$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa File: FC86F6E896C711F1AEEE8D0A5411F970.roa (raw, json) Hash identifier: +vGOfCr2DEhlj08hRjpnXIruWDVaqxVVGeLxooBz6Tk= Subject key identifier: F6:47:33:54:94:B0:F5:55:56:03:8A:A9:BA:FF:96:CF:93:75:75:8E Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 118A Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa Signing time: Wed 14 Oct 2026 11:24:15 +0000 ROA not before: Wed 14 Oct 2026 11:24:15 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132203 IP address blocks: 142.86.0.0/17 maxlen: 18 142.86.128.0/18 maxlen: 24 142.86.192.0/22 maxlen: 24 142.86.196.0/22 maxlen: 24 149.41.0.0/18 maxlen: 24 149.41.64.0/18 maxlen: 24 149.41.128.0/18 maxlen: 24 149.41.224.0/20 maxlen: 24 149.41.240.0/20 maxlen: 24 161.120.0.0/17 maxlen: 18 161.120.128.0/19 maxlen: 20 161.120.128.0/23 maxlen: 24 161.120.160.0/19 maxlen: 19 161.120.160.0/20 maxlen: 20 161.120.160.0/23 maxlen: 24 161.120.170.0/23 maxlen: 24 161.120.176.0/20 maxlen: 20 161.120.192.0/19 maxlen: 19 161.120.224.0/19 maxlen: 19 162.14.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4490 (0x118a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Oct 14 11:24:15 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6acf665f-930b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:88:fc:67:76:97:7f:fa:21:3d:1d:a2:88: 5a:6f:98:40:57:f6:68:7b:10:b4:b7:df:08:6f:c3: 79:66:6a:41:f9:a9:88:cf:8c:73:11:d9:ac:f1:55: b3:03:e6:35:0c:bc:90:42:f8:5f:13:a4:52:17:ca: 10:ea:be:98:e3:99:9c:77:68:8a:38:21:75:a4:85: 54:c3:f6:cf:2c:c3:d2:5b:94:f2:8c:5d:24:9a:45: b2:a7:69:6d:e6:07:a9:36:9b:19:aa:ca:2e:3c:14: c6:69:44:a7:52:70:8b:ee:cf:7e:83:64:1d:7e:6b: 9d:d6:5b:ad:5d:b8:c3:88:72:3b:3d:05:c1:ef:77: b1:08:a7:75:f5:24:df:49:91:24:12:76:ad:3b:af: 92:2c:57:f7:81:c3:58:8e:a3:bc:c1:b6:9d:c2:79: 3f:4e:f3:a7:86:d1:97:5d:cf:e6:c7:b2:ea:1a:72: bb:65:3b:0c:f4:0e:99:c7:46:1f:4b:71:b0:05:bc: e5:8b:dd:0a:ff:10:f9:a1:7e:8a:81:e8:08:28:5c: be:ee:4c:1f:d7:14:18:de:50:e1:5c:08:ce:62:5d: 58:d4:8a:31:38:63:ce:6c:98:2e:b6:1e:b6:3f:25: 84:b2:d7:56:cb:3e:99:0b:d0:6e:97:5f:a7:5d:3f: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:33:54:94:B0:F5:55:56:03:8A:A9:BA:FF:96:CF:93:75:75:8E X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa sbgp-ipAddrBlock: critical IPv4: 142.86.0.0-142.86.199.255 149.41.0.0-149.41.191.255 149.41.224.0/19 161.120.0.0/16 162.14.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:ae:f7:54:48:2e:e4:15:2b:8e:05:c6:14:56:16:ec:b7:a7: 1d:07:ee:9e:9f:a5:42:e3:27:e0:32:44:1f:c2:0c:6b:2e:ca: a0:d3:29:f8:27:f3:f8:64:01:8e:f5:74:62:5b:b7:5b:8e:ee: 8d:ab:3d:7b:2c:ff:09:75:92:c6:75:37:66:b4:9c:f3:38:ec: 38:f3:1c:53:c3:7e:5d:ed:3e:b4:51:a8:f2:41:8d:5c:6f:d5: ab:02:22:16:24:24:f3:df:6d:2c:35:e8:b2:5c:6f:32:20:52: b0:b5:ec:55:3f:92:1b:cd:83:a2:b4:c2:d2:e0:df:0f:9b:cf: 99:c2:53:2b:a6:6e:70:29:bf:14:c4:8f:4c:60:e0:47:50:39: 10:7e:e5:0c:33:10:e7:d0:03:2d:7d:ef:65:ea:9f:2d:1c:4b: 90:0b:13:b7:35:e0:91:fd:56:b1:e5:81:62:a4:f8:ab:e9:64: 5b:ef:2c:e7:12:48:44:29:96:de:fa:09:0e:de:6e:f1:50:1e: 64:c9:db:79:51:4a:17:73:97:f2:c1:85:b6:a7:fd:1c:83:1a: 66:ec:65:1b:26:ec:bb:a5:54:08:d3:35:8d:d8:be:0b:56:c3: 18:6b:7c:ca:4b:67:dd:ab:f4:b1:c8:00:ff:71:b9:e2:da:cd: 3d:44:05:65 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICEYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYxMDE0MTEyNDE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNmNjY1Zi05MzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwCI/Gd2l3/6IT0doohab5hAV/ZoexC0t98Ib8N5ZmpB+amIz4xzEdms8VWz A+Y1DLyQQvhfE6RSF8oQ6r6Y45mcd2iKOCF1pIVUw/bPLMPSW5TyjF0kmkWyp2lt 5gepNpsZqsouPBTGaUSnUnCL7s9+g2Qdfmud1lutXbjDiHI7PQXB73exCKd19STf SZEkEnatO6+SLFf3gcNYjqO8wbadwnk/TvOnhtGXXc/mx7LqGnK7ZTsM9A6Zx0Yf S3GwBbzli90K/xD5oX6KgegIKFy+7kwf1xQY3lDhXAjOYl1Y1IoxOGPObJguth62 PyWEstdWyz6ZC9Bul1+nXT84mwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFPZHM1SU sPVVVgOKqbr/ls+TdXWOMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA5NzQvRTEwNUIzQkEzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvRkM4NkY2RTg5 NkM3MTFGMUFFRUU4RDBBNTQxMUY5NzAucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAx BAIAATArMAsDAwGOVgMEA45WwDALAwMAlSkDBAaVKYADBAWVKeADAwCheAMEAqIO PDANBgkqhkiG9w0BAQsFAAOCAQEAbK73VEgu5BUrjgXGFFYW7LenHQfunp+lQuMn 4DJEH8IMay7KoNMp+Cfz+GQBjvV0Ylu3W47ujas9eyz/CXWSxnU3ZrSc8zjsOPMc U8N+Xe0+tFGo8kGNXG/VqwIiFiQk899tLDXoslxvMiBSsLXsVT+SG82DorTC0uDf D5vPmcJTK6ZucCm/FMSPTGDgR1A5EH7lDDMQ59ADLX3vZeqfLRxLkAsTtzXgkf1W seWBYqT4q+lkW+8s5xJIRCmW3voJDt5u8VAeZMnbeVFKF3OX8sGFtqf9HIMaZuxl Gybsu6VUCNM1jdi+C1bDGGt8yktn3av0scgA/3G54trNPUQFZQ== -----END CERTIFICATE-----Generated at Wed Oct 28 11:51:45 2026 by rpki-client