$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/04CC57B2541011F1884CD63093833773.roa File: 04CC57B2541011F1884CD63093833773.roa (raw, json) Hash identifier: 6kqlAupcd6adVeI2fau6YBcqllS4KzKqITZ4pQWC2JU= Subject key identifier: 71:58:6B:44:CF:0D:1C:CF:04:5F:B6:25:85:53:63:F7:B6:5C:99:AD Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 5F Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/04CC57B2541011F1884CD63093833773.roa Signing time: Thu 21 May 2026 07:38:49 +0000 ROA not before: Thu 21 May 2026 07:38:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 140227 IP address blocks: 177.2.16.0/21 maxlen: 24 177.2.176.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.4.0.0/20 maxlen: 24 177.4.32.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.5.64.0/20 maxlen: 24 177.5.112.0/20 maxlen: 24 177.5.176.0/20 maxlen: 24 177.6.176.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 179.236.96.0/21 maxlen: 24 191.223.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: May 21 07:38:49 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a0eb689-fff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:be:b7:ff:85:8b:7e:29:a0:4c:e3:cf:58: 89:f7:6c:16:e1:ef:d9:90:01:bc:7f:37:10:c9:46: 37:1d:59:ac:de:11:63:c9:47:df:bf:07:02:c8:31: 8a:52:fd:56:af:ea:fa:a9:f4:a9:6a:3c:2e:21:2e: cf:69:ba:46:00:71:9e:b7:ef:67:a5:9c:33:f0:b6: bf:cf:0f:f6:18:63:9a:19:21:6d:b4:19:a8:e8:8f: 17:f4:1f:a6:4d:c0:16:f0:e3:c5:64:25:f4:bb:16: 02:88:ae:72:e1:b2:86:16:74:c9:af:cc:20:06:48: 20:5a:85:30:c8:38:42:f3:1f:b7:e7:5b:db:15:fa: 6e:ba:7e:20:18:b6:6a:75:35:cd:15:04:4a:17:ad: 0f:48:fc:0d:2f:06:73:87:02:a1:8c:5e:5a:23:89: 96:fb:4a:9d:a9:ec:7e:4d:0b:d4:bf:21:e6:4d:f2: dd:18:f5:22:bd:18:b5:fc:b7:46:49:ee:e6:5b:67: 25:ba:55:76:c0:c0:7b:6e:0b:13:4c:3a:79:ad:e4: 38:8b:1e:17:88:46:70:4e:45:bb:ea:dc:14:e0:08: 6b:84:b5:5b:15:49:f8:5f:9f:16:97:80:c1:09:6f: c7:02:a3:ea:d9:1f:88:c6:3e:68:58:39:36:fc:ea: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:58:6B:44:CF:0D:1C:CF:04:5F:B6:25:85:53:63:F7:B6:5C:99:AD X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/04CC57B2541011F1884CD63093833773.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/21 177.2.176.0/21 177.3.32.0/20 177.3.80.0/21 177.4.0.0/20 177.4.32.0/20 177.5.48.0-177.5.79.255 177.5.112.0/20 177.5.176.0/20 177.6.176.0/20 177.7.128.0/20 179.236.96.0/21 191.223.32.0/20 Signature Algorithm: sha256WithRSAEncryption d3:66:04:8a:6b:11:ee:66:dd:c4:1f:54:fd:2a:f6:01:03:87: 41:db:83:e8:39:e0:6e:9d:fc:e5:bb:dc:c0:5d:cd:6b:6f:63: 88:0b:de:90:9e:fa:59:3a:80:2a:02:04:49:9d:89:bf:ea:e6: 98:5b:5e:d8:10:6f:9f:dc:21:31:5d:07:8a:70:c1:7b:ef:ef: 57:35:0f:1e:8f:73:e8:cd:14:2c:36:05:11:d9:57:1d:79:a9: ba:31:e2:97:e0:fd:9b:d2:0a:40:ea:6c:87:7c:b1:1e:8b:cf: b0:df:04:af:45:01:1a:1d:89:21:cb:49:4e:1a:f7:dc:7c:f5: 30:b7:25:0b:11:a6:a4:a8:21:60:ae:af:44:ff:b9:68:91:5d: 01:89:14:e5:47:b3:10:de:06:28:5e:1e:eb:7a:c8:85:11:f5: 69:54:46:3f:45:24:bf:d3:e1:13:8f:56:f7:55:f5:31:05:97: e1:d8:48:dc:87:71:a0:50:3b:9c:92:e7:5d:2d:d7:6d:70:f7: 2c:30:da:5a:7e:22:40:2e:b2:8e:d7:35:b2:c3:ee:c7:02:11: 85:2f:ee:0d:13:66:d6:d2:6a:a0:8e:8d:d6:28:9b:dc:5d:48: 38:f2:e6:4c:ae:46:e4:c2:f2:c7:fa:c8:99:64:5b:12:48:71: be:be:cd:71 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njc4QzExMC8GA1UEBRMoRUMzNjhENTgyRTExNzdFMDk5MTVFMzNGNDRFREI5REU0 RUYzMkM1MjAeFw0yNjA1MjEwNzM4NDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMGViNjg5LWZmZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi3763/4WLfimgTOPPWIn3bBbh79mQAbx/NxDJRjcdWazeEWPJR9+/BwLIMYpS /Vav6vqp9KlqPC4hLs9pukYAcZ6372elnDPwtr/PD/YYY5oZIW20Gajojxf0H6ZN wBbw48VkJfS7FgKIrnLhsoYWdMmvzCAGSCBahTDIOELzH7fnW9sV+m66fiAYtmp1 Nc0VBEoXrQ9I/A0vBnOHAqGMXlojiZb7Sp2p7H5NC9S/IeZN8t0Y9SK9GLX8t0ZJ 7uZbZyW6VXbAwHtuCxNMOnmt5DiLHheIRnBORbvq3BTgCGuEtVsVSfhfnxaXgMEJ b8cCo+rZH4jGPmhYOTb86pDpAgMBAAGjggKwMIICrDAdBgNVHQ4EFgQUcVhrRM8N HM8EX7YlhVNj97Zcma0wHwYDVR0jBBgwFoAU7DaNWC4Rd+CZFeM/RO253k7zLFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NzhDLzNCREUxRDZFNEYy QzExRjFCQkUyRjZFQTlCRUU1MjhFLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvN0RhTldDNFJkLUNaRmVNX1JPMjUzazd6TEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8zQkRFMUQ2RTRGMkMxMUYxQkJFMkY2RUE5QkVFNTI4RS8wNENDNTdCMjU0 MTAxMUYxODg0Q0Q2MzA5MzgzMzc3My5yb2EwbwYIKwYBBQUHAQcBAf8EYDBeMFwE AgABMFYDBAOxAhADBAOxArADBASxAyADBAOxA1ADBASxBAADBASxBCAwDAMEBLEF MAMEBLEFQAMEBLEFcAMEBLEFsAMEBLEGsAMEBLEHgAMEA7PsYAMEBL/fIDANBgkq hkiG9w0BAQsFAAOCAQEA02YEimsR7mbdxB9U/Sr2AQOHQduD6Dngbp385bvcwF3N a29jiAvekJ76WTqAKgIESZ2Jv+rmmFte2BBvn9whMV0HinDBe+/vVzUPHo9z6M0U LDYFEdlXHXmpujHil+D9m9IKQOpsh3yxHovPsN8Er0UBGh2JIctJThr33Hz1MLcl CxGmpKghYK6vRP+5aJFdAYkU5UezEN4GKF4e63rIhRH1aVRGP0Ukv9PhE49W91X1 MQWX4dhI3IdxoFA7nJLnXS3XbXD3LDDaWn4iQC6yjtc1ssPuxwIRhS/uDRNm1tJq oI6N1iib3F1IOPLmTK5G5MLyx/rImWRbEkhxvr7NcQ== -----END CERTIFICATE-----Generated at Thu May 21 12:52:58 2026 by rpki-client