$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/CC9D872A468D11F0A82C5E5EC4F9AE02.roa File: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (raw, json) Hash identifier: vIzjykPQ1LonF8j+M1UP/1/5O9eRnrbkzxN67k8ibko= Subject key identifier: 4D:D4:68:44:67:35:B6:C1:F5:50:1E:35:83:93:7C:05:36:8C:2E:05 Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: D4 Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/CC9D872A468D11F0A82C5E5EC4F9AE02.roa Signing time: Tue 21 Jul 2026 08:34:32 +0000 ROA not before: Tue 21 Jul 2026 08:34:32 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 151660 IP address blocks: 165.99.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Jul 21 08:34:32 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a5f2f18-4542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:f6:c1:88:23:80:ba:8f:5c:2c:ba:02:b9: 8e:a4:6f:71:a4:17:48:dc:6a:71:67:e9:08:6a:19: c7:6b:9f:48:b4:59:76:67:e6:b7:ab:46:63:c9:cc: 9a:0d:08:15:22:4f:71:97:a5:6c:ba:19:0c:9d:c9: 58:92:c3:58:06:11:af:41:d7:01:8c:c9:a5:0a:ce: cf:78:bb:06:76:c9:15:2e:7c:b8:ec:5a:2a:7c:c0: 35:c5:16:44:6b:c2:32:87:c9:a1:23:36:fe:b8:c4: 17:b8:ed:4c:d2:25:0c:51:b6:04:5f:21:72:0e:c4: 69:83:be:b4:f4:a3:3a:3b:64:11:e4:23:f7:e5:24: 2a:ae:19:c2:21:8d:75:21:49:3b:63:06:af:eb:3b: 84:7a:1e:77:91:0d:bd:9b:16:15:f2:49:7f:52:e1: 5b:88:fc:00:15:16:35:a6:15:e9:aa:90:bd:15:12: 2f:61:5b:99:c2:1f:79:72:af:ea:50:66:04:82:8e: 50:51:a0:ee:24:2b:53:c5:ae:67:7d:5e:74:75:7b: c9:52:4c:e8:ee:0a:36:b2:93:97:5d:17:24:35:85: 42:e5:e9:df:c4:5b:88:d5:a2:b3:36:3e:70:7a:dd: 26:49:44:90:58:16:09:e4:8e:25:a6:f9:c0:00:98: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D4:68:44:67:35:B6:C1:F5:50:1E:35:83:93:7C:05:36:8C:2E:05 X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/CC9D872A468D11F0A82C5E5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.240.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:68:5b:dc:89:42:5d:38:b9:d4:15:74:b8:96:b9:01:0a:46: 33:9a:d8:32:e6:2a:08:2a:11:ab:53:6c:ca:73:13:28:f4:bb: 3f:39:c2:c7:b1:54:5b:44:a8:28:01:62:df:35:bd:a3:28:9a: 59:d4:7a:ab:b6:9a:67:4b:56:ab:22:4e:17:d7:4d:40:17:d5: 72:10:8b:f8:af:c2:1a:9a:b6:ad:fb:42:77:61:0b:c7:ba:3e: b0:5e:4a:2f:31:05:d0:fd:c7:d1:ad:f5:31:a6:51:47:33:78: 2f:35:4d:98:de:e3:02:9f:cc:cd:a4:f4:ac:e3:3d:a7:d1:82: dc:13:34:71:d0:8b:5f:57:43:34:ea:0a:5f:53:35:db:8f:d6: 95:a5:c7:d6:2d:27:e8:24:fe:ee:4e:35:87:0e:e0:79:ba:8b: d3:26:1f:88:3d:71:5d:aa:24:55:29:95:c7:1a:be:19:ab:26: 49:77:05:e6:55:29:37:7b:64:63:fd:39:0c:47:00:f7:20:8d: 49:94:92:48:40:a7:75:55:2e:69:81:03:66:9d:46:35:b9:96: e3:78:6d:60:13:a8:f6:69:ff:10:64:fc:7d:c4:b2:df:b2:0c: c8:49:e9:31:81:4a:f4:b0:0b:ac:db:8a:93:44:67:63:f4:fa: 15:31:0b:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1MEIxMTAvBgNVBAUTKDY4QzIxODhDMDRDMjBFNDkyM0FCQjYyREI0ODcyNDk4 MzU0QjRBRkQwHhcNMjYwNzIxMDgzNDMyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVmMmYxOC00NTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3D2wYgjgLqPXCy6ArmOpG9xpBdI3GpxZ+kIahnHa59ItFl2Z+a3q0Zjycya DQgVIk9xl6VsuhkMnclYksNYBhGvQdcBjMmlCs7PeLsGdskVLny47FoqfMA1xRZE a8Iyh8mhIzb+uMQXuO1M0iUMUbYEXyFyDsRpg7609KM6O2QR5CP35SQqrhnCIY11 IUk7Ywav6zuEeh53kQ29mxYV8kl/UuFbiPwAFRY1phXpqpC9FRIvYVuZwh95cq/q UGYEgo5QUaDuJCtTxa5nfV50dXvJUkzo7go2spOXXRckNYVC5enfxFuI1aKzNj5w et0mSUSQWBYJ5I4lpvnAAJgWgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE3UaERn NbbB9VAeNYOTfAU2jC4FMB8GA1UdIwQYMBaAFGjCGIwEwg5JI6u2LbSHJJg1S0r9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi81QjFDMUZBRTQ2 OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9hTUlZakFUQ0Rra2pxN1l0dElja21EVkxT djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1MEIvNUIxQzFGQUU0NjhDMTFGMDg0QjZBNTM5QzRGOUFFMDIvQ0M5RDg3MkE0 NjhEMTFGMEE4MkM1RTVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWPwMA0GCSqGSIb3DQEBCwUAA4IBAQBuaFvciUJdOLnUFXS4lrkB CkYzmtgy5ioIKhGrU2zKcxMo9Ls/OcLHsVRbRKgoAWLfNb2jKJpZ1HqrtppnS1ar Ik4X101AF9VyEIv4r8Iamrat+0J3YQvHuj6wXkovMQXQ/cfRrfUxplFHM3gvNU2Y 3uMCn8zNpPSs4z2n0YLcEzRx0ItfV0M06gpfUzXbj9aVpcfWLSfoJP7uTjWHDuB5 uovTJh+IPXFdqiRVKZXHGr4ZqyZJdwXmVSk3e2Rj/TkMRwD3II1JlJJIQKd1VS5p gQNmnUY1uZbjeG1gE6j2af8QZPx9xLLfsgzISekxgUr0sAus24qTRGdj9PoVMQti -----END CERTIFICATE-----Generated at Fri Jul 24 10:35:54 2026 by rpki-client