$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa File: 02CB9F9C829E11F185008F026AA30FBC.roa (raw, json) Hash identifier: yha/Pvgltg13jTcaFGt6OfhkmQpW0p7X2QJweaAkVzI= Subject key identifier: 0A:E4:05:9C:A6:2F:EE:8D:6A:6E:1D:9D:6A:F4:1F:55:E4:D9:38:DF Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 0161 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa Signing time: Sat 18 Jul 2026 11:46:17 +0000 ROA not before: Sat 18 Jul 2026 11:46:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 400618 IP address blocks: 177.0.128.0/20 maxlen: 24 177.2.20.0/22 maxlen: 24 177.2.24.0/22 maxlen: 24 177.5.52.0/22 maxlen: 24 177.5.56.0/22 maxlen: 24 187.53.192.0/20 maxlen: 24 187.54.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 18 11:46:17 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5b6789-b799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:ef:c2:76:53:ac:b2:20:40:1d:c1:02:91: ba:08:82:63:29:fb:7d:ae:80:84:f5:74:76:d0:c7: 99:57:45:01:3a:e1:2f:5e:54:2b:63:fd:f6:8f:51: 26:2d:ba:c0:98:0e:46:34:34:b8:44:08:68:c8:bc: e7:c6:05:c6:0d:5f:f0:56:10:67:83:14:2d:0e:77: 3a:d9:05:06:86:c3:ec:31:a6:17:53:08:bd:d0:1c: 1b:19:c9:94:8b:77:33:84:c6:61:94:05:cc:20:9f: 8e:df:64:f7:41:d2:57:ce:a5:38:3a:f3:19:fe:58: 01:3a:95:88:99:91:9b:09:ec:cc:a7:2f:e9:e5:60: b4:2c:5c:50:53:d3:24:9a:be:a7:18:4d:8d:16:3d: 48:94:6c:34:16:ab:de:5e:9e:62:94:e2:07:96:5f: 33:37:26:18:fc:c7:1d:7f:b3:f7:4e:fd:bd:04:d6: 95:cd:08:b4:ee:29:d4:27:7e:30:13:a6:dc:88:5a: 79:3f:1c:10:22:28:bc:67:49:08:5f:1f:12:98:2e: bf:b5:ab:84:f9:45:7d:36:c0:7d:8e:0c:a5:45:7c: 74:43:48:41:5c:63:61:1c:cc:ca:f3:47:fe:b1:ba: 14:17:9a:5c:0c:18:35:19:63:bc:5a:83:33:3d:e1: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:05:9C:A6:2F:EE:8D:6A:6E:1D:9D:6A:F4:1F:55:E4:D9:38:DF X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/02CB9F9C829E11F185008F026AA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.0.128.0/20 177.2.20.0-177.2.27.255 177.5.52.0-177.5.59.255 187.53.192.0/20 187.54.48.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:41:67:e0:0b:d8:c5:c9:be:a3:d3:30:1a:56:2d:83:8e:f5: 84:52:ef:1b:df:7e:8b:be:63:c1:aa:4d:6f:86:c5:8e:6e:f2: a8:0b:33:1d:68:90:f9:b3:ed:b1:5a:e8:8e:5f:31:f5:61:32: ae:f0:5e:b0:4d:45:10:1d:14:38:30:5d:53:10:ee:06:d1:18: e2:2f:a3:db:0c:ed:f1:a0:a2:c5:ea:33:12:d9:c9:6b:85:cb: 81:c1:ff:8b:ee:a4:b4:99:84:f4:29:03:ee:de:ef:af:ac:ec: 97:79:b9:b8:d8:ac:e3:91:fc:c0:18:ac:a8:96:69:18:69:3f: 92:7c:e0:e6:33:1b:02:80:e1:d3:a0:75:4d:fb:8e:a3:ce:00: 2b:0b:7d:d0:cb:07:6b:42:44:42:67:d9:5c:9f:07:2f:ea:b1: 32:11:dc:d4:d1:96:36:04:be:f0:59:31:f4:ae:d4:0b:a5:34: f1:8d:45:aa:73:38:f7:cb:dc:6c:87:88:f9:3e:9c:45:39:c2: de:30:f4:43:db:d1:18:b1:26:5f:3b:67:10:1d:55:b5:93:96: 51:e6:69:b4:2f:66:54:1e:4f:c8:a5:e7:34:2a:0e:7a:14:8d: 5d:d4:84:91:85:af:b2:c0:e0:95:10:3d:a6:f9:09:9d:a5:ae: 14:e4:a0:7e -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzE4MTE0NjE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTViNjc4OS1iNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQbvwnZTrLIgQB3BApG6CIJjKft9roCE9XR20MeZV0UBOuEvXlQrY/32j1Em LbrAmA5GNDS4RAhoyLznxgXGDV/wVhBngxQtDnc62QUGhsPsMaYXUwi90BwbGcmU i3czhMZhlAXMIJ+O32T3QdJXzqU4OvMZ/lgBOpWImZGbCezMpy/p5WC0LFxQU9Mk mr6nGE2NFj1IlGw0FqveXp5ilOIHll8zNyYY/Mcdf7P3Tv29BNaVzQi07inUJ34w E6bciFp5PxwQIii8Z0kIXx8SmC6/tauE+UV9NsB9jgylRXx0Q0hBXGNhHMzK80f+ sboUF5pcDBg1GWO8WoMzPeGYbwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFArkBZym L+6Nam4dnWr0H1Xk2TjfMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvMDJDQjlGOUM4 MjlFMTFGMTg1MDA4RjAyNkFBMzBGQkMucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0 BAIAATAuAwQEsQCAMAwDBAKxAhQDBAKxAhgwDAMEArEFNAMEArEFOAMEBLs1wAME A7s2MDANBgkqhkiG9w0BAQsFAAOCAQEAnEFn4AvYxcm+o9MwGlYtg471hFLvG99+ i75jwapNb4bFjm7yqAszHWiQ+bPtsVrojl8x9WEyrvBesE1FEB0UODBdUxDuBtEY 4i+j2wzt8aCixeozEtnJa4XLgcH/i+6ktJmE9CkD7t7vr6zsl3m5uNis45H8wBis qJZpGGk/knzg5jMbAoDh06B1TfuOo84AKwt90MsHa0JEQmfZXJ8HL+qxMhHc1NGW NgS+8Fkx9K7UC6U08Y1FqnM498vcbIeI+T6cRTnC3jD0Q9vRGLEmXztnEB1VtZOW UeZptC9mVB5PyKXnNCoOehSNXdSEkYWvssDglRA9pvkJnaWuFOSgfg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:20:24 2026 by rpki-client