$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa File: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (raw, json) Hash identifier: uPUDJcMn+77qq4YNPD5QVUSK18NhEBtKWjJ9Y3BdzRQ= Subject key identifier: C7:65:C1:F1:B7:BF:57:68:46:3A:A8:94:63:9A:E2:D2:19:C8:66:7E Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0814 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa Signing time: Tue 25 Aug 2026 07:41:51 +0000 ROA not before: Tue 25 Aug 2026 07:41:50 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 132203 IP address blocks: 129.226.0.0/23 maxlen: 23 129.226.96.0/23 maxlen: 23 129.226.144.0/20 maxlen: 20 129.226.152.0/24 maxlen: 24 162.62.48.0/20 maxlen: 24 162.62.64.0/20 maxlen: 24 162.62.80.0/20 maxlen: 23 162.62.96.0/19 maxlen: 24 162.62.128.0/19 maxlen: 24 162.62.208.0/20 maxlen: 20 162.62.208.0/23 maxlen: 23 162.62.255.0/24 maxlen: 24 170.106.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 21:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Aug 25 07:41:50 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a8d473e-3d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:d3:50:09:ec:66:06:c8:5f:77:8b:66:cd: ab:de:d4:f9:2f:e7:45:d7:71:82:37:d9:ba:fc:ba: b3:97:96:d9:96:14:96:21:5b:8e:31:7e:be:ab:76: be:52:b6:ba:fc:6c:24:af:e6:4d:e8:7b:ec:7a:ec: e3:8f:d2:de:9c:3c:eb:c8:88:f4:38:03:60:d8:0b: 02:e7:b9:13:a2:94:7f:00:5e:af:74:0c:e5:7d:fa: 5d:42:22:ee:83:75:a2:ba:f6:86:42:4a:dc:d7:14: d1:fd:89:dd:60:e6:f0:f7:8e:d8:70:35:da:ab:8d: de:5c:0d:c2:5e:37:3f:7a:05:2d:03:f7:bc:3d:77: 28:57:f8:81:ca:58:d2:4b:40:fe:ab:32:90:ad:f9: 3a:e6:79:de:1a:f1:58:b4:00:68:ac:19:73:a6:2f: b7:b9:ec:46:45:b5:ca:09:44:57:b8:6c:74:79:81: 42:f1:8d:6f:4f:58:a9:87:b5:be:c5:3c:58:6a:a2: c9:65:ec:d8:07:78:70:6a:0c:8f:e8:59:20:d9:08: 42:c3:46:04:dc:ed:17:11:cd:58:4f:95:7b:72:32: 0e:80:0d:a6:0e:b4:a8:c1:f2:2b:c0:56:3e:76:c1: c6:ac:7b:1b:4d:bf:02:78:66:ee:e3:0f:75:6b:0e: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:C1:F1:B7:BF:57:68:46:3A:A8:94:63:9A:E2:D2:19:C8:66:7E X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 129.226.0.0/23 129.226.96.0/23 129.226.144.0/20 162.62.48.0-162.62.159.255 162.62.208.0/20 162.62.255.0/24 170.106.149.0/24 Signature Algorithm: sha256WithRSAEncryption 22:20:a8:3a:50:ff:0b:5f:ec:41:7e:5a:c9:80:d5:e1:b4:53: 29:24:f0:21:c5:a4:70:b2:1b:95:68:80:7e:e9:5e:40:23:5b: 78:c0:0b:7d:de:d1:21:37:9b:81:f0:d1:8f:9e:86:76:82:df: de:ce:73:3b:e0:bb:22:cb:81:97:e4:11:c7:65:12:74:c4:11: 75:dc:02:94:0d:a6:d3:74:ff:01:dd:38:b9:b5:d2:a5:01:b9: 96:57:d8:85:2f:9e:fd:93:27:b5:cb:29:c9:4f:08:df:cc:3f: 79:3b:19:30:d0:41:7b:d4:38:ef:16:e7:2b:88:36:6b:c7:40: ff:4e:fc:d8:a3:6c:e2:fe:37:a8:ff:75:f3:a9:ec:39:e8:15: 13:c4:bf:03:f3:d6:b0:94:da:70:84:e3:7f:6e:da:ab:48:cd: 99:16:92:85:66:1c:80:5c:16:4a:83:0f:49:ff:6f:84:eb:e0: 49:e7:18:4f:a2:a1:7b:22:3a:b6:4f:5a:10:3d:81:6d:8b:87: bf:ac:5e:d8:f6:53:86:d8:62:11:9c:ba:c4:94:18:ac:b5:c6: d2:a1:1e:89:1a:37:28:02:a3:0f:06:f1:44:28:64:38:bc:44: 23:61:57:ae:a0:00:ac:be:09:db:4a:82:13:10:26:bc:18:cf: 7d:33:b5:a8 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjYwODI1MDc0MTUwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThkNDczZS0zZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQjTUAnsZgbIX3eLZs2r3tT5L+dF13GCN9m6/Lqzl5bZlhSWIVuOMX6+q3a+ Ura6/Gwkr+ZN6Hvseuzjj9LenDzryIj0OANg2AsC57kTopR/AF6vdAzlffpdQiLu g3WiuvaGQkrc1xTR/YndYObw947YcDXaq43eXA3CXjc/egUtA/e8PXcoV/iByljS S0D+qzKQrfk65nneGvFYtABorBlzpi+3uexGRbXKCURXuGx0eYFC8Y1vT1iph7W+ xTxYaqLJZezYB3hwagyP6Fkg2QhCw0YE3O0XEc1YT5V7cjIOgA2mDrSowfIrwFY+ dsHGrHsbTb8CeGbu4w91aw5oKQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFMdlwfG3 v1doRjqolGOa4tIZyGZ+MB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjAyODY2Mzg0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQUEzQTk0NEEy N0VBMTFFQ0IxRUJFQTgyQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4 BAIAATAyAwQBgeIAAwQBgeJgAwQEgeKQMAwDBASiPjADBAWiPoADBASiPtADBACi Pv8DBACqapUwDQYJKoZIhvcNAQELBQADggEBACIgqDpQ/wtf7EF+WsmA1eG0Uykk 8CHFpHCyG5VogH7pXkAjW3jAC33e0SE3m4Hw0Y+ehnaC397OczvguyLLgZfkEcdl EnTEEXXcApQNptN0/wHdOLm10qUBuZZX2IUvnv2TJ7XLKclPCN/MP3k7GTDQQXvU OO8W5yuINmvHQP9O/NijbOL+N6j/dfOp7DnoFRPEvwPz1rCU2nCE439u2qtIzZkW koVmHIBcFkqDD0n/b4Tr4EnnGE+ioXsiOrZPWhA9gW2Lh7+sXtj2U4bYYhGcusSU GKy1xtKhHokaNygCow8G8UQoZDi8RCNhV66gAKy+CdtKghMQJrwYz30ztag= -----END CERTIFICATE-----Generated at Sat Sep 5 08:22:17 2026 by rpki-client