$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D7720BA27B8511F1A950CCD368A30FBC.roa File: D7720BA27B8511F1A950CCD368A30FBC.roa (raw, json) Hash identifier: 4NKeU+/+U2QJQt+8O3ralcP2ak+7kTEUdBe+JK6L89w= Subject key identifier: CA:18:C4:6B:CC:E2:3F:E7:81:D1:6A:40:F1:2B:67:52:A8:CA:6D:49 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 303B Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D7720BA27B8511F1A950CCD368A30FBC.roa Signing time: Wed 16 Sep 2026 05:09:06 +0000 ROA not before: Wed 16 Sep 2026 05:09:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139341 IP address blocks: 14.207.234.0/24 maxlen: 24 2405:9800:ca13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12347 (0x303b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Sep 16 05:09:06 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6aaa2471-2fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:ac:c7:95:be:27:91:88:a4:5a:fe:9e:3b: ca:32:7f:28:ed:f3:1e:c3:fc:a8:8c:e1:a1:0e:bb: 4d:91:4d:87:9e:f2:ba:ed:db:b3:4f:af:ba:f0:29: a0:f5:77:e2:29:3c:8b:92:72:ea:53:92:02:e1:2c: 63:75:db:52:c5:c1:e4:41:89:af:54:eb:21:32:27: 86:b9:85:3c:1e:57:60:5a:de:bf:a2:1f:68:53:b1: 3c:65:ab:5c:1a:44:cb:64:1c:7e:fa:e8:cd:00:be: 0e:f3:2d:d6:84:e4:1b:54:48:44:68:7e:a1:f1:34: 04:75:f8:18:a8:45:b7:8a:3f:47:7b:66:f7:95:77: 83:6d:8f:80:33:3f:19:1b:1f:e9:80:29:38:bb:2f: 64:d2:65:b5:4c:a7:b0:a2:3f:a8:7e:80:be:11:5f: 35:22:67:fc:af:1c:4d:da:bc:7a:83:d9:db:13:e8: 22:10:0f:5a:86:f2:3d:b9:8c:18:82:3e:3d:8a:bc: 0b:77:32:79:3b:39:00:62:be:2f:c9:6e:7e:f6:8e: 32:74:f1:f0:36:13:1e:81:75:76:c2:09:31:32:05: 3f:28:b8:14:10:61:2f:99:e3:1f:d3:47:fa:e9:24: 0b:66:c4:c7:da:1d:f2:22:0b:29:b5:aa:fe:07:20: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:18:C4:6B:CC:E2:3F:E7:81:D1:6A:40:F1:2B:67:52:A8:CA:6D:49 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/D7720BA27B8511F1A950CCD368A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 14.207.234.0/24 IPv6: 2405:9800:ca13::/48 Signature Algorithm: sha256WithRSAEncryption 36:c7:cd:e7:b6:59:60:4e:59:de:9d:45:fc:0b:7f:6f:70:e4: 72:77:f0:9d:28:04:28:3d:4e:11:a7:b2:d2:2b:b3:44:ac:3f: f5:14:58:f8:7a:80:04:6f:1c:37:ed:44:22:8b:64:16:2f:12: 2a:1c:be:2a:05:8c:4e:46:69:e7:2a:59:1b:76:f5:c0:55:47: 78:e0:44:e9:ff:87:ba:ee:ca:cb:21:ea:42:f0:68:87:0b:9e: 6d:d1:e5:53:80:3b:5c:da:36:d1:7c:ea:5d:9f:50:41:9a:44: a4:2b:5b:4b:cc:60:83:e4:0b:1f:ce:30:62:b9:33:36:3b:8b: 91:74:77:c5:05:cf:a7:0e:37:a5:6b:e2:3a:e4:13:65:57:5a: e1:24:d8:8b:78:b2:0d:98:4a:e2:51:50:72:86:16:5b:89:b7: 55:7e:6b:39:82:37:d9:5c:8f:97:97:c0:d2:4b:16:7a:0a:26: 98:f7:59:4a:0c:35:01:33:e2:e0:03:ac:e2:3e:a5:dd:5b:27: 20:cb:d5:96:64:dd:ea:bf:b0:02:cc:3f:2d:52:13:e6:28:f5: 2b:05:fe:6a:d2:ab:86:95:0a:04:05:0a:cb:9e:24:7d:6f:25: f3:a6:6e:45:13:6f:19:6f:89:f1:f5:d9:99:fd:67:cb:b1:94: 12:97:a9:40 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICMDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwOTE2MDUwOTA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhMjQ3MS0yZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVysx5W+J5GIpFr+njvKMn8o7fMew/yojOGhDrtNkU2HnvK67duzT6+68Cmg 9XfiKTyLknLqU5IC4SxjddtSxcHkQYmvVOshMieGuYU8HldgWt6/oh9oU7E8Zatc GkTLZBx++ujNAL4O8y3WhOQbVEhEaH6h8TQEdfgYqEW3ij9He2b3lXeDbY+AMz8Z Gx/pgCk4uy9k0mW1TKewoj+ofoC+EV81Imf8rxxN2rx6g9nbE+giEA9ahvI9uYwY gj49irwLdzJ5OzkAYr4vyW5+9o4ydPHwNhMegXV2wgkxMgU/KLgUEGEvmeMf00f6 6SQLZsTH2h3yIgsptar+ByDnjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMoYxGvM 4j/ngdFqQPErZ1Koym1JMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRDc3MjBCQTI3 Qjg1MTFGMUE5NTBDQ0QzNjhBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQADs/qMA8EAgACMAkDBwAkBZgAyhMwDQYJKoZIhvcNAQELBQADggEB ADbHzee2WWBOWd6dRfwLf29w5HJ38J0oBCg9ThGnstIrs0SsP/UUWPh6gARvHDft RCKLZBYvEiocvioFjE5GaecqWRt29cBVR3jgROn/h7ruyssh6kLwaIcLnm3R5VOA O1zaNtF86l2fUEGaRKQrW0vMYIPkCx/OMGK5MzY7i5F0d8UFz6cON6Vr4jrkE2VX WuEk2It4sg2YSuJRUHKGFluJt1V+azmCN9lcj5eXwNJLFnoKJpj3WUoMNQEz4uAD rOI+pd1bJyDL1ZZk3eq/sALMPy1SE+Yo9SsF/mrSq4aVCgQFCsueJH1vJfOmbkUT bxlvifH12Zn9Z8uxlBKXqUA= -----END CERTIFICATE-----Generated at Sat Sep 26 18:47:22 2026 by rpki-client