$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa File: D2E6AC6A60F111EFB97DD57AC4F9AE02.roa (raw, json) Hash identifier: koD82jw36I+xWb3bPAEdg+F1Q76GNEtMpLiUjPTIbC8= Subject key identifier: 9D:09:8A:40:4B:C2:CD:A9:3D:53:6F:85:81:AD:7E:87:05:D4:47:44 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3619 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa Signing time: Tue 30 Jun 2026 15:10:54 +0000 ROA not before: Tue 30 Jun 2026 15:10:54 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 19905 IP address blocks: 128.106.0.0/18 maxlen: 24 128.106.64.0/18 maxlen: 24 128.106.128.0/17 maxlen: 24 165.21.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13849 (0x3619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Jun 30 15:10:54 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a43dc7e-6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:99:9e:ad:12:c7:18:6b:31:ef:20:59:49: 5f:0d:8f:84:79:44:6b:a6:f4:43:ec:cd:aa:f5:8e: 55:bc:fe:d1:e3:23:fe:4c:97:7f:72:b4:5d:2b:50: 01:d2:16:b5:40:ab:d9:4c:95:cb:eb:85:71:88:05: 5d:d7:ba:63:ba:43:21:31:2a:83:64:bf:3c:4d:1a: ee:2d:21:d2:c5:8b:30:a8:d2:81:9b:28:85:7f:9e: 76:7b:11:6b:a4:dc:83:37:63:f4:ca:09:18:cd:dc: 32:6d:ed:ed:3c:14:d4:0e:4d:e3:17:7a:e5:b3:09: 46:d3:5b:f1:62:c1:f4:95:fd:42:29:45:33:e1:86: 13:a6:e0:03:25:1a:4f:72:49:23:05:16:b3:72:b9: e0:f4:a2:71:1d:f3:a9:6a:ef:71:0f:92:d0:b4:f6: 65:0b:d4:cd:c5:c7:52:af:9d:4c:6f:0a:2b:2d:bb: 5a:36:3b:79:38:e4:ca:05:69:d4:29:8e:6f:a0:11: 31:9b:b5:cb:9d:ef:17:20:2f:92:69:ff:f0:05:48: c5:23:d1:35:98:cc:48:c8:74:f4:e8:2b:37:d4:24: f7:a6:ec:94:24:7b:23:d9:3f:6e:74:71:9a:46:53: 3b:82:43:ed:92:ff:7f:ae:2f:ad:b4:30:3e:ae:51: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:09:8A:40:4B:C2:CD:A9:3D:53:6F:85:81:AD:7E:87:05:D4:47:44 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/D2E6AC6A60F111EFB97DD57AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 128.106.0.0/16 165.21.0.0/16 Signature Algorithm: sha256WithRSAEncryption 58:10:9b:ed:ad:0c:87:9e:f3:b9:f9:15:4e:4b:0a:8e:d4:d1: a7:4a:4c:a8:b8:7b:a6:6c:12:ed:9d:28:47:28:ad:2f:53:d5: 9c:31:c9:8e:fe:01:44:3b:34:48:73:65:66:61:b0:c7:92:a2: 59:cd:3f:1a:9a:66:6c:8d:13:3e:b3:f4:55:ea:ac:90:b0:60: c2:ce:07:13:27:8d:71:aa:db:ff:40:df:f3:4b:ce:46:73:ac: 00:d2:52:d3:21:de:6d:ff:ad:44:9a:1c:18:13:a2:72:89:fa: 9a:16:39:5a:ae:44:e3:40:af:ac:aa:00:bb:02:83:d8:53:e7: c1:57:5a:15:dc:71:a2:49:26:38:91:b4:67:a2:22:d3:78:53: e3:b7:d4:f7:82:55:88:70:d0:c4:3e:84:7a:82:57:80:cb:8e: fa:8e:37:8d:ea:42:e3:fc:ab:da:e5:1d:80:6d:f9:9b:d6:67: 66:e1:6a:f7:b0:95:17:04:21:de:ac:b2:23:fb:ab:96:10:a9: 63:37:00:ed:24:e4:9a:95:88:05:6f:ac:50:d2:8a:6f:00:6f: 98:30:94:3e:1a:3c:17:12:22:c0:b5:3f:74:36:38:29:cd:bb: ec:37:1c:53:98:db:0d:70:2c:b1:1f:d1:95:d6:fd:32:2c:94: 95:ff:2d:72 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgICNhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjYwNjMwMTUxMDU0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQzZGM3ZS02YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb2Znq0SxxhrMe8gWUlfDY+EeURrpvRD7M2q9Y5VvP7R4yP+TJd/crRdK1AB 0ha1QKvZTJXL64VxiAVd17pjukMhMSqDZL88TRruLSHSxYswqNKBmyiFf552exFr pNyDN2P0ygkYzdwybe3tPBTUDk3jF3rlswlG01vxYsH0lf1CKUUz4YYTpuADJRpP ckkjBRazcrng9KJxHfOpau9xD5LQtPZlC9TNxcdSr51MbworLbtaNjt5OOTKBWnU KY5voBExm7XLne8XIC+Saf/wBUjFI9E1mMxIyHT06Cs31CT3puyUJHsj2T9udHGa RlM7gkPtkv9/ri+ttDA+rlHVewIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFJ0JikBL ws2pPVNvhYGtfocF1EdEMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvRDJFNkFDNkE2 MEYxMTFFRkI5N0RENTdBQzRGOUFFMDIucm9hMCMGCCsGAQUFBwEHAQH/BBQwEjAQ BAIAATAKAwMAgGoDAwClFTANBgkqhkiG9w0BAQsFAAOCAQEAWBCb7a0Mh57zufkV TksKjtTRp0pMqLh7pmwS7Z0oRyitL1PVnDHJjv4BRDs0SHNlZmGwx5KiWc0/Gppm bI0TPrP0VeqskLBgws4HEyeNcarb/0Df80vORnOsANJS0yHebf+tRJocGBOicon6 mhY5Wq5E40CvrKoAuwKD2FPnwVdaFdxxokkmOJG0Z6Ii03hT47fU94JViHDQxD6E eoJXgMuO+o43jepC4/yr2uUdgG35m9ZnZuFq97CVFwQh3qyyI/urlhCpYzcA7STk mpWIBW+sUNKKbwBvmDCUPho8FxIiwLU/dDY4Kc277DccU5jbDXAssR/Rldb9MiyU lf8tcg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:50:38 2026 by rpki-client