$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa File: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (raw, json) Hash identifier: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE= Subject key identifier: 0F:5D:1C:EF:00:25:D0:79:97:62:60:A8:C6:90:E1:0D:BF:EE:E5:54 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0CBC Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:27:45 +0000 ROA not before: Sat 16 Aug 2025 19:30:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 32787 IP address blocks: 183.177.40.0/24 maxlen: 24 183.177.41.0/24 maxlen: 24 183.177.42.0/24 maxlen: 24 183.177.43.0/24 maxlen: 24 183.177.44.0/24 maxlen: 24 183.177.45.0/24 maxlen: 24 183.177.46.0/24 maxlen: 24 183.177.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 16 19:30:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59051-5592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:bc:b1:11:43:13:64:ca:8a:f8:81:ba:98: fb:89:77:e8:e9:f4:fc:21:2b:ba:8c:3f:ed:de:6a: 98:aa:e2:5b:c4:f1:01:f5:88:f0:1d:c8:e0:a8:a5: 8f:cf:75:c1:e3:75:35:9e:db:6d:11:90:28:c3:67: 8f:f5:8c:3b:0c:a4:3d:ca:88:73:70:36:cd:21:90: 18:7d:e7:5c:e6:0f:2f:99:c4:fa:48:88:3f:0a:e4: d7:eb:a9:78:7b:71:bc:0b:f7:3a:92:72:6d:d4:79: f0:9d:bb:7f:4f:52:a0:25:41:f2:b0:d2:2d:c9:d2: 88:52:77:29:92:60:ff:f8:df:f3:08:eb:61:ac:9c: 6e:f7:38:dd:33:ad:34:60:28:f7:ed:6f:33:6b:e5: 5c:87:b7:3d:4c:d7:81:14:74:ee:12:e5:06:ea:32: ed:c1:0a:28:16:f9:69:3f:e7:51:52:6b:42:34:c6: ad:31:5b:0a:96:00:0b:ed:48:41:51:85:26:20:87: e6:84:4d:29:c8:cc:65:08:33:e9:12:92:db:09:63: e0:ec:f2:9f:bb:de:2b:fb:ea:1d:b5:65:18:35:e2: ba:80:7e:77:cf:85:48:4b:36:6f:e1:89:b8:34:c3: 56:53:f1:28:da:81:b6:5b:41:c1:4a:d6:23:2a:90: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:1C:EF:00:25:D0:79:97:62:60:A8:C6:90:E1:0D:BF:EE:E5:54 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/8008F5CA620C11ECAFF5941AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 183.177.40.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:ff:a9:54:5f:0c:75:ef:71:bf:d8:81:38:fa:ae:9b:fb:33: 80:f8:a5:42:f8:78:01:fe:81:6f:c7:c6:e0:35:ea:e6:72:8e: 76:8c:51:f6:6e:91:54:f7:db:2f:dd:54:6f:85:bf:8a:71:57: b5:38:32:18:f7:c8:21:4b:30:b9:b4:3f:48:88:fe:6c:9f:be: 93:bb:c6:9b:a6:d7:aa:d8:4c:a3:36:a2:32:c6:10:fb:5b:1c: 7f:6c:9c:1b:3b:a4:33:a6:fb:ce:db:03:15:4e:7e:ab:5c:6b: fe:47:1b:e3:3b:2d:b6:bf:94:e0:6c:ac:be:b5:63:39:95:34: 83:4f:67:cf:9b:03:21:0a:bd:fb:96:b6:86:b0:75:57:68:3b: 42:f1:06:69:1e:69:56:83:53:65:68:27:09:3a:3c:b8:2e:db: eb:2f:73:6d:27:ee:12:d5:5c:f8:d0:dc:2b:2d:5e:a4:7a:6c: f8:ec:db:a1:45:60:18:ef:69:14:fe:0b:41:b5:d5:86:fe:bc: ec:7e:53:fb:06:d5:d8:33:23:58:04:03:5a:99:da:54:97:21: c0:bf:df:0d:a9:ae:f1:63:21:98:33:58:e2:24:7a:60:4f:d9: 3b:42:15:c3:bf:83:04:b3:f4:95:71:6c:55:49:a9:4d:c8:48: 5c:b6:be:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODE2MTkzMDA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTA1MS01NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZW8sRFDE2TKiviBupj7iXfo6fT8ISu6jD/t3mqYquJbxPEB9YjwHcjgqKWP z3XB43U1ntttEZAow2eP9Yw7DKQ9yohzcDbNIZAYfedc5g8vmcT6SIg/CuTX66l4 e3G8C/c6knJt1Hnwnbt/T1KgJUHysNItydKIUncpkmD/+N/zCOthrJxu9zjdM600 YCj37W8za+Vch7c9TNeBFHTuEuUG6jLtwQooFvlpP+dRUmtCNMatMVsKlgAL7UhB UYUmIIfmhE0pyMxlCDPpEpLbCWPg7PKfu94r++odtWUYNeK6gH53z4VISzZv4Ym4 NMNWU/Eo2oG2W0HBStYjKpBPyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA9dHO8A JdB5l2JgqMaQ4Q2/7uVUMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvODAwOEY1Q0E2 MjBDMTFFQ0FGRjU5NDFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDt7EoMA0GCSqGSIb3DQEBCwUAA4IBAQBt/6lUXwx173G/2IE4+q6b +zOA+KVC+HgB/oFvx8bgNermco52jFH2bpFU99sv3VRvhb+KcVe1ODIY98ghSzC5 tD9IiP5sn76Tu8abpteq2EyjNqIyxhD7Wxx/bJwbO6QzpvvO2wMVTn6rXGv+Rxvj Oy22v5TgbKy+tWM5lTSDT2fPmwMhCr37lraGsHVXaDtC8QZpHmlWg1NlaCcJOjy4 LtvrL3NtJ+4S1Vz40NwrLV6kemz47NuhRWAY72kU/gtBtdWG/rzsflP7BtXYMyNY BANamdpUlyHAv98Nqa7xYyGYM1jiJHpgT9k7QhXDv4MEs/SVcWxVSalNyEhctr4E -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:32 2026 by rpki-client