$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa File: AAEECC6A6E2D11F1A887915478A30FBC.roa (raw, json) Hash identifier: f7l9RkvjSXNlM0g5m0AYZYcpWynEZCt2Ngft6Q4y2Ww= Subject key identifier: 17:57:2F:BA:4D:29:36:8F:B2:C2:80:1B:56:FC:E4:36:DD:60:C1:38 Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 79 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa Signing time: Wed 30 Sep 2026 16:29:28 +0000 ROA not before: Wed 30 Sep 2026 16:29:28 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 140900 IP address blocks: 151.123.228.0/24 maxlen: 24 151.123.229.0/24 maxlen: 24 151.123.230.0/24 maxlen: 24 151.123.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Sep 30 16:29:28 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd38e8-8899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:56:9e:27:9f:78:23:3b:fa:95:9e:2c:3d: 58:90:2f:36:d0:af:c1:18:05:ec:17:31:6c:e0:50: 29:dc:93:aa:cb:92:bb:91:06:dc:5b:50:cc:72:3e: 8e:2d:d3:2e:07:89:25:cb:62:d8:0f:fd:5e:be:ff: e0:ee:dc:b8:de:3c:c3:ed:f9:46:05:52:6b:17:df: ae:f3:be:e4:21:9e:84:10:74:08:98:b9:37:a0:79: f5:b6:63:75:67:63:b7:cb:92:8a:45:9e:8d:52:da: 5a:8b:74:c0:3d:76:c6:aa:29:7d:ef:b3:98:99:25: 18:71:8c:f7:c5:2c:b0:3f:70:fc:a3:59:fe:10:3f: 96:82:2d:6d:7a:4a:a3:f4:bd:a2:40:10:32:df:dd: fe:92:44:a7:af:35:00:f1:d9:50:b6:42:aa:e8:ce: c4:0a:7c:68:b4:f4:96:4c:4a:4a:56:df:77:f4:4c: ef:9c:2b:8f:36:fc:35:ff:33:1e:09:08:27:9d:6e: 9e:57:79:ac:1d:d5:08:2b:f5:a9:91:86:fc:ea:c8: d1:78:3e:c9:56:6c:ec:7c:dd:82:61:bf:75:38:9f: ca:48:1e:85:40:51:1d:6e:a8:61:74:fe:09:41:24: fb:74:f2:08:8a:3c:41:ee:50:33:b3:ad:7c:2e:ea: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:2F:BA:4D:29:36:8F:B2:C2:80:1B:56:FC:E4:36:DD:60:C1:38 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 151.123.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:31:98:33:6c:a2:56:16:7d:0c:39:ac:0b:82:78:56:c6:5e: 77:c2:6a:12:ef:9f:3a:68:c5:cb:33:9c:ca:ce:28:27:ca:41: 77:5a:50:41:6f:2d:0c:ed:98:27:0e:d2:9f:16:6c:38:6e:a8: 45:71:04:5e:87:9e:f5:b1:d8:25:8a:05:9a:e8:77:f2:5f:df: fd:59:eb:37:fb:cd:82:0d:dd:55:9e:be:88:f3:73:4e:7e:ab: 61:c1:6b:e7:6b:d2:14:a4:e7:a9:52:83:12:4b:1b:7c:7d:0f: ac:6b:55:a2:86:17:58:35:bd:07:b8:94:99:5b:34:e7:76:d2: 70:2b:c7:82:1f:a2:d6:fe:fe:90:f6:86:2c:cf:26:d9:ec:3a: 8d:d0:ac:c4:c1:1d:0e:39:6d:0f:d9:f3:16:97:c1:4d:9f:2b: ea:b8:5d:e8:1a:bd:8b:b5:85:fc:46:68:e0:df:22:be:dd:f0: 90:ac:ee:fa:0b:32:91:e9:75:ed:65:19:76:c6:c2:bd:bf:68: 35:40:d4:b1:17:33:5c:3f:dc:cb:a0:77:57:e2:5e:8f:41:f2: fa:dc:4c:b4:31:b2:42:e3:40:26:17:ab:46:07:e3:b4:60:c9: 00:f3:ef:28:f1:47:4e:28:b1:f5:03:e2:c8:57:93:7d:db:7d: 25:f7:79:78 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA5MzAxNjI5MjhaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmQzOGU4LTg4OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKIlaeJ594Izv6lZ4sPViQLzbQr8EYBewXMWzgUCnck6rLkruRBtxbUMxyPo4t 0y4HiSXLYtgP/V6+/+Du3LjePMPt+UYFUmsX367zvuQhnoQQdAiYuTegefW2Y3Vn Y7fLkopFno1S2lqLdMA9dsaqKX3vs5iZJRhxjPfFLLA/cPyjWf4QP5aCLW16SqP0 vaJAEDLf3f6SRKevNQDx2VC2QqrozsQKfGi09JZMSkpW33f0TO+cK482/DX/Mx4J CCedbp5Xeawd1Qgr9amRhvzqyNF4PslWbOx83YJhv3U4n8pIHoVAUR1uqGF0/glB JPt08giKPEHuUDOzrXwu6srfAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUF1cvuk0p No+ywoAbVvzkNt1gwTgwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9BQUVFQ0M2QTZF MkQxMUYxQTg4NzkxNTQ3OEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKXe+QwDQYJKoZIhvcNAQELBQADggEBAAsxmDNsolYWfQw5rAuCeFbG XnfCahLvnzpoxcsznMrOKCfKQXdaUEFvLQztmCcO0p8WbDhuqEVxBF6HnvWx2CWK BZrod/Jf3/1Z6zf7zYIN3VWevojzc05+q2HBa+dr0hSk56lSgxJLG3x9D6xrVaKG F1g1vQe4lJlbNOd20nArx4Ifotb+/pD2hizPJtnsOo3QrMTBHQ45bQ/Z8xaXwU2f K+q4XegavYu1hfxGaODfIr7d8JCs7voLMpHpde1lGXbGwr2/aDVA1LEXM1w/3Mug d1fiXo9B8vrcTLQxskLjQCYXq0YH47RgyQDz7yjxR04osfUD4shXk33bfSX3eXg= -----END CERTIFICATE-----Generated at Sun Oct 4 05:56:23 2026 by rpki-client