$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa File: FC86F6E896C711F1AEEE8D0A5411F970.roa (raw, json) Hash identifier: gs8LWtuaJDn73nnNuLblraD3PqzDoJFcNXW6IRnjZXY= Subject key identifier: 76:8E:23:AD:EF:30:70:F7:53:47:0C:B6:E1:10:89:3C:7C:2A:43:7F Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 1167 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa Signing time: Tue 25 Aug 2026 07:25:53 +0000 ROA not before: Tue 25 Aug 2026 07:25:53 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132203 IP address blocks: 142.86.0.0/17 maxlen: 18 142.86.128.0/18 maxlen: 24 161.120.0.0/17 maxlen: 18 161.120.128.0/19 maxlen: 20 161.120.128.0/23 maxlen: 24 161.120.160.0/19 maxlen: 19 161.120.160.0/20 maxlen: 20 161.120.160.0/23 maxlen: 24 161.120.170.0/23 maxlen: 24 161.120.176.0/20 maxlen: 20 161.120.192.0/19 maxlen: 19 161.120.224.0/19 maxlen: 19 162.14.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4455 (0x1167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Aug 25 07:25:53 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a8d4381-dbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:0d:7f:82:7c:21:37:9a:3b:78:dc:2c:64: c2:bd:22:1a:92:b1:f9:ef:c6:f2:14:51:dd:9c:6c: e5:ee:09:c1:cc:04:d6:2a:5a:12:a0:9b:32:e0:0c: fc:b6:90:bc:59:e0:3c:52:9e:8e:00:00:f3:2a:5f: 86:e2:ab:e6:e2:98:bc:21:42:6c:23:44:4b:e5:bc: bb:d8:70:45:3f:dd:0f:fc:5b:ba:d9:86:a3:80:78: ed:cd:89:76:b6:7f:6f:f5:34:34:35:0a:aa:be:11: 98:30:be:f3:8d:7a:eb:23:42:f9:e4:52:00:ad:fa: 9a:fa:0b:4f:1b:43:16:9c:3f:c5:ba:93:c1:2a:f1: 7c:34:7a:37:fb:09:b2:97:15:09:30:d3:09:e3:fa: 5a:d5:f9:d1:ce:eb:10:4d:04:4d:3c:eb:97:ae:93: e7:1c:e4:5e:8a:87:60:78:2c:47:c3:ed:fe:54:ad: 16:36:e3:b7:80:5c:48:f0:5d:41:31:e7:9d:4d:6f: 94:50:f2:df:03:9b:76:9f:03:8d:8f:de:8f:c8:bd: f2:ec:3a:6c:7a:b6:61:f3:73:84:95:d1:30:bf:45: f1:36:c0:92:f8:f2:60:55:c5:a4:17:c7:49:60:59: 9d:1e:1f:13:3d:83:27:9a:dd:ef:fb:1c:42:17:f6: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:23:AD:EF:30:70:F7:53:47:0C:B6:E1:10:89:3C:7C:2A:43:7F X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa sbgp-ipAddrBlock: critical IPv4: 142.86.0.0-142.86.191.255 161.120.0.0/16 162.14.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:66:8f:c7:a1:80:d2:a4:fb:81:25:5f:57:7d:e5:7b:44:17: 4c:13:1d:60:5c:f5:11:e9:82:c5:79:28:8c:15:8f:27:b4:87: d9:db:52:1a:fd:86:d0:5f:4f:fc:1a:7d:72:ca:cb:87:37:4e: 0c:8f:4e:7e:56:62:04:fc:6c:fb:d8:67:85:50:54:aa:46:c9: cd:49:54:52:b8:1a:fc:25:93:f9:0f:d4:fd:9f:b6:25:1f:f8: 49:11:15:ff:be:d2:33:f9:17:9f:e0:11:88:5c:2c:53:2e:25: 1d:a3:13:8f:52:b9:05:6d:81:e0:ad:6e:59:0f:e2:e8:2e:97: 80:17:9c:50:52:fe:ce:0d:27:57:93:d3:8b:05:4a:b0:fa:1c: 1b:d2:5c:70:b8:88:ff:9f:d3:27:02:80:75:99:32:5b:05:21: 7a:be:77:cd:ae:c3:50:02:c0:1a:c6:13:ce:6e:14:d8:7f:35: e3:2a:64:ab:9c:d1:6e:e1:d4:16:05:6d:94:cc:c4:7a:34:91: b5:ea:66:54:52:e5:50:eb:ec:07:e2:1c:34:7a:58:6c:ec:4c: 83:c9:9b:6f:7b:24:4f:01:0f:f7:15:28:f1:23:8e:66:13:08: 4c:57:d8:29:87:73:f3:75:2d:0a:85:27:db:68:fc:7b:15:99: 4f:3e:40:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICEWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYwODI1MDcyNTUzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThkNDM4MS1kYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBINf4J8ITeaO3jcLGTCvSIakrH578byFFHdnGzl7gnBzATWKloSoJsy4Az8 tpC8WeA8Up6OAADzKl+G4qvm4pi8IUJsI0RL5by72HBFP90P/Fu62YajgHjtzYl2 tn9v9TQ0NQqqvhGYML7zjXrrI0L55FIArfqa+gtPG0MWnD/FupPBKvF8NHo3+wmy lxUJMNMJ4/pa1fnRzusQTQRNPOuXrpPnHOReiodgeCxHw+3+VK0WNuO3gFxI8F1B MeedTW+UUPLfA5t2nwONj96PyL3y7DpserZh83OEldEwv0XxNsCS+PJgVcWkF8dJ YFmdHh8TPYMnmt3v+xxCF/bL+wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHaOI63v MHD3U0cMtuEQiTx8KkN/MB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA5NzQvRTEwNUIzQkEzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvRkM4NkY2RTg5 NkM3MTFGMUFFRUU4RDBBNTQxMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYMAsDAwGOVgMEBo5WgAMDAKF4AwQCog48MA0GCSqGSIb3DQEBCwUAA4IB AQBsZo/HoYDSpPuBJV9XfeV7RBdMEx1gXPUR6YLFeSiMFY8ntIfZ21Ia/YbQX0/8 Gn1yysuHN04Mj05+VmIE/Gz72GeFUFSqRsnNSVRSuBr8JZP5D9T9n7YlH/hJERX/ vtIz+Ref4BGIXCxTLiUdoxOPUrkFbYHgrW5ZD+LoLpeAF5xQUv7ODSdXk9OLBUqw +hwb0lxwuIj/n9MnAoB1mTJbBSF6vnfNrsNQAsAaxhPObhTYfzXjKmSrnNFu4dQW BW2UzMR6NJG16mZUUuVQ6+wH4hw0elhs7EyDyZtveyRPAQ/3FSjxI45mEwhMV9gp h3PzdS0KhSfbaPx7FZlPPkDf -----END CERTIFICATE-----Generated at Sat Sep 5 08:56:34 2026 by rpki-client