$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/352C6794B29D11F1A4273C704011F970.roa File: 352C6794B29D11F1A4273C704011F970.roa (raw, json) Hash identifier: al3KXuExaaHNnj+0UoiIH+aSoilqvKVflzH0TtjjoRg= Subject key identifier: 66:F1:DD:78:7F:48:CE:A6:C0:D1:D0:78:1F:39:FC:5D:FC:9F:82:5C Certificate issuer: /CN=A9128478/serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Certificate serial: 02 Authority key identifier: 62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/352C6794B29D11F1A4273C704011F970.roa Signing time: Thu 17 Sep 2026 13:39:30 +0000 ROA not before: Thu 17 Sep 2026 13:39:30 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 10376 IP address blocks: 204.86.136.0/21 maxlen: 22 204.86.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128478, serialNumber=626429216456CAD5E484144E0C666A2993B96DC9 Validity Not Before: Sep 17 13:39:30 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aabed92-634c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:af:df:6f:fb:8b:b9:03:84:80:53:de:38: ed:bd:13:77:32:98:76:76:f4:08:37:5a:79:e9:b4: 41:83:b7:43:20:58:9e:bf:0b:bd:d2:a7:2a:f4:15: 50:e5:dd:44:45:3e:ed:3f:2d:f0:d1:4a:19:27:9c: 9f:97:54:43:9c:ce:54:43:b7:af:66:cd:16:c1:18: 83:17:1a:23:38:72:49:61:ed:4a:c2:7c:55:08:fb: a5:4e:55:75:df:3c:21:53:87:d1:8f:15:64:f9:43: 0c:69:b7:80:7c:70:3d:77:56:38:49:d3:12:b3:6d: 94:27:8d:dd:85:2e:d5:c5:d4:58:e0:8b:df:70:69: 2e:5a:20:f6:4f:1b:7e:62:5a:63:71:8f:72:d5:6d: 0d:7a:0b:2e:ab:ed:32:2a:51:12:51:26:68:2a:b9: a0:49:9b:2f:06:40:87:9f:23:42:d6:23:3f:34:ad: 3c:17:97:7b:53:ba:ee:98:9b:2e:45:cb:95:45:02: d1:63:6d:a1:02:0e:fb:94:92:b4:c7:2f:4d:97:e8: b2:db:33:11:cf:a0:39:87:5c:4c:20:e9:2d:7b:04: 1d:11:22:79:bc:93:59:96:2b:fb:a6:f5:3c:b0:ee: be:f5:45:ff:d6:eb:3a:27:9d:6f:3f:05:a9:6a:4d: 4d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F1:DD:78:7F:48:CE:A6:C0:D1:D0:78:1F:39:FC:5D:FC:9F:82:5C X509v3 Authority Key Identifier: keyid:62:64:29:21:64:56:CA:D5:E4:84:14:4E:0C:66:6A:29:93:B9:6D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/YmQpIWRWytXkhBRODGZqKZO5bck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YmQpIWRWytXkhBRODGZqKZO5bck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128478/47EA941AB29C11F19339EA314011F970/352C6794B29D11F1A4273C704011F970.roa sbgp-ipAddrBlock: critical IPv4: 204.86.136.0-204.86.151.255 Signature Algorithm: sha256WithRSAEncryption 57:8d:2e:f2:c0:57:e6:32:2c:56:f1:35:d0:fb:ee:1c:34:3c: d9:6b:20:89:e7:85:de:7b:ea:83:6f:56:5b:5e:ab:b4:dd:cb: a4:7e:ed:ac:95:73:44:80:a0:51:27:27:e4:36:c7:d8:b4:77: 93:8e:bb:2d:1f:e4:cd:81:3f:5d:93:7c:a9:b4:ad:11:81:c5: d7:d3:41:94:c2:a0:3c:ab:c2:d0:00:03:9d:2c:2b:fa:17:d5: a0:5f:2a:84:f6:dc:19:25:c9:e2:7c:c9:4f:16:d2:5f:5c:2a: 24:9f:ee:0c:35:cd:f5:ba:35:bc:6a:1a:85:4a:c3:0e:02:35: 05:77:7b:da:80:95:ea:43:dd:60:ad:0b:0e:61:79:9e:a0:0f: fe:06:b2:2a:cd:16:91:04:1d:77:5d:fb:e9:26:f7:9a:f3:52: ad:57:2f:fa:f3:fe:69:94:1e:02:ae:e3:6f:2c:8d:37:00:92: 5c:6c:50:6d:4d:50:3b:d5:7a:1f:c8:c9:29:69:3b:02:a4:30: 59:a4:ce:d4:8a:6d:09:ec:38:9a:82:4c:e6:c7:bb:e0:9b:c1: f7:99:95:d3:d7:c9:69:fd:c6:f4:70:5d:2a:b9:97:34:54:67: 3d:50:e4:19:1f:45:43:cb:94:3e:b3:5b:13:76:14:01:5f:3f: c4:3f:78:c3 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODQ3ODExMC8GA1UEBRMoNjI2NDI5MjE2NDU2Q0FENUU0ODQxNDRFMEM2NjZBMjk5 M0I5NkRDOTAeFw0yNjA5MTcxMzM5MzBaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWJlZDkyLTYzNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCPt6/fb/uLuQOEgFPeOO29E3cymHZ29Ag3WnnptEGDt0MgWJ6/C73Spyr0FVDl 3URFPu0/LfDRShknnJ+XVEOczlRDt69mzRbBGIMXGiM4cklh7UrCfFUI+6VOVXXf PCFTh9GPFWT5Qwxpt4B8cD13VjhJ0xKzbZQnjd2FLtXF1Fjgi99waS5aIPZPG35i WmNxj3LVbQ16Cy6r7TIqURJRJmgquaBJmy8GQIefI0LWIz80rTwXl3tTuu6Ymy5F y5VFAtFjbaECDvuUkrTHL02X6LLbMxHPoDmHXEwg6S17BB0RInm8k1mWK/um9Tyw 7r71Rf/W6zonnW8/BalqTU2JAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQUZvHdeH9I zqbA0dB4Hzn8XfyfglwwHwYDVR0jBBgwFoAUYmQpIWRWytXkhBRODGZqKZO5bckw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NDc4LzQ3RUE5NDFBQjI5 QzExRjE5MzM5RUEzMTQwMTFGOTcwL1ltUXBJV1JXeXRYa2hCUk9ER1pxS1pPNWJj ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWW1RcElXUld5dFhraEJST0RHWnFLWk81YmNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODQ3OC80N0VBOTQxQUIyOUMxMUYxOTMzOUVBMzE0MDExRjk3MC8zNTJDNjc5NEIy OUQxMUYxQTQyNzNDNzA0MDExRjk3MC5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE AgABMA4wDAMEA8xWiAMEA8xWkDANBgkqhkiG9w0BAQsFAAOCAQEAV40u8sBX5jIs VvE10PvuHDQ82WsgieeF3nvqg29WW16rtN3LpH7trJVzRICgUScn5DbH2LR3k467 LR/kzYE/XZN8qbStEYHF19NBlMKgPKvC0AADnSwr+hfVoF8qhPbcGSXJ4nzJTxbS X1wqJJ/uDDXN9bo1vGoahUrDDgI1BXd72oCV6kPdYK0LDmF5nqAP/gayKs0WkQQd d1376Sb3mvNSrVcv+vP+aZQeAq7jbyyNNwCSXGxQbU1QO9V6H8jJKWk7AqQwWaTO 1IptCew4moJM5se74JvB95mV09fJaf3G9HBdKrmXNFRnPVDkGR9FQ8uUPrNbE3YU AV8/xD94ww== -----END CERTIFICATE-----Generated at Fri Oct 9 17:40:54 2026 by rpki-client