$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa File: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (raw, json) Hash identifier: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw= Subject key identifier: 00:66:45:B0:6B:C1:1C:75:62:DB:82:9E:19:0F:25:C1:F0:F1:57:46 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0BB0 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa Signing time: Fri 26 Jun 2026 20:24:07 +0000 ROA not before: Fri 26 Jun 2026 20:24:07 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 32787 IP address blocks: 14.136.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Jun 26 20:24:07 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3edfe7-d9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:51:91:33:99:30:37:63:b3:6f:af:dd:9c: 55:8b:f0:72:68:73:fe:86:03:a5:42:ce:d3:2d:b1: 4d:c1:aa:70:ba:3d:df:bf:10:25:bf:12:df:2c:0c: 77:52:3e:a7:9f:3a:b4:14:f9:36:d4:5a:e5:e4:35: d7:ca:88:5b:4d:a2:ba:35:9b:1e:92:f5:ff:2e:34: b9:87:b3:e2:a3:80:5a:15:f4:93:9a:ea:77:5b:1a: 3d:09:9a:fe:22:ae:a9:89:2f:ca:02:5c:35:5a:63: 0b:86:11:35:af:a0:ea:b7:c3:6c:22:4a:92:e3:da: 32:be:1f:ae:92:5e:3d:01:6f:09:1a:3f:08:b1:18: b2:72:9d:40:27:13:87:dc:c6:bb:91:22:28:fc:d2: f5:7c:b1:0f:6d:b7:9d:35:a6:22:63:8d:c8:00:6d: 04:77:90:8d:2e:ef:7d:37:fc:ad:31:f2:2d:73:6f: 61:ed:ea:d5:12:f3:dc:1c:a9:68:b4:f6:f4:5e:02: e8:e5:83:1c:36:9b:cc:a7:7e:ab:dc:6a:e4:f9:5f: c1:98:b8:21:70:63:4b:9c:d4:7e:28:75:e4:aa:87: 3d:54:90:46:b0:94:f6:cd:5d:38:1e:31:fa:e0:18: 97:28:ec:1b:1e:46:ff:fd:74:56:71:91:2f:0a:b8: 0e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:66:45:B0:6B:C1:1C:75:62:DB:82:9E:19:0F:25:C1:F0:F1:57:46 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.136.149.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:60:6f:63:39:21:e8:e2:8c:3d:52:58:ef:0a:fa:ee:f6:8a: e8:9d:07:16:3e:4e:c6:6b:4f:6a:d3:af:89:13:52:de:83:d4: 88:0c:18:da:78:be:49:d4:fe:62:a6:22:e3:0e:5b:99:0b:a6: 0c:29:fa:1b:d1:ce:70:b7:de:e9:3f:4e:33:9d:54:26:5f:9d: 73:04:54:fa:aa:93:d4:ef:7d:b9:e2:6a:93:99:d1:89:17:b0: 85:96:d0:e6:29:08:cd:2a:36:df:97:38:83:02:8a:49:b0:fc: bf:cb:58:f0:f8:4e:94:83:bf:94:16:66:c4:68:16:56:f6:0e: cf:a7:79:d5:fc:88:c1:0b:ea:47:b4:4f:dd:6a:00:3e:c9:ed: 11:57:2d:79:72:6b:c0:de:87:23:68:f7:62:a9:8e:4d:18:be: cc:1b:a0:09:72:0b:2e:c6:48:6e:fd:b3:1c:bf:15:2c:a3:a9: c6:c7:92:97:89:2a:f9:17:b1:a2:66:6c:a6:86:2a:9e:01:26: 8f:d7:c6:bc:5b:19:57:9a:3b:8b:ea:c8:ce:89:fa:ad:3d:39: ea:96:cd:c0:37:71:4f:26:2f:a5:d2:79:f7:77:52:9a:ce:fa: b3:85:e7:cb:36:bf:05:e2:85:cf:46:eb:bb:5f:47:fe:75:12: 1d:3f:de:e7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYwNjI2MjAyNDA3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNlZGZlNy1kOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHhRkTOZMDdjs2+v3ZxVi/ByaHP+hgOlQs7TLbFNwapwuj3fvxAlvxLfLAx3 Uj6nnzq0FPk21Frl5DXXyohbTaK6NZsekvX/LjS5h7Pio4BaFfSTmup3Wxo9CZr+ Iq6piS/KAlw1WmMLhhE1r6Dqt8NsIkqS49oyvh+ukl49AW8JGj8IsRiycp1AJxOH 3Ma7kSIo/NL1fLEPbbedNaYiY43IAG0Ed5CNLu99N/ytMfItc29h7erVEvPcHKlo tPb0XgLo5YMcNpvMp36r3Grk+V/BmLghcGNLnNR+KHXkqoc9VJBGsJT2zV04HjH6 4BiXKOwbHkb//XRWcZEvCrgOCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFABmRbBr wRx1YtuCnhkPJcHw8VdGMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvNDM3Q0M0MDY4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvMERFMzJEOUMy QjFFMTFGMEFGRUI4NTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQADoiVMA0GCSqGSIb3DQEBCwUAA4IBAQCeYG9jOSHo4ow9UljvCvru 9oronQcWPk7Ga09q06+JE1Leg9SIDBjaeL5J1P5ipiLjDluZC6YMKfob0c5wt97p P04znVQmX51zBFT6qpPU73254mqTmdGJF7CFltDmKQjNKjbflziDAopJsPy/y1jw +E6Ug7+UFmbEaBZW9g7Pp3nV/IjBC+pHtE/dagA+ye0RVy15cmvA3ocjaPdiqY5N GL7MG6AJcgsuxkhu/bMcvxUso6nGx5KXiSr5F7GiZmymhiqeASaP18a8WxlXmjuL 6sjOifqtPTnqls3AN3FPJi+l0nn3d1KazvqzhefLNr8F4oXPRuu7X0f+dRIdP97n -----END CERTIFICATE-----Generated at Wed Jul 22 21:12:46 2026 by rpki-client