:17:5b:d2:0a:9d:01:6c:fb:8d:d8: 79:9e:e1:b6:12:7c:2e:ec:3a:7b:de:c2:fc:69:9f:7d:de:61: 8a:24:15:5f -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwOTE2MTgwODI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZGIxYS01NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx/91GCDunyMz/WZFLnSfVDtOCtYMMCf91CAVrEDDA9gQmtU0jw202pJSING npTt+fGZUv+QgOfZc7yasa5dC1P25Rmu68WDvxhteBQnF2VH/ZVw8Gz4pJG//0zQ K73HnfbipZmp8RC4EWGCQmt0PMauvQCf6y2eLrF5L/A513l/buWuD3TSMUh8yMTi Av9GR1fsuMH3twmEgqvtR7X3VoxTT8h9E5doVlhL/dcjof5J326HmJArWNQu/oGb 488JiIIlowRXG8B4lusvq60/PomycARj8qJHTK8vV2BtsQFf+w8VnLLnfg4khDhX XZxRt7+C5JfPZcGQDPVnEa/64QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAULpokD iKEJTrhW6c/VoARXBFy+MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0JCRUEyM0E4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEu35AAwQEyGEgAwQEyNlgAwQEyN7gAwQEyQ+g MA0GCSqGSIb3DQEBCwUAA4IBAQB+gDXOeLr7pdLsYKHrmTpKE+sDP2kDUiVCm5LG cAGp3ZsxBb8aT14GF5GTdw7wE5J3ObPSpbTciq78FNVCK/PXHdiwCCg8kDQeywK1 zHoeOzmXOxATbQTT9bUF1sBLVB3NbyrPSYFjhcxqEt9IoMoCg7s2rE8F0invX8Y2 Z0FoKPRmwV07Ch+2v+2qUU/IoDEzj8UXyDrqLX7zNVM34WxLAyb5eEz1LzraI1Fe 4n69bKT9FTZf1Qr488/K4cQUAre8glEK1UlwTh99FEGXCh1P09eE+riXtKOummHr AJekphdb0gqdAWz7jdh5nuG2Enwu7Dp73sL8aZ993mGKJBVf -----END CERTIFICATE-----Generated at Thu Sep 24 11:56:39 2026 by rpki-client