$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/095AD6BA702F11F1A8ECAE4661A30FBC.roa File: 095AD6BA702F11F1A8ECAE4661A30FBC.roa (raw, json) Hash identifier: e1iAWo0tSmNxZi+Y/5uerTn44EzxY7j9gvJmFB1WWi4= Subject key identifier: 41:36:80:2B:03:FB:B2:AC:DE:2F:81:36:70:13:72:C8:49:B5:F7:18 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 3680 Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/095AD6BA702F11F1A8ECAE4661A30FBC.roa Signing time: Thu 25 Jun 2026 00:44:35 +0000 ROA not before: Thu 25 Jun 2026 00:44:35 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 38022 IP address blocks: 163.7.128.0/19 maxlen: 19 163.7.128.0/24 maxlen: 24 163.7.136.0/24 maxlen: 24 163.7.137.0/24 maxlen: 24 163.7.144.0/21 maxlen: 21 163.7.159.0/24 maxlen: 24 210.7.32.0/20 maxlen: 20 2404:138::/32 maxlen: 32 2404:138:204::/48 maxlen: 48 2404:138:205::/48 maxlen: 48 2404:138:206::/48 maxlen: 48 2404:138:207::/48 maxlen: 48 2404:139::/32 maxlen: 32 2404:139::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 14:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13952 (0x3680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jun 25 00:44:35 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a3c79f3-a502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:72:83:35:a8:89:fb:79:9b:db:81:5c:fb: 7e:db:f0:cd:1d:fd:f3:05:6e:0e:83:40:9a:48:26: 21:80:c3:60:f8:56:fa:5c:c6:49:23:4a:fc:5b:ae: 5b:20:5e:49:8f:fe:cb:90:94:43:05:7c:b7:2e:68: 10:67:73:ea:72:c5:9d:77:5a:dd:01:ad:49:51:c0: 56:97:4c:7b:77:71:9c:9e:a5:d0:79:eb:62:b1:29: 74:0a:d2:67:8d:a9:2d:25:2a:1d:fe:35:2b:a3:e5: 5c:23:06:dd:f1:94:24:fb:34:ab:cd:aa:1f:f8:c0: 7d:c1:06:a1:3f:ac:21:c5:31:75:4f:b2:64:56:e2: 1b:f0:5a:da:8c:80:cb:f7:2d:f8:93:36:e6:46:2a: 0c:7a:5d:da:20:3a:58:88:2f:18:45:3c:8d:4f:26: d1:00:79:59:13:b0:c4:7a:2b:be:1c:ad:c6:c0:0d: 6a:81:c6:99:89:47:19:87:3c:33:d9:2c:f5:65:9c: ad:39:04:de:36:49:71:68:69:8e:f8:52:35:d8:c5: ac:b0:85:ed:f8:23:2c:fb:bb:15:21:8b:f2:e7:ad: d9:d8:b0:34:27:ea:58:00:b9:9d:da:57:7e:d6:c3: 16:c0:de:b0:c6:36:14:67:73:b3:1c:06:a2:a1:03: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:36:80:2B:03:FB:B2:AC:DE:2F:81:36:70:13:72:C8:49:B5:F7:18 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/095AD6BA702F11F1A8ECAE4661A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 163.7.128.0/19 210.7.32.0/20 IPv6: 2404:138::/31 Signature Algorithm: sha256WithRSAEncryption 60:63:d4:95:34:ff:da:3b:6f:f5:75:cb:01:a7:4d:02:43:a2: aa:ec:ef:eb:77:9a:5e:43:e1:c7:38:0c:d4:85:e7:53:9b:54: 46:5c:09:79:1c:ef:ae:79:67:47:9e:f9:e5:54:a8:9c:f2:86: fd:76:0d:76:39:1c:74:3c:0e:b2:63:46:8f:33:1e:d4:2c:d6: 86:71:18:d8:8e:d0:35:e5:9b:81:54:db:73:f8:e4:04:8e:2d: c5:2a:2a:cc:df:ac:32:d9:7a:e2:41:2a:3f:01:0a:4c:c0:a5: 30:ab:52:55:9d:c2:e8:71:77:a5:78:21:a0:e6:3c:4a:d0:1f: e8:ff:84:15:3d:66:55:94:20:37:de:2f:ee:d8:cf:63:5a:c0: 24:2e:4b:8a:b1:bb:17:fe:9a:50:bb:99:44:63:2a:cb:4c:d9: 75:0d:87:e8:34:75:18:5f:46:4f:da:25:b1:c3:a4:d5:b0:c8: 77:62:6f:15:c8:b2:a3:b4:5a:a6:31:ab:98:0b:b1:93:3a:0b: 47:b3:5c:eb:87:0b:47:18:4a:21:61:b7:bd:f6:36:8d:b5:fc: 2b:93:85:92:e9:90:09:c8:61:87:b2:94:e0:39:48:03:0c:8f: b5:71:1f:1a:7a:6f:42:11:72:21:9c:da:60:50:bf:ad:fc:b4: dd:b8:e7:f3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjYwNjI1MDA0NDM1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTNjNzlmMy1hNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzZygzWoift5m9uBXPt+2/DNHf3zBW4Og0CaSCYhgMNg+Fb6XMZJI0r8W65b IF5Jj/7LkJRDBXy3LmgQZ3PqcsWdd1rdAa1JUcBWl0x7d3GcnqXQeetisSl0CtJn jaktJSod/jUro+VcIwbd8ZQk+zSrzaof+MB9wQahP6whxTF1T7JkVuIb8FrajIDL 9y34kzbmRioMel3aIDpYiC8YRTyNTybRAHlZE7DEeiu+HK3GwA1qgcaZiUcZhzwz 2Sz1ZZytOQTeNklxaGmO+FI12MWssIXt+CMs+7sVIYvy563Z2LA0J+pYALmd2ld+ 1sMWwN6wxjYUZ3OzHAaioQMIYwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEE2gCsD +7Ks3i+BNnATcshJtfcYMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEzMTgvREM3NDUxRjIxRDkxMTFFMjk4RTc0NkY0MDhCMDJDRDIvMDk1QUQ2QkE3 MDJGMTFGMUE4RUNBRTQ2NjFBMzBGQkMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQFoweAAwQE0gcgMA0EAgACMAcDBQEkBAE4MA0GCSqGSIb3DQEBCwUA A4IBAQBgY9SVNP/aO2/1dcsBp00CQ6Kq7O/rd5peQ+HHOAzUhedTm1RGXAl5HO+u eWdHnvnlVKic8ob9dg12ORx0PA6yY0aPMx7ULNaGcRjYjtA15ZuBVNtz+OQEji3F KirM36wy2XriQSo/AQpMwKUwq1JVncLocXeleCGg5jxK0B/o/4QVPWZVlCA33i/u 2M9jWsAkLkuKsbsX/ppQu5lEYyrLTNl1DYfoNHUYX0ZP2iWxw6TVsMh3Ym8VyLKj tFqmMauYC7GTOgtHs1zrhwtHGEohYbe99jaNtfwrk4WS6ZAJyGGHspTgOUgDDI+1 cR8aem9CEXIhnNpgUL+t/LTduOfz -----END CERTIFICATE-----Generated at Sat Jul 18 09:13:54 2026 by rpki-client