$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa File: C1ECF984D07411F0B0B35C27C4F9AE02.roa (raw, json) Hash identifier: vNMfeySZoan3ga96mAzUZ3pFo+CA9msEyu6MQA+Ogo0= Subject key identifier: 71:8E:9F:14:AF:01:15:B2:71:0D:E3:CE:56:CC:78:87:95:64:F7:F4 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 0337 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa Signing time: Sat 31 Oct 2026 01:48:22 +0000 ROA not before: Sat 31 Oct 2026 01:48:22 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 46606 IP address blocks: 65.254.64.0/19 maxlen: 24 66.116.128.0/18 maxlen: 24 216.10.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 00:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Oct 31 01:48:22 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae548e6-73da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:11:ff:96:5a:f1:03:c4:78:92:72:0b:31: 88:0e:23:59:de:8a:17:bc:bf:8a:09:b9:19:46:87: 49:da:f6:dd:12:1f:04:16:52:19:59:66:f8:e7:c5: 93:73:83:f0:96:cf:df:cd:e1:e6:3e:6c:3f:6d:e5: ce:33:d2:0e:33:8a:e3:a4:ca:53:2d:7d:bd:85:c7: 6d:3a:d7:cd:96:7c:2c:07:d6:fa:b0:1b:40:2f:a9: bc:97:46:b0:7a:36:45:84:be:2f:44:44:8b:b2:c6: d6:98:e9:e9:16:79:39:c2:20:81:f3:e9:f9:3f:45: 3a:75:a6:51:89:c1:18:8d:6b:0e:c8:92:04:b4:f5: f9:4c:32:ac:45:8a:1e:7c:69:c3:e0:e1:2d:33:b9: 43:ce:dc:66:26:a3:8a:a2:b8:19:d4:ac:ea:96:55: 37:0c:55:8a:d9:a1:7e:97:28:ce:08:41:7a:4a:af: a7:6c:d1:bf:3d:8f:63:e8:bd:bc:90:c1:12:b9:cd: 5f:64:66:21:44:1e:65:40:7e:24:8a:4e:6f:7d:d2: b9:92:3d:19:83:22:e5:37:c3:78:87:50:2a:94:aa: df:da:8c:28:4f:45:d5:33:59:70:2a:96:45:f9:7b: 0d:e4:d8:ca:a4:16:24:95:a3:f1:c8:d1:92:e1:5a: 4d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:9F:14:AF:01:15:B2:71:0D:E3:CE:56:CC:78:87:95:64:F7:F4 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 65.254.64.0/19 66.116.128.0/18 216.10.240.0/20 Signature Algorithm: sha256WithRSAEncryption 22:34:91:78:94:20:6b:35:e6:bd:e6:b7:76:41:c1:da:04:d9: 71:b4:f5:8f:1d:d2:e2:93:46:6c:c1:a7:82:b1:f6:2f:71:cc: 8a:ba:e7:4d:c2:24:41:c2:d2:3f:c0:86:9a:10:f8:83:2f:3c: cc:e8:1c:2c:18:91:1c:4a:63:8b:ec:62:42:16:71:8c:f0:30: b7:2d:09:50:74:5b:25:1d:cb:18:42:5d:54:d8:d2:77:e9:96: 2e:4d:43:02:cf:1d:50:a0:24:cf:49:55:a3:01:17:73:02:86: de:ac:9e:14:31:11:28:9f:d5:e7:6d:a2:65:40:63:a8:d3:15: ab:ba:b4:17:f3:e4:f2:3a:d4:ff:85:bb:26:06:a1:66:48:97: 9d:9b:73:6f:9b:fc:0e:cd:31:ef:ae:27:80:f8:ea:81:53:40: 5f:42:3b:c4:68:e0:88:ef:ce:9d:4b:4e:b1:e4:0a:80:e9:25: b0:b4:94:c9:b8:0d:1b:cb:47:76:ff:1d:fa:41:5d:2e:25:7e: 4d:62:43:85:62:3f:0f:88:dd:d6:a5:63:78:d3:d5:ac:fc:80: 24:8d:7d:9d:8f:31:a7:bc:8c:91:48:ba:b6:cc:6b:3e:f3:0b: 94:1a:a1:82:58:4c:cc:de:2c:7d:fa:7a:40:82:10:e0:0d:2d: 29:d8:e4:f4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYxMDMxMDE0ODIyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU1NDhlNi03M2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxIR/5Za8QPEeJJyCzGIDiNZ3ooXvL+KCbkZRodJ2vbdEh8EFlIZWWb458WT c4Pwls/fzeHmPmw/beXOM9IOM4rjpMpTLX29hcdtOtfNlnwsB9b6sBtAL6m8l0aw ejZFhL4vRESLssbWmOnpFnk5wiCB8+n5P0U6daZRicEYjWsOyJIEtPX5TDKsRYoe fGnD4OEtM7lDztxmJqOKorgZ1KzqllU3DFWK2aF+lyjOCEF6Sq+nbNG/PY9j6L28 kMESuc1fZGYhRB5lQH4kik5vfdK5kj0ZgyLlN8N4h1AqlKrf2owoT0XVM1lwKpZF +XsN5NjKpBYklaPxyNGS4VpNpQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHGOnxSv ARWycQ3jzlbMeIeVZPf0MB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvQzFFQ0Y5ODRE MDc0MTFGMEIwQjM1QzI3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFQf5AAwQGQnSAAwQE2ArwMA0GCSqGSIb3DQEBCwUAA4IBAQAiNJF4 lCBrNea95rd2QcHaBNlxtPWPHdLik0ZswaeCsfYvccyKuudNwiRBwtI/wIaaEPiD LzzM6BwsGJEcSmOL7GJCFnGM8DC3LQlQdFslHcsYQl1U2NJ36ZYuTUMCzx1QoCTP SVWjARdzAoberJ4UMREon9XnbaJlQGOo0xWrurQX8+TyOtT/hbsmBqFmSJedm3Nv m/wOzTHvrieA+OqBU0BfQjvEaOCI786dS06x5AqA6SWwtJTJuA0by0d2/x36QV0u JX5NYkOFYj8PiN3WpWN409Ws/IAkjX2djzGnvIyRSLq2zGs+8wuUGqGCWEzM3ix9 +npAghDgDS0p2OT0 -----END CERTIFICATE-----Generated at Sun Nov 15 01:16:16 2026 by rpki-client