$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa File: E685F69A372D11F1A4767B088F833773.roa (raw, json) Hash identifier: qIG7a6gdz6oI8FkLXCBwV639Fz6ChKdcrnk7T65shfM= Subject key identifier: 88:92:D1:C0:BE:98:1D:FF:65:BD:86:28:71:4C:68:5E:D7:52:C3:D6 Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 78 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa Signing time: Wed 30 Sep 2026 16:29:25 +0000 ROA not before: Wed 30 Sep 2026 16:29:25 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 132165 IP address blocks: 151.123.224.0/19 maxlen: 19 151.123.224.0/24 maxlen: 24 151.123.225.0/24 maxlen: 24 151.123.233.0/24 maxlen: 24 151.123.240.0/24 maxlen: 24 151.123.241.0/24 maxlen: 24 151.123.242.0/24 maxlen: 24 151.123.243.0/24 maxlen: 24 151.123.244.0/24 maxlen: 24 151.123.245.0/24 maxlen: 24 151.123.246.0/24 maxlen: 24 151.123.247.0/24 maxlen: 24 151.123.248.0/24 maxlen: 24 151.123.249.0/24 maxlen: 24 151.123.250.0/24 maxlen: 24 151.123.251.0/24 maxlen: 24 151.123.252.0/24 maxlen: 24 151.123.253.0/24 maxlen: 24 151.123.254.0/24 maxlen: 24 151.123.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 16:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Sep 30 16:29:25 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd38e5-14a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:cd:6e:63:63:5f:1f:29:e0:52:6f:a8:2d: ad:4e:0a:bf:06:e4:77:be:36:33:af:58:41:13:74: d8:3f:e6:2d:23:71:07:2c:a6:ae:70:18:1e:6c:95: ba:de:99:cc:14:fd:8d:b0:bb:35:f5:07:c5:bf:f2: 5f:a6:c9:2d:1a:7a:ae:39:6d:b4:d5:8e:62:d8:2b: cc:ad:e3:30:ed:61:c8:11:f7:4f:5a:88:d8:56:47: e2:de:7a:db:fa:99:ba:dd:e6:13:a7:f3:e8:b3:bc: d1:d1:05:d7:53:04:50:c9:2e:dc:b5:d6:4e:58:3c: b2:3e:97:2c:4c:7a:8e:43:3d:be:cf:8c:03:47:76: ff:b9:22:f8:65:f0:62:b4:bc:f1:63:aa:dd:ec:2b: 0c:8e:9f:0a:43:b7:49:75:6f:3b:7c:4d:21:03:9e: 3e:14:df:da:cb:34:e9:e6:cd:89:9d:f2:5d:e6:b0: 62:f8:a8:27:c1:80:d7:05:b6:a8:ef:9f:af:3b:6e: 54:ec:47:13:d5:b7:ff:5a:ae:e6:07:2c:18:4b:ed: 79:74:63:4b:f6:7f:93:1d:4d:7d:be:2a:a7:aa:e0: fb:b7:be:bc:c3:36:36:67:ea:2d:c6:87:f1:32:26: 7d:2e:c5:2d:72:d1:32:f8:f5:f0:d3:4c:cb:f6:48: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:D1:C0:BE:98:1D:FF:65:BD:86:28:71:4C:68:5E:D7:52:C3:D6 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa sbgp-ipAddrBlock: critical IPv4: 151.123.224.0/19 Signature Algorithm: sha256WithRSAEncryption 60:1d:76:47:e2:b4:d2:19:3e:48:79:fb:2e:51:76:9f:16:e2: f2:6a:a7:87:fe:39:12:e4:55:d0:a3:2c:24:d9:06:6b:15:fb: a8:a5:35:53:3f:62:79:c7:34:32:fb:f4:8f:f3:6f:ad:0d:3f: 35:18:66:e6:21:7f:65:29:50:e7:d2:1c:90:0a:47:1f:94:b5: 56:92:4c:0d:2b:86:c1:e2:61:27:9e:ba:3b:e6:52:ce:8a:9f: 2b:c6:e5:60:90:5c:13:f7:fe:da:60:55:0f:f8:5b:24:f3:4f: 53:c5:29:3c:c5:74:66:ca:a4:f3:65:6b:c9:82:2b:b4:ed:a1: d9:29:f1:5f:1f:0f:7f:86:6c:27:d5:90:72:73:3b:c5:3b:64: 29:ee:c9:93:db:bb:5c:6e:51:e6:98:66:10:ed:c8:0f:3b:3b: b5:a8:d1:c0:c3:fa:66:78:a9:ee:d6:99:28:f7:c9:19:d5:3c: de:d1:bc:f2:92:f1:b7:2b:20:8c:8e:e5:75:e4:a2:e3:ee:93: b9:0b:0d:90:ea:42:e8:80:ad:6c:8c:e9:6e:4f:d1:ff:b7:25: 6e:97:9d:de:50:eb:88:20:c7:9c:28:7b:09:b3:d4:95:44:8a: 78:6a:f8:2a:a4:47:d4:d4:54:3a:ed:ae:05:63:ba:fe:d8:39: a7:fb:a4:f0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy RkJEOTYyRDAeFw0yNjA5MzAxNjI5MjVaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmQzOGU1LTE0YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWu81uY2NfHyngUm+oLa1OCr8G5He+NjOvWEETdNg/5i0jcQcspq5wGB5slbre mcwU/Y2wuzX1B8W/8l+myS0aeq45bbTVjmLYK8yt4zDtYcgR909aiNhWR+Leetv6 mbrd5hOn8+izvNHRBddTBFDJLty11k5YPLI+lyxMeo5DPb7PjANHdv+5Ivhl8GK0 vPFjqt3sKwyOnwpDt0l1bzt8TSEDnj4U39rLNOnmzYmd8l3msGL4qCfBgNcFtqjv n687blTsRxPVt/9aruYHLBhL7Xl0Y0v2f5MdTX2+Kqeq4Pu3vrzDNjZn6i3Gh/Ey Jn0uxS1y0TL49fDTTMv2SGoBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUiJLRwL6Y Hf9lvYYocUxoXtdSw9YwHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9FNjg1RjY5QTM3 MkQxMUYxQTQ3NjdCMDg4RjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAWXe+AwDQYJKoZIhvcNAQELBQADggEBAGAddkfitNIZPkh5+y5Rdp8W 4vJqp4f+ORLkVdCjLCTZBmsV+6ilNVM/YnnHNDL79I/zb60NPzUYZuYhf2UpUOfS HJAKRx+UtVaSTA0rhsHiYSeeujvmUs6KnyvG5WCQXBP3/tpgVQ/4WyTzT1PFKTzF dGbKpPNla8mCK7Ttodkp8V8fD3+GbCfVkHJzO8U7ZCnuyZPbu1xuUeaYZhDtyA87 O7Wo0cDD+mZ4qe7WmSj3yRnVPN7RvPKS8bcrIIyO5XXkouPuk7kLDZDqQuiArWyM 6W5P0f+3JW6Xnd5Q64ggx5woewmz1JVEinhq+CqkR9TUVDrtrgVjuv7YOaf7pPA= -----END CERTIFICATE-----Generated at Sat Oct 3 12:04:05 2026 by rpki-client