$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/93D240467ABE11F18A7AD4526AA30FBC.roa File: 93D240467ABE11F18A7AD4526AA30FBC.roa (raw, json) Hash identifier: w1g0+OCm5KdHfXk1uQN4NK1n9UsJBgBEWbSV3G4nl+0= Subject key identifier: 73:28:08:5F:1E:8C:E4:4D:A5:DA:BB:BC:70:29:2C:89:14:60:8F:09 Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Certificate serial: 44 Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/93D240467ABE11F18A7AD4526AA30FBC.roa Signing time: Wed 05 Aug 2026 07:05:45 +0000 ROA not before: Wed 05 Aug 2026 07:05:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142200 IP address blocks: 9.176.0.0/16 maxlen: 16 9.176.128.0/20 maxlen: 20 9.176.144.0/20 maxlen: 20 9.176.160.0/20 maxlen: 20 9.176.176.0/20 maxlen: 20 9.176.192.0/20 maxlen: 20 9.176.208.0/20 maxlen: 20 9.176.224.0/20 maxlen: 20 9.176.240.0/20 maxlen: 20 67.19.0.0/16 maxlen: 16 74.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08 Validity Not Before: Aug 5 07:05:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a72e0c9-4462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:93:84:4c:49:b4:4c:3b:0a:c0:a4:2f:d5: b3:78:25:eb:f3:38:f7:ff:ae:c6:87:8c:1d:57:76: ba:f4:d2:ba:f2:a5:0d:d8:d1:8f:22:fd:65:ec:dc: d1:9b:bf:80:07:df:0f:70:32:49:86:63:95:15:c4: 6a:9a:cb:58:32:29:d5:a7:b3:62:28:88:cd:e7:56: cf:61:ab:3f:d7:b4:7b:55:f4:dd:ae:e8:e5:1d:e8: 25:f4:6e:4f:ec:12:8b:95:f2:ac:f7:38:75:b9:65: 2f:e5:46:85:d3:2f:a7:f0:29:fb:be:37:e6:4f:87: 78:af:f3:fe:bc:c8:46:42:cb:8b:c1:21:c2:66:34: 16:e6:41:e1:bc:e6:70:a0:0d:cb:35:29:93:bf:91: 67:71:5f:02:e9:b8:2a:32:27:0e:48:1c:ee:fc:6c: b4:53:3b:2d:6f:8e:38:d0:d3:0d:5b:eb:8d:67:2b: 73:a1:c8:bc:65:f9:e2:34:da:4f:c8:f2:50:99:e7: e1:9b:b1:b5:f6:25:07:24:87:d3:12:35:c8:a5:ad: 09:90:6f:21:62:b1:e7:18:3b:07:2f:20:50:a0:ed: 7f:c5:4a:2a:a9:46:f2:0f:3f:bb:12:a7:74:69:b9: 62:ff:b9:e8:2f:5b:a5:6c:ce:d9:00:14:e3:d6:b7: ef:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:08:5F:1E:8C:E4:4D:A5:DA:BB:BC:70:29:2C:89:14:60:8F:09 X509v3 Authority Key Identifier: keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/93D240467ABE11F18A7AD4526AA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 9.176.0.0/16 67.19.0.0/16 74.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:d5:3b:ff:e9:91:69:05:ec:84:db:a3:8f:51:9c:2e:47:03: f1:55:06:ef:28:8e:f7:1d:02:71:f5:ed:8b:3d:c5:61:5b:21: e0:dd:54:9e:98:35:60:6b:a9:12:47:ee:3c:a9:52:71:8b:bd: 66:5e:d8:db:66:98:a8:db:1d:bb:e7:89:74:91:70:e6:6e:05: 49:3b:5d:8d:34:f3:a6:f9:32:6b:ac:7f:e2:a6:f3:06:2e:07: 6f:2c:c6:4d:f4:e4:4c:56:3b:e7:26:0d:00:8e:0b:36:df:75: 36:34:ae:d7:b4:18:0b:65:b4:b1:35:8a:f8:14:11:61:99:a9: 35:a7:32:37:52:5e:e7:46:fb:ee:1d:fa:18:4b:87:74:0b:6d: 25:2d:ca:30:6e:f5:ea:18:87:aa:fe:1b:ca:a0:bf:8b:7f:75: a2:59:a4:9c:7a:7e:e0:95:03:67:a4:e7:23:af:5d:df:38:c7: 3e:0a:98:5c:d3:3d:cd:d2:a7:44:f9:7d:f3:13:c7:f9:c2:bd: 1f:0c:b0:09:54:29:f3:0d:3c:d8:d2:d4:2d:f5:5c:da:ec:ec: 7a:14:5e:aa:09:48:aa:d6:35:3b:a9:3f:48:41:8e:38:96:27: 3c:a2:78:92:ac:a4:a2:47:39:06:b1:30:aa:c5:dd:cd:be:5f: 71:3c:e0:4b -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjM1ODExMC8GA1UEBRMoQ0RDMTMxODUwQTI1RjBDQ0RGQzlCOUI5Q0M4RUU2NEMz QUZBNkQwODAeFw0yNjA4MDUwNzA1NDVaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzJlMGM5LTQ0NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQxpOETEm0TDsKwKQv1bN4JevzOPf/rsaHjB1Xdrr00rrypQ3Y0Y8i/WXs3NGb v4AH3w9wMkmGY5UVxGqay1gyKdWns2IoiM3nVs9hqz/XtHtV9N2u6OUd6CX0bk/s EouV8qz3OHW5ZS/lRoXTL6fwKfu+N+ZPh3iv8/68yEZCy4vBIcJmNBbmQeG85nCg Dcs1KZO/kWdxXwLpuCoyJw5IHO78bLRTOy1vjjjQ0w1b641nK3OhyLxl+eI02k/I 8lCZ5+GbsbX2JQckh9MSNcilrQmQbyFisecYOwcvIFCg7X/FSiqpRvIPP7sSp3Rp uWL/uegvW6VsztkAFOPWt++BAgMBAAGjggJpMIICZTAdBgNVHQ4EFgQUcygIXx6M 5E2l2ru8cCksiRRgjwkwHwYDVR0jBBgwFoAUzcExhQol8Mzfybm5zI7mTDr6bQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0M4RkQ4MDA0MzhB MjExRjE4NkU4OEYyMDdFRUU1MjhFL3pjRXhoUW9sOE16ZnlibTV6STdtVERyNmJR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNFeGhRb2w4TXpmeWJtNXpJN21URHI2YlFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM1OC9DOEZEODAwNDM4QTIxMUYxODZFODhGMjA3RUVFNTI4RS85M0QyNDA0NjdB QkUxMUYxOEE3QUQ0NTI2QUEzMEZCQy5yb2EwKAYIKwYBBQUHAQcBAf8EGTAXMBUE AgABMA8DAwAJsAMDAEMTAwMASjUwDQYJKoZIhvcNAQELBQADggEBAITVO//pkWkF 7ITbo49RnC5HA/FVBu8ojvcdAnH17Ys9xWFbIeDdVJ6YNWBrqRJH7jypUnGLvWZe 2NtmmKjbHbvniXSRcOZuBUk7XY0086b5Mmusf+Km8wYuB28sxk305ExWO+cmDQCO CzbfdTY0rte0GAtltLE1ivgUEWGZqTWnMjdSXudG++4d+hhLh3QLbSUtyjBu9eoY h6r+G8qgv4t/daJZpJx6fuCVA2ek5yOvXd84xz4KmFzTPc3Sp0T5ffMTx/nCvR8M sAlUKfMNPNjS1C31XNrs7HoUXqoJSKrWNTupP0hBjjiWJzyieJKspKJHOQaxMKrF 3c2+X3E84Es= -----END CERTIFICATE-----Generated at Thu Sep 3 12:40:14 2026 by rpki-client