$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa File: 02CB9F9C829E11F185008F026AA30FBC.roa (raw, json) Hash identifier: kz/WDkxKlYlX3tJH7K5RxmjBlJkOgNxU9cIt8kZnAmI= Subject key identifier: E9:08:CB:46:57:9E:85:37:C1:93:70:96:D4:BD:01:3C:CA:83:14:FD Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 01BC Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa Signing time: Tue 13 Oct 2026 03:52:24 +0000 ROA not before: Tue 13 Oct 2026 03:52:24 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 400618 IP address blocks: 177.0.128.0/20 maxlen: 24 177.2.20.0/22 maxlen: 24 177.2.24.0/22 maxlen: 24 177.5.52.0/22 maxlen: 24 177.5.56.0/22 maxlen: 24 187.53.192.0/20 maxlen: 24 187.54.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Oct 13 03:52:24 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdaaf8-9e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:2a:59:05:60:5c:7f:b9:38:89:5c:aa:6a: 15:3c:21:bb:26:12:bd:9e:13:1d:69:20:c5:c5:2b: 20:53:33:54:0a:fc:f1:c9:0e:f1:04:89:a6:81:4f: 48:7e:b2:6f:7f:68:b1:8e:4f:47:17:77:5b:ec:5d: 87:76:52:92:60:13:6f:41:f3:ca:08:13:8b:fa:9e: 55:dd:2a:cb:e2:08:25:1c:42:d3:13:7a:d5:4e:dc: 3b:5f:92:0c:15:8f:8b:0a:32:3f:18:92:20:40:bf: 08:f5:a8:ad:9b:6c:93:50:70:9d:19:cb:f0:50:a4: 93:98:8e:81:a0:fd:21:e8:c5:7f:12:86:b5:35:88: 63:60:46:53:79:76:b2:be:6c:3b:ec:73:e8:77:4e: 64:1b:94:8e:e3:71:cb:ba:91:b7:99:ab:8c:b7:06: ba:58:aa:c3:c3:c3:52:6a:34:d7:4e:16:70:8f:43: 40:61:fa:1c:8e:88:f2:04:52:0b:1b:4b:d7:9e:f3: 92:3f:e5:a6:17:37:2c:2c:7e:0f:c2:c7:14:d5:cb: 25:1b:aa:7f:17:d4:7d:3b:4c:52:21:57:9b:5e:92: bb:f3:dd:13:ae:0b:d7:db:b2:15:5b:76:9a:b6:70: a8:60:33:bb:fd:17:33:48:36:be:fe:25:3f:b3:50: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:08:CB:46:57:9E:85:37:C1:93:70:96:D4:BD:01:3C:CA:83:14:FD X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.0.128.0/20 177.2.20.0-177.2.27.255 177.5.52.0-177.5.59.255 187.53.192.0/20 187.54.48.0/21 Signature Algorithm: sha256WithRSAEncryption aa:43:4a:ca:f2:87:72:37:d8:de:25:0b:c9:de:cb:7a:19:2b: 75:a2:a3:f6:46:d1:b3:c7:34:2f:cd:97:89:2a:c4:d9:8f:88: 09:d1:aa:bf:43:61:09:5d:c7:ca:56:0a:de:fb:10:a6:e2:15: c2:f6:01:9a:97:e1:26:3b:5c:0c:c9:e2:c5:d7:a4:14:0f:e1: 94:bf:95:ea:16:ad:3b:b5:7d:14:95:0c:f4:46:a2:f7:06:cc: e8:bc:2e:ae:a9:fc:a8:82:05:72:d7:23:56:fd:bc:8d:1e:29: 7b:89:9a:4f:a6:df:50:93:16:42:dc:f8:fc:26:d3:1b:a5:86: 0d:c5:a7:4b:68:b7:18:99:3c:44:79:31:fb:cf:10:87:c7:d7: 08:eb:fd:02:60:96:56:7e:55:be:77:16:87:b9:d3:dd:05:47: c6:8d:c2:79:88:ba:d4:df:76:05:54:36:be:f6:ef:78:8d:6e: a0:3d:e1:ce:f8:40:e8:a1:25:99:82:ba:19:b8:a2:56:4b:52: d6:e4:1d:df:0c:71:dc:1a:48:22:09:31:79:55:26:a4:62:de: 21:c3:11:22:a2:5c:53:f2:3d:db:2a:14:a7:98:3e:44:7a:7a: 63:81:80:73:d9:f7:e1:cc:d9:74:6d:85:73:c6:1c:01:ce:29: b5:0a:75:f5 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYxMDEzMDM1MjI0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYWFmOC05ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstMqWQVgXH+5OIlcqmoVPCG7JhK9nhMdaSDFxSsgUzNUCvzxyQ7xBImmgU9I frJvf2ixjk9HF3db7F2HdlKSYBNvQfPKCBOL+p5V3SrL4gglHELTE3rVTtw7X5IM FY+LCjI/GJIgQL8I9aitm2yTUHCdGcvwUKSTmI6BoP0h6MV/Eoa1NYhjYEZTeXay vmw77HPod05kG5SO43HLupG3mauMtwa6WKrDw8NSajTXThZwj0NAYfocjojyBFIL G0vXnvOSP+WmFzcsLH4PwscU1cslG6p/F9R9O0xSIVebXpK7890TrgvX27IVW3aa tnCoYDO7/RczSDa+/iU/s1AjjwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFOkIy0ZX noU3wZNwltS9ATzKgxT9MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvMDJDQjlGOUM4 MjlFMTFGMTg1MDA4RjAyNkFBMzBGQkMucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQEsQCAMAwDBAKxAhQDBAKxAhgwDAMEArEFNAMEArEFOAMEBLs1wAME A7s2MDANBgkqhkiG9w0BAQsFAAOCAQEAqkNKyvKHcjfY3iULyd7LehkrdaKj9kbR s8c0L82XiSrE2Y+ICdGqv0NhCV3HylYK3vsQpuIVwvYBmpfhJjtcDMnixdekFA/h lL+V6hatO7V9FJUM9Eai9wbM6Lwurqn8qIIFctcjVv28jR4pe4maT6bfUJMWQtz4 /CbTG6WGDcWnS2i3GJk8RHkx+88Qh8fXCOv9AmCWVn5VvncWh7nT3QVHxo3CeYi6 1N92BVQ2vvbveI1uoD3hzvhA6KElmYK6GbiiVktS1uQd3wxx3BpIIgkxeVUmpGLe IcMRIqJcU/I92yoUp5g+RHp6Y4GAc9n34czZdG2Fc8YcAc4ptQp19Q== -----END CERTIFICATE-----Generated at Sat Oct 24 11:15:49 2026 by rpki-client