$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/35BF2AEEB59E11F194E7428B3311F970.roa File: 35BF2AEEB59E11F194E7428B3311F970.roa (raw, json) Hash identifier: R/CLrk+ss+xAqg707krYyYSBez8f9zY5TlrmSiSHgjc= Subject key identifier: 9F:1D:CF:D7:7E:D4:05:2B:FE:E8:F1:29:F6:92:F3:08:FB:10:AB:6B Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Certificate serial: 01E0 Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/35BF2AEEB59E11F194E7428B3311F970.roa Signing time: Mon 21 Sep 2026 09:25:18 +0000 ROA not before: Mon 21 Sep 2026 09:25:18 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 150436 IP address blocks: 45.78.192.0/18 maxlen: 24 69.5.0.0/19 maxlen: 24 207.166.160.0/19 maxlen: 24 216.19.0.0/18 maxlen: 24 216.230.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A Validity Not Before: Sep 21 09:25:18 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab0f7fe-f0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:f0:e3:36:91:3e:77:26:cc:cc:f0:59:5b: 94:a7:82:f8:bf:45:f2:8b:58:2d:7b:c7:ef:28:b1: cf:f6:bb:cf:0e:e6:0b:a2:cd:aa:51:72:0c:8c:1e: 5c:c3:01:53:5a:9d:b7:bf:cc:cc:89:57:0a:31:1f: 2a:a5:83:ea:70:28:d0:74:8c:fa:b5:84:17:1c:df: 5a:8d:2a:b0:52:07:eb:cd:e9:ff:55:e9:3e:e2:54: cf:67:8a:5b:58:03:cf:f6:e5:54:da:5c:78:16:ff: d1:85:0d:cf:d1:6d:6a:98:28:98:64:0d:48:0d:11: 3d:ba:27:b0:bc:a7:ae:bd:0b:cb:c5:c9:57:eb:c3: bd:a1:bf:ea:db:89:ef:02:a5:d5:c9:56:a3:c3:07: 14:8a:f8:f2:0c:fd:28:0a:cc:92:4f:38:8a:47:22: ae:65:30:59:e9:97:2a:7b:dd:c5:02:a7:e0:16:c5: 23:22:8e:78:b2:e5:86:17:ed:98:e1:07:9e:e0:6e: 6b:97:e2:b6:98:65:99:e1:55:31:b7:da:54:27:f2: ce:16:72:b9:dd:c2:37:12:b7:70:54:58:8d:e1:25: 10:54:68:46:aa:bd:cf:fe:9b:78:e1:66:cd:e0:2c: 2f:a5:87:d1:37:d6:f5:fa:d4:b6:3c:63:54:48:21: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:CF:D7:7E:D4:05:2B:FE:E8:F1:29:F6:92:F3:08:FB:10:AB:6B X509v3 Authority Key Identifier: keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/35BF2AEEB59E11F194E7428B3311F970.roa sbgp-ipAddrBlock: critical IPv4: 45.78.192.0/18 69.5.0.0/19 207.166.160.0/19 216.19.0.0/18 216.230.192.0/19 Signature Algorithm: sha256WithRSAEncryption 5d:43:99:cd:96:9a:64:9f:01:e2:46:00:05:dc:d6:f8:06:a6: 1b:5a:55:0e:a4:50:dc:8a:c4:80:f7:cf:70:cc:5a:6f:5f:89: e5:fe:b8:dc:da:82:6b:58:b3:0d:78:25:70:7a:58:ef:37:5f: 3b:ba:4b:62:fc:84:1f:18:de:c2:1e:02:40:2c:9f:6c:bc:9c: 58:47:a0:be:fa:d8:56:d8:32:80:d4:61:5b:0f:e2:a0:e0:2f: d8:cd:57:73:25:95:8f:56:53:a2:3f:9a:ee:7e:ee:d6:6a:25: f9:81:7d:4d:de:e2:25:5d:88:d6:9a:56:82:63:52:79:7e:96: 2e:da:21:51:7d:2b:65:5e:9e:49:6d:76:61:8b:09:da:ed:9c: 7b:b2:2d:19:69:ff:cb:e7:6e:56:38:8e:be:9d:fb:7e:df:94: e3:b9:1b:2a:0f:be:ab:fe:f8:9f:fb:a7:4e:5d:7b:15:81:ac: ec:1c:70:e1:66:9c:2b:59:d3:84:01:e4:27:e9:e7:d4:8d:a9: 63:b1:14:c3:bb:f5:97:ed:f6:4a:51:a8:ec:58:22:70:64:54: ab:7b:68:21:fd:66:38:72:1b:a3:98:38:32:6d:51:ad:11:f2: 8a:f9:21:b8:e1:4f:79:3a:29:61:72:b1:75:e4:a3:0f:8a:43: 3c:c4:16:ca -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDM4MENENkJDQzlFMUMxMUZFQzRFRTI3REE4OTM4MjRE QURCNTIxMkEwHhcNMjYwOTIxMDkyNTE4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIwZjdmZS1mMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o7w4zaRPncmzMzwWVuUp4L4v0Xyi1gte8fvKLHP9rvPDuYLos2qUXIMjB5c wwFTWp23v8zMiVcKMR8qpYPqcCjQdIz6tYQXHN9ajSqwUgfrzen/Vek+4lTPZ4pb WAPP9uVU2lx4Fv/RhQ3P0W1qmCiYZA1IDRE9uiewvKeuvQvLxclX68O9ob/q24nv AqXVyVajwwcUivjyDP0oCsySTziKRyKuZTBZ6Zcqe93FAqfgFsUjIo54suWGF+2Y 4Qee4G5rl+K2mGWZ4VUxt9pUJ/LOFnK53cI3ErdwVFiN4SUQVGhGqr3P/pt44WbN 4CwvpYfRN9b1+tS2PGNUSCEvPQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJ8dz9d+ 1AUr/ujxKfaS8wj7EKtrMB8GA1UdIwQYMBaAFDgM1rzJ4cEf7E7ifaiTgk2ttSEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC84RjkwOTFENDMy QjAxMUVGQTRDQkY5NkFDNEY5QUUwMi9PQXpXdk1uaHdSX3NUdUo5cUpPQ1RhMjFJ U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09Beld2TW5od1Jfc1R1SjlxSk9DVGEyMUlTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MjAvOEY5MDkxRDQzMkIwMTFFRkE0Q0JGOTZBQzRGOUFFMDIvMzVCRjJBRUVC NTlFMTFGMTk0RTc0MjhCMzMxMUY5NzAucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQGLU7AAwQFRQUAAwQFz6agAwQG2BMAAwQF2ObAMA0GCSqGSIb3DQEB CwUAA4IBAQBdQ5nNlppknwHiRgAF3Nb4BqYbWlUOpFDcisSA989wzFpvX4nl/rjc 2oJrWLMNeCVweljvN187ukti/IQfGN7CHgJALJ9svJxYR6C++thW2DKA1GFbD+Kg 4C/YzVdzJZWPVlOiP5rufu7WaiX5gX1N3uIlXYjWmlaCY1J5fpYu2iFRfStlXp5J bXZhiwna7Zx7si0Zaf/L525WOI6+nft+35TjuRsqD76r/vif+6dOXXsVgazsHHDh ZpwrWdOEAeQn6efUjaljsRTDu/WX7fZKUajsWCJwZFSre2gh/WY4chujmDgybVGt EfKK+SG44U95OilhcrF15KMPikM8xBbK -----END CERTIFICATE-----Generated at Sun Oct 4 02:40:42 2026 by rpki-client