$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/3BA04952917211F1BE52DB413211F970.roa File: 3BA04952917211F1BE52DB413211F970.roa (raw, json) Hash identifier: jtnOj4dADyvlcCRzJ66SiEWH+5u5HG0zgG86yjnF3UQ= Subject key identifier: AE:86:A4:A0:4B:25:F9:E4:D1:F1:5D:D7:D9:62:1B:9A:42:BF:1C:7F Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 01C0 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/3BA04952917211F1BE52DB413211F970.roa Signing time: Tue 13 Oct 2026 03:52:33 +0000 ROA not before: Tue 13 Oct 2026 03:52:33 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 7607 IP address blocks: 177.2.184.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 02:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Oct 13 03:52:33 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdab01-2bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:ad:eb:48:0a:cf:52:b3:50:9a:18:5d:42: 65:2b:26:32:98:03:01:a3:0f:cd:cc:c0:89:e4:e1: 41:20:e9:6f:88:d1:8a:18:95:09:6e:da:14:b9:13: 4d:ea:f0:4f:b7:aa:44:ae:28:bc:d4:01:c1:fa:ce: 32:5e:5b:34:76:e1:70:e2:d2:27:29:11:38:bc:47: 77:4f:6e:20:d0:ff:7f:b2:1c:2e:a4:cd:df:c0:1f: 18:28:d0:86:23:b8:c9:6e:13:aa:41:b7:c3:1e:91: 12:2a:4f:9e:16:80:46:c6:89:36:57:35:42:21:30: de:3b:ea:24:a6:46:2d:d5:55:af:f4:34:e8:f5:6e: 72:ce:2b:a3:ae:80:1f:0c:04:51:36:2d:2c:22:20: c9:84:00:73:95:24:fb:5b:ce:35:0e:63:55:43:2e: e9:f6:12:bc:f3:67:9f:c9:1f:4f:6a:02:55:9e:94: 79:36:9c:f8:f3:c6:29:14:b1:71:cc:9e:e5:43:c4: 82:f0:64:3f:5b:4b:80:47:5c:96:db:12:40:6c:11: 77:be:ff:99:a0:76:9f:b5:ce:1d:c9:ce:ff:ac:97: a9:b0:73:10:05:0b:aa:8b:3b:27:a5:2b:7f:6e:41: 8e:8b:05:71:b9:89:10:48:f1:cf:34:d6:b5:06:3e: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:86:A4:A0:4B:25:F9:E4:D1:F1:5D:D7:D9:62:1B:9A:42:BF:1C:7F X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/3BA04952917211F1BE52DB413211F970.roa sbgp-ipAddrBlock: critical IPv4: 177.2.184.0/21 177.3.88.0/21 177.4.80.0/20 Signature Algorithm: sha256WithRSAEncryption 98:03:41:1a:91:9d:aa:2d:af:88:ec:8a:d4:d8:34:67:a8:7c: 5d:a6:01:20:b6:2f:cb:34:9f:0c:ee:1e:68:bd:0f:22:b4:9d: f6:e3:e1:ef:b4:64:40:fa:12:db:18:95:0e:bc:cc:4d:eb:33: 4f:e1:55:69:7d:df:ee:66:11:c3:d2:18:4c:02:c0:88:3c:72: 50:20:5f:0e:a8:06:53:d6:92:11:7c:bb:01:b0:61:33:81:bc: 45:e2:98:51:42:90:b0:78:42:67:8b:37:83:1a:d0:9a:6d:2e: 42:89:1d:ba:30:2d:b9:af:97:1c:1f:6e:e9:c5:78:01:b9:d8: 31:29:bc:ca:ab:19:ae:94:e7:47:8b:06:58:2a:a1:c7:a3:3a: fa:80:9c:c4:f6:2e:4c:84:5f:93:dd:6e:f7:14:ce:c5:ac:ea: dd:4c:62:50:fd:57:6d:1a:b0:6e:59:e8:78:cb:8f:cc:75:09: 88:bd:c1:1e:e3:9b:9a:8f:17:d2:59:04:ee:00:12:77:22:b1: 31:73:1a:f7:95:04:f1:6d:15:d5:e8:e4:57:b5:66:bc:40:69: 05:5a:46:b2:90:21:02:9b:b9:ea:03:44:0e:f5:b9:cd:b0:15: bd:d7:d7:1b:a9:94:2c:45:57:aa:95:45:51:9e:27:dd:1f:e2: 59:19:30:95 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYxMDEzMDM1MjMzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYWIwMS0yYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vGt60gKz1KzUJoYXUJlKyYymAMBow/NzMCJ5OFBIOlviNGKGJUJbtoUuRNN 6vBPt6pErii81AHB+s4yXls0duFw4tInKRE4vEd3T24g0P9/shwupM3fwB8YKNCG I7jJbhOqQbfDHpESKk+eFoBGxok2VzVCITDeO+okpkYt1VWv9DTo9W5yziujroAf DARRNi0sIiDJhABzlST7W841DmNVQy7p9hK882efyR9PagJVnpR5Npz488YpFLFx zJ7lQ8SC8GQ/W0uAR1yW2xJAbBF3vv+ZoHaftc4dyc7/rJepsHMQBQuqizsnpSt/ bkGOiwVxuYkQSPHPNNa1Bj7x/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFK6GpKBL Jfnk0fFd19liG5pCvxx/MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvM0JBMDQ5NTI5 MTcyMTFGMUJFNTJEQjQxMzIxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQDsQK4AwQDsQNYAwQEsQRQMA0GCSqGSIb3DQEBCwUAA4IBAQCYA0Ea kZ2qLa+I7IrU2DRnqHxdpgEgti/LNJ8M7h5ovQ8itJ324+HvtGRA+hLbGJUOvMxN 6zNP4VVpfd/uZhHD0hhMAsCIPHJQIF8OqAZT1pIRfLsBsGEzgbxF4phRQpCweEJn izeDGtCabS5CiR26MC25r5ccH27pxXgBudgxKbzKqxmulOdHiwZYKqHHozr6gJzE 9i5MhF+T3W73FM7FrOrdTGJQ/VdtGrBuWeh4y4/MdQmIvcEe45uajxfSWQTuABJ3 IrExcxr3lQTxbRXV6ORXtWa8QGkFWkaykCECm7nqA0QO9bnNsBW919cbqZQsRVeq lUVRnifdH+JZGTCV -----END CERTIFICATE-----Generated at Tue Oct 13 16:23:38 2026 by rpki-client