$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa File: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (raw, json) Hash identifier: m7EUzzHnpucYKiHcNFB8qgSUahU1+/tp+vEsRlqPQUM= Subject key identifier: FF:E4:09:71:55:24:38:7E:68:61:06:3A:26:E9:B3:28:12:F1:B8:D0 Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A8A Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa Signing time: Tue 14 Jul 2026 17:16:35 +0000 ROA not before: Tue 14 Jul 2026 17:16:35 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 138128 IP address blocks: 66.150.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6794 (0x1a8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jul 14 17:16:35 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a566ef2-5e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:9e:23:9c:70:c9:89:fd:99:1c:66:e3:d3: b0:59:5e:43:6e:ce:79:5a:50:a4:fc:24:40:0f:3d: 2d:d7:1a:a5:01:c5:10:9b:20:ba:b3:93:43:ea:43: 65:67:6c:df:85:cc:49:9c:3d:3d:4b:02:aa:dd:78: 74:7c:bc:e8:a9:70:3b:d0:3d:2b:1c:94:d4:cb:cf: c2:a1:9e:be:df:f9:a4:98:f5:e1:49:24:eb:9a:c1: f8:ef:9d:e6:14:c5:02:c7:0c:96:31:4b:74:7f:f2: 5c:47:4f:fe:91:ee:05:58:9c:cd:4f:33:e7:cc:f0: 09:30:47:3f:20:30:8b:94:92:62:e9:fc:5a:cc:16: dd:7f:f1:d1:02:5f:e7:f2:38:8d:2e:fa:f3:1c:c1: 00:cb:15:1f:78:3b:ba:18:72:b3:c7:17:43:bf:54: b5:89:ea:99:ff:f8:e8:7f:56:07:38:cf:22:be:5e: 5c:3f:81:b3:90:54:f0:30:bf:36:86:80:22:37:e8: b7:6f:14:d1:34:2e:c6:f2:d4:fe:c4:8d:40:60:5e: ef:24:f2:e3:c2:de:e2:9f:ea:23:a9:29:ff:b4:be: 6b:8d:df:e9:59:b8:5f:ea:8a:36:10:73:b3:63:91: b5:bf:f1:13:28:4d:b1:00:da:49:bd:bf:fb:40:e6: 49:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E4:09:71:55:24:38:7E:68:61:06:3A:26:E9:B3:28:12:F1:B8:D0 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 66.150.240.0/23 Signature Algorithm: sha256WithRSAEncryption 99:93:66:5c:5b:54:78:ec:a3:52:d3:2a:02:fd:0d:7a:69:b7: d2:a3:09:4e:19:73:47:9b:06:a2:17:a2:7d:a6:e5:47:73:74: e4:60:98:d0:38:59:11:f8:7a:7c:e7:56:8e:14:f3:00:12:12: 71:68:8e:00:7b:bd:08:43:37:39:50:42:01:8a:88:9c:98:c2: 2b:2b:e9:bc:b1:09:2e:57:0b:12:fe:30:bd:37:06:c2:32:23: 08:3d:bc:a4:47:5e:37:1a:28:c3:14:a3:b5:85:b0:48:fa:af: ee:23:d5:fd:d0:dc:96:d1:7d:bb:09:d6:e0:87:48:43:ce:28: cb:f0:48:90:a4:e1:f5:82:35:13:14:7b:d5:4c:dd:1d:44:11: 34:a0:78:96:c1:83:31:5f:63:e5:e1:03:69:d3:56:34:b3:dc: 46:3f:0a:fc:f4:b1:45:c8:d4:99:c9:0a:7b:17:08:c4:42:5f: 4c:d3:bb:ee:a0:3a:76:ea:06:f5:ec:c2:37:36:b0:b1:ea:f6: f4:1d:93:8b:ac:e4:92:d9:13:07:ef:b2:32:7f:51:16:c4:16: 1e:25:02:b5:59:13:99:6e:1b:6f:1b:26:15:38:ae:25:20:16: 30:3c:4f:32:0d:b3:f0:dc:f1:50:ad:6c:d3:a1:a6:c3:f6:61: f7:75:d9:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNzE0MTcxNjM1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2NmVmMi01ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+OeI5xwyYn9mRxm49OwWV5Dbs55WlCk/CRADz0t1xqlAcUQmyC6s5ND6kNl Z2zfhcxJnD09SwKq3Xh0fLzoqXA70D0rHJTUy8/CoZ6+3/mkmPXhSSTrmsH4753m FMUCxwyWMUt0f/JcR0/+ke4FWJzNTzPnzPAJMEc/IDCLlJJi6fxazBbdf/HRAl/n 8jiNLvrzHMEAyxUfeDu6GHKzxxdDv1S1ieqZ//jof1YHOM8ivl5cP4GzkFTwML82 hoAiN+i3bxTRNC7G8tT+xI1AYF7vJPLjwt7in+ojqSn/tL5rjd/pWbhf6oo2EHOz Y5G1v/ETKE2xANpJvb/7QOZJsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP/kCXFV JDh+aGEGOibpsygS8bjQMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvQ0FBOTlDQUM2 RUE5MTFGMTk3OUE0RkI0NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBQpbwMA0GCSqGSIb3DQEBCwUAA4IBAQCZk2ZcW1R47KNS0yoC/Q16 abfSowlOGXNHmwaiF6J9puVHc3TkYJjQOFkR+Hp851aOFPMAEhJxaI4Ae70IQzc5 UEIBioicmMIrK+m8sQkuVwsS/jC9NwbCMiMIPbykR143GijDFKO1hbBI+q/uI9X9 0NyW0X27Cdbgh0hDzijL8EiQpOH1gjUTFHvVTN0dRBE0oHiWwYMxX2Pl4QNp01Y0 s9xGPwr89LFFyNSZyQp7FwjEQl9M07vuoDp26gb17MI3NrCx6vb0HZOLrOSS2RMH 77Iyf1EWxBYeJQK1WROZbhtvGyYVOK4lIBYwPE8yDbPw3PFQrWzToabD9mH3ddmz -----END CERTIFICATE-----Generated at Fri Jul 24 03:27:15 2026 by rpki-client