$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa File: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (raw, json) Hash identifier: hcKRdUWFaZGYBF8VFWUbhmuLm8Ets1IhBYKNdVYBLqo= Subject key identifier: 5F:B6:DD:88:CB:B8:66:A2:F9:8F:C7:AE:64:F8:AE:E5:9C:98:BE:8A Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 07FC Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa Signing time: Thu 16 Jul 2026 22:22:52 +0000 ROA not before: Thu 16 Jul 2026 22:22:52 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132203 IP address blocks: 129.226.144.0/20 maxlen: 20 129.226.152.0/24 maxlen: 24 162.62.48.0/20 maxlen: 24 162.62.64.0/20 maxlen: 24 162.62.80.0/20 maxlen: 23 162.62.96.0/19 maxlen: 24 162.62.128.0/19 maxlen: 24 162.62.208.0/20 maxlen: 20 162.62.255.0/24 maxlen: 24 170.106.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Jul 16 22:22:52 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a5959bc-02bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:9b:9c:35:95:0a:d6:15:25:46:cb:e4:3d: c9:cd:28:af:88:f4:46:b1:44:3a:fe:69:ef:a1:d4: b1:57:0d:57:0f:d9:31:7c:b2:f4:6b:72:36:59:2b: bf:6b:41:df:f3:4c:2d:c8:31:19:be:7c:6f:e7:f2: bc:80:50:5d:c3:10:ea:d5:4e:2d:e0:d7:86:f1:94: 4e:0e:4f:35:26:33:dd:08:07:81:e4:eb:50:84:ad: 39:d5:f5:e8:cd:ce:a8:22:18:17:08:17:85:dc:c6: 8c:ec:fe:0f:20:22:18:74:5c:18:e4:1e:cd:57:7e: d3:ec:b8:12:13:7f:da:c1:5f:95:27:ee:58:37:e7: 60:ba:bb:b0:8e:a2:d5:ff:49:0b:50:92:d4:6c:b6: 61:0e:84:d6:df:7c:08:76:74:1a:fa:a9:b0:b1:56: db:7d:8e:4d:5c:da:b4:bc:e1:ad:3e:d0:79:b5:80: 1e:29:a3:25:20:99:2e:50:f4:16:b1:8a:8e:a8:f4: eb:20:05:22:4b:54:6f:39:ac:1f:77:f0:52:3c:8b: b2:61:e3:42:89:d7:b0:d0:d9:ba:82:f4:5d:8d:43: 39:92:df:d7:8a:b4:d8:e2:1f:70:86:6d:b2:9e:99: 64:bc:cc:56:66:95:57:2f:af:3d:51:81:f2:99:ba: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:DD:88:CB:B8:66:A2:F9:8F:C7:AE:64:F8:AE:E5:9C:98:BE:8A X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 129.226.144.0/20 162.62.48.0-162.62.159.255 162.62.208.0/20 162.62.255.0/24 170.106.149.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:0f:e2:fe:01:67:db:0d:2c:4a:30:3f:0d:28:b0:0b:44:a3: 9d:5a:6a:c2:69:1e:44:cc:a5:68:93:64:bc:4d:b4:c3:c2:2f: 28:64:e9:ba:89:60:4d:41:1a:32:3d:82:08:9d:4a:28:9c:f7: 22:81:06:d2:2e:d9:78:e2:e3:18:36:d6:e8:00:f5:3a:b3:ed: ce:a5:66:e1:50:47:ce:29:d9:ff:bd:79:ee:70:96:74:f5:98: 41:d3:a8:8e:27:88:90:d9:33:1f:61:b9:bf:c4:56:b9:1e:09: 43:25:96:58:af:70:36:91:7b:66:9f:aa:3f:56:e3:94:1b:8b: a7:1a:5b:7d:b7:92:6a:28:54:6d:a1:ec:82:04:80:77:b7:d5: 9f:c0:51:8e:c2:e1:4b:b5:5c:62:25:e9:20:04:3d:69:48:15: ce:53:43:09:31:f9:fa:14:6a:82:59:06:d5:10:f6:c8:53:36: 6f:47:58:e1:14:6c:63:39:07:d7:4c:11:d7:18:08:6c:4f:e1: 4a:52:64:b2:a1:ff:34:42:e7:57:f7:79:72:1e:56:ff:13:f8: c6:69:71:d9:9a:c9:13:0c:ff:00:e1:11:19:ae:d4:b1:72:d9: 0b:94:d5:db:33:54:f0:1c:ea:ab:da:fa:24:ea:93:08:19:69: db:f4:01:21 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjYwNzE2MjIyMjUyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU5NTliYy0wMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoCbnDWVCtYVJUbL5D3JzSiviPRGsUQ6/mnvodSxVw1XD9kxfLL0a3I2WSu/ a0Hf80wtyDEZvnxv5/K8gFBdwxDq1U4t4NeG8ZRODk81JjPdCAeB5OtQhK051fXo zc6oIhgXCBeF3MaM7P4PICIYdFwY5B7NV37T7LgSE3/awV+VJ+5YN+dguruwjqLV /0kLUJLUbLZhDoTW33wIdnQa+qmwsVbbfY5NXNq0vOGtPtB5tYAeKaMlIJkuUPQW sYqOqPTrIAUiS1RvOawfd/BSPIuyYeNCidew0Nm6gvRdjUM5kt/XirTY4h9whm2y nplkvMxWZpVXL689UYHymbq+QwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFF+23YjL uGai+Y/HrmT4ruWcmL6KMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjAyODY2Mzg0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQUEzQTk0NEEy N0VBMTFFQ0IxRUJFQTgyQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQEgeKQMAwDBASiPjADBAWiPoADBASiPtADBACiPv8DBACqapUwDQYJ KoZIhvcNAQELBQADggEBAHoP4v4BZ9sNLEowPw0osAtEo51aasJpHkTMpWiTZLxN tMPCLyhk6bqJYE1BGjI9ggidSiic9yKBBtIu2Xji4xg21ugA9Tqz7c6lZuFQR84p 2f+9ee5wlnT1mEHTqI4niJDZMx9hub/EVrkeCUMlllivcDaRe2afqj9W45Qbi6ca W323kmooVG2h7IIEgHe31Z/AUY7C4Uu1XGIl6SAEPWlIFc5TQwkx+foUaoJZBtUQ 9shTNm9HWOEUbGM5B9dMEdcYCGxP4UpSZLKh/zRC51f3eXIeVv8T+MZpcdmayRMM /wDhERmu1LFy2QuU1dszVPAc6qva+iTqkwgZadv0ASE= -----END CERTIFICATE-----Generated at Wed Jul 22 00:11:37 2026 by rpki-client