$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa File: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (raw, json) Hash identifier: MYkxmSgNqElOC649o48S0knsIyj3lMRaNDNnlUpUZq0= Subject key identifier: 05:FE:29:96:4E:8E:AD:C2:D7:43:0E:D9:0D:FD:26:8F:C7:40:3F:94 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 361B Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa Signing time: Tue 30 Jun 2026 15:10:58 +0000 ROA not before: Tue 30 Jun 2026 15:10:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 9255 IP address blocks: 128.106.8.0/24 maxlen: 24 128.106.9.0/24 maxlen: 24 128.106.84.0/22 maxlen: 22 128.106.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13851 (0x361b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Jun 30 15:10:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a43dc82-38ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:0d:0c:e5:5f:50:78:68:df:94:66:51:15: 41:47:4d:7a:08:2b:ff:1a:bd:74:42:01:d7:74:26: 76:08:81:45:85:af:12:02:2a:d3:73:f3:96:1e:33: 9f:98:b8:61:25:89:d8:a8:c7:40:86:b0:e1:0b:32: 81:b5:f4:13:5c:0e:0a:bd:f1:da:c9:12:f8:d5:b1: e2:40:21:6a:c1:9f:2f:6e:7b:e8:7e:97:75:43:1f: e0:1d:3d:cc:38:cb:b1:d4:2c:10:94:9c:48:c3:79: 34:1c:93:de:dc:cd:31:da:e5:9c:13:10:67:65:c1: a3:00:1f:05:56:2c:88:dd:e9:62:dd:65:0e:55:5b: 99:91:6a:dd:b6:04:f2:04:ed:7c:2e:97:9c:0e:4f: 6d:de:fd:63:58:0c:39:57:81:7f:60:64:8c:f1:d5: ed:0a:1a:da:82:a2:17:fa:35:99:0e:cf:05:50:ee: 91:0a:c4:0b:a9:e7:1e:c4:b9:7c:84:06:58:ed:19: 37:33:d1:73:48:b0:62:d1:f3:90:f8:bc:d2:06:32: 42:1a:ab:25:27:63:53:f2:b8:14:f1:f1:87:4f:ef: 5b:f4:07:cc:a3:c6:f9:f9:3c:99:25:44:91:fd:db: 40:02:93:a8:49:16:cd:2d:34:6f:78:11:45:35:80: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FE:29:96:4E:8E:AD:C2:D7:43:0E:D9:0D:FD:26:8F:C7:40:3F:94 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 128.106.8.0/23 128.106.84.0/22 128.106.156.0/23 Signature Algorithm: sha256WithRSAEncryption 44:8e:34:25:a0:d1:d0:d0:4a:cf:c8:45:c9:62:d6:6e:7a:08: 79:a5:e4:d1:80:02:ba:3b:de:92:f8:3a:a1:77:81:67:33:dd: dc:0c:9e:a9:79:44:0f:cf:8c:d2:ff:c4:e6:4a:ee:a4:00:f2: 82:01:cd:fa:a3:28:4a:66:05:c6:75:12:58:0d:10:d7:bb:87: b4:01:01:7f:2e:cd:66:2c:ba:28:72:f9:80:55:16:0e:9a:9a: 2c:7c:b0:66:0c:c0:c1:20:49:64:9a:5d:fe:c7:d5:31:fd:b1: 12:4b:7d:e7:3d:a5:63:04:20:d2:f8:ab:f5:1d:92:43:af:3f: 8a:39:7d:ae:27:73:a9:85:d4:81:7b:6f:57:3f:bb:fb:38:70: 7b:c2:d5:9f:37:9d:d3:0f:57:df:80:e1:7f:c4:a4:57:79:e3: b8:3d:61:81:4e:e6:a9:bc:89:25:21:5e:6d:10:35:17:19:ca: 5c:0a:6b:b8:24:03:71:53:57:e4:b2:3a:27:5b:a6:1e:3a:68: af:21:ed:51:34:4b:5f:64:9a:5b:be:e3:bd:20:6b:80:a9:30: 2c:82:a8:b0:b0:69:67:6f:17:3f:c0:2c:5c:6d:41:93:b7:19: ca:f5:dd:43:a9:a5:b9:a4:99:57:7c:75:7d:72:db:7e:1f:2a: f4:88:8b:aa -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwNjMwMTUxMDU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZGM4Mi0zOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/INDOVfUHho35RmURVBR016CCv/Gr10QgHXdCZ2CIFFha8SAirTc/OWHjOf mLhhJYnYqMdAhrDhCzKBtfQTXA4KvfHayRL41bHiQCFqwZ8vbnvofpd1Qx/gHT3M OMux1CwQlJxIw3k0HJPe3M0x2uWcExBnZcGjAB8FViyI3eli3WUOVVuZkWrdtgTy BO18LpecDk9t3v1jWAw5V4F/YGSM8dXtChragqIX+jWZDs8FUO6RCsQLqecexLl8 hAZY7Rk3M9FzSLBi0fOQ+LzSBjJCGqslJ2NT8rgU8fGHT+9b9AfMo8b5+TyZJUSR /dtAApOoSRbNLTRveBFFNYBXxwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAX+KZZO jq3C10MO2Q39Jo/HQD+UMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMTJGQUYwN0VB NDdCMTFFOTg2N0NCRjU4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBgGoIAwQCgGpUAwQBgGqcMA0GCSqGSIb3DQEBCwUAA4IBAQBEjjQl oNHQ0ErPyEXJYtZuegh5peTRgAK6O96S+Dqhd4FnM93cDJ6peUQPz4zS/8TmSu6k APKCAc36oyhKZgXGdRJYDRDXu4e0AQF/Ls1mLLoocvmAVRYOmposfLBmDMDBIElk ml3+x9Ux/bESS33nPaVjBCDS+Kv1HZJDrz+KOX2uJ3OphdSBe29XP7v7OHB7wtWf N53TD1ffgOF/xKRXeeO4PWGBTuapvIklIV5tEDUXGcpcCmu4JANxU1fksjonW6Ye OmivIe1RNEtfZJpbvuO9IGuAqTAsgqiwsGlnbxc/wCxcbUGTtxnK9d1DqaW5pJlX fHV9ctt+Hyr0iIuq -----END CERTIFICATE-----Generated at Tue Jul 21 22:47:07 2026 by rpki-client