$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa File: CB355B666EA911F1979A4FB45FA30FBC.roa (raw, json) Hash identifier: MNd1FxOTtziaGFt9RjkG1a0nL0y01M/Sc5RidiPZ/uo= Subject key identifier: 58:92:A2:0B:54:C7:55:30:23:F5:2D:1A:FF:EC:62:DF:1A:1F:A6:4D Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A8D Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa Signing time: Tue 14 Jul 2026 17:16:40 +0000 ROA not before: Tue 14 Jul 2026 17:16:40 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 9422 IP address blocks: 66.150.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6797 (0x1a8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jul 14 17:16:40 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a566ef8-7197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:7d:d9:9f:42:0e:ed:40:f7:3f:51:cb:b7: 6e:07:f3:48:3a:d9:7a:3e:79:0d:b5:37:d7:c7:b1: 99:54:7f:3d:00:3c:3a:c0:96:cb:fa:c6:93:ba:48: f0:e0:f4:1f:bf:e4:a1:dd:b3:e4:16:a6:7d:5d:6a: 7d:f9:4a:87:c5:6a:35:3a:9d:75:71:a1:be:69:07: 4b:04:e8:04:44:3d:ac:36:41:15:02:50:69:cb:0e: da:7d:5f:be:22:9c:27:28:52:d5:f0:ca:94:27:c8: ca:7a:17:3b:fe:64:27:f1:e7:52:9e:a9:90:57:71: 05:ee:66:6c:44:00:70:19:d4:2f:c5:1c:32:2f:4d: 7b:93:f0:fb:9c:84:78:ad:fd:63:53:65:fe:bd:51: 5d:f2:94:4b:d8:fc:1e:92:a7:2c:c4:56:bd:6f:e8: ea:42:14:ec:71:e7:9b:95:f5:97:06:a2:13:f9:44: 25:00:df:b2:38:f1:4b:ec:c4:06:62:cd:b0:ae:49: 79:19:dd:4b:60:d7:fc:7e:b7:54:b8:e9:0f:ee:ac: 56:e7:24:ac:da:6e:ff:56:ef:92:7a:50:55:fb:5e: c4:8a:fc:84:9a:3a:e8:fb:a2:34:35:9d:96:36:06: bc:35:c3:24:1e:b3:ca:66:1e:38:01:5c:3f:7e:f0: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:92:A2:0B:54:C7:55:30:23:F5:2D:1A:FF:EC:62:DF:1A:1F:A6:4D X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 66.150.242.0/24 Signature Algorithm: sha256WithRSAEncryption b1:2c:46:12:37:2c:48:c4:19:b4:91:e4:32:b0:9b:a1:62:a1: 2d:19:41:f4:c6:a5:9c:e6:8d:39:9c:c2:48:94:c9:07:e3:2c: 8e:90:e6:0d:f5:d8:9c:ca:11:04:fd:21:5e:52:0a:42:cc:52: 7a:5c:d0:1d:76:de:1b:3b:6c:dd:76:73:ae:32:d9:e4:08:67: e6:29:a9:8f:f0:c8:27:95:87:c5:15:06:dc:1c:79:6c:a6:a9: aa:d8:cb:1f:93:3d:a8:0a:15:5b:2b:a6:81:68:e8:3e:2b:1f: 49:71:f0:ab:1d:32:f1:b9:9a:26:57:94:88:5f:b0:0f:39:af: c5:5b:5b:65:ea:e6:70:62:98:15:5a:26:97:8c:b2:d8:e9:bc: 73:6d:fe:e2:c7:aa:bf:6f:46:f1:d9:91:ff:24:c3:1e:2f:88: 36:c8:2d:a9:b7:16:94:4b:45:e3:6c:62:f9:b2:29:f1:1d:56: ab:29:9f:cd:d0:58:ba:a2:e7:f2:58:0a:6f:d6:37:bf:e1:3e: fa:90:af:36:b1:c9:e0:39:44:11:63:08:da:05:e1:fe:5d:7c: ff:61:d9:12:4e:d5:3e:da:f8:2c:e6:4d:1a:44:44:49:a1:5a: 59:5e:af:e2:39:3e:c6:c9:45:5c:be:00:6e:22:56:1e:2f:e2: c4:b9:f2:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNzE0MTcxNjQwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2NmVmOC03MTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWV92Z9CDu1A9z9Ry7duB/NIOtl6PnkNtTfXx7GZVH89ADw6wJbL+saTukjw 4PQfv+Sh3bPkFqZ9XWp9+UqHxWo1Op11caG+aQdLBOgERD2sNkEVAlBpyw7afV++ IpwnKFLV8MqUJ8jKehc7/mQn8edSnqmQV3EF7mZsRABwGdQvxRwyL017k/D7nIR4 rf1jU2X+vVFd8pRL2PwekqcsxFa9b+jqQhTsceeblfWXBqIT+UQlAN+yOPFL7MQG Ys2wrkl5Gd1LYNf8frdUuOkP7qxW5ySs2m7/Vu+SelBV+17EivyEmjro+6I0NZ2W Nga8NcMkHrPKZh44AVw/fvDLAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFiSogtU x1UwI/UtGv/sYt8aH6ZNMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvQ0IzNTVCNjY2 RUE5MTFGMTk3OUE0RkI0NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAQpbyMA0GCSqGSIb3DQEBCwUAA4IBAQCxLEYSNyxIxBm0keQysJuh YqEtGUH0xqWc5o05nMJIlMkH4yyOkOYN9dicyhEE/SFeUgpCzFJ6XNAddt4bO2zd dnOuMtnkCGfmKamP8MgnlYfFFQbcHHlspqmq2Msfkz2oChVbK6aBaOg+Kx9JcfCr HTLxuZomV5SIX7APOa/FW1tl6uZwYpgVWiaXjLLY6bxzbf7ix6q/b0bx2ZH/JMMe L4g2yC2ptxaUS0XjbGL5sinxHVarKZ/N0Fi6oufyWApv1je/4T76kK82scngOUQR YwjaBeH+XXz/YdkSTtU+2vgs5k0aRERJoVpZXq/iOT7GyUVcvgBuIlYeL+LEufIg -----END CERTIFICATE-----Generated at Fri Jul 24 06:02:23 2026 by rpki-client