$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa File: 7ABEE1BA81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: qD0jiduTMXmGhRg8eFgaQ6isOIt8uJTtJqbixdfu8GM= Subject key identifier: 4E:06:AF:59:29:30:5F:5A:82:CC:D4:FF:B7:A7:DD:14:F8:50:3A:15 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 01BB Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa Signing time: Tue 13 Oct 2026 03:52:21 +0000 ROA not before: Tue 13 Oct 2026 03:52:21 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 395886 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 187.126.64.0/20 maxlen: 24 200.97.32.0/20 maxlen: 24 200.217.96.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 201.15.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Oct 13 03:52:21 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdaaf5-0fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:42:a5:2d:00:3c:24:b4:83:33:34:59:83: 5f:4b:ad:ca:80:7f:36:24:4e:31:59:d1:3d:62:f4: 24:22:86:23:3d:5e:d1:b1:72:66:04:0b:97:60:f1: 66:ae:0d:7b:3d:13:d2:34:12:50:7c:f7:a4:09:25: f1:27:11:68:11:59:cf:5e:ff:04:bb:43:b7:bd:bc: f6:e2:f1:7c:ea:51:6c:e5:ad:78:11:51:54:92:e9: b5:e6:7a:76:04:28:ba:ac:da:22:2b:5a:8c:8b:8e: 33:e6:09:c2:d7:b4:86:17:a9:c9:51:e9:4b:8d:9e: 73:76:5e:32:15:e4:1a:74:6c:74:57:a1:07:dd:98: 78:4b:74:9d:74:2f:0d:9d:b3:dc:71:5f:7e:ad:81: cc:cf:cb:2d:29:68:e8:7b:00:4e:d9:a8:98:35:f1: 7c:35:ec:3b:02:9a:21:d4:4a:94:e2:f5:d0:e0:57: ef:4d:00:38:64:8e:e3:86:91:48:e3:23:11:b3:e2: 07:2e:03:fb:c5:cc:26:03:be:91:51:a3:2e:b5:60: 20:11:bc:61:2b:12:5b:c3:0e:cd:c3:16:69:bd:17: c2:bb:37:61:9b:d9:3b:f2:36:4e:af:4b:34:6c:c3: 25:db:38:b4:81:b4:df:34:9d:6a:7a:ce:1b:9c:8e: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:06:AF:59:29:30:5F:5A:82:CC:D4:FF:B7:A7:DD:14:F8:50:3A:15 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 187.126.64.0/20 200.97.32.0/20 200.217.96.0/20 200.222.224.0/20 201.15.160.0/20 Signature Algorithm: sha256WithRSAEncryption d0:60:63:52:b4:98:7b:9a:41:30:97:b0:fa:2c:37:23:93:87: 97:0e:eb:27:aa:fd:b9:4b:bf:d4:2c:4e:01:90:fb:81:04:18: 5f:0d:51:0c:59:46:57:57:b3:0f:bf:31:7d:06:7c:fa:99:2f: c3:b2:3f:ac:73:af:28:7b:5a:b8:62:b0:1b:59:bf:81:60:9f: f4:b1:26:fc:c8:3a:23:da:bc:33:ae:f2:1d:9e:f9:50:c9:c1: f9:da:f3:c2:7d:4d:f6:e5:f2:bd:56:68:1c:04:49:49:f5:a0: 47:a2:f1:f1:b7:25:6e:9d:0e:ec:54:71:af:41:c4:27:47:23: 63:fc:7b:61:12:11:9e:21:78:5c:9f:dd:c6:f5:31:f2:bd:10: 71:4c:13:f5:02:c5:e0:2b:67:86:47:fd:1a:67:ee:2e:07:10: ff:f3:a0:a2:03:33:c0:2b:a9:43:60:e8:9a:e8:a4:d4:15:93: 4d:50:6d:19:13:4d:cb:d3:bb:41:02:c0:6f:15:d7:22:64:7b: f6:da:67:37:29:e5:03:29:28:ee:0d:e4:e1:1d:3a:54:62:37: e5:bd:aa:23:e1:01:10:4a:f4:2f:77:a2:15:68:2c:0d:dd:51: 12:53:e3:98:d9:b3:a0:1c:26:6c:79:13:00:1c:45:72:88:1a: 3b:8c:0e:11 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYxMDEzMDM1MjIxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYWFmNS0wZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ1CpS0APCS0gzM0WYNfS63KgH82JE4xWdE9YvQkIoYjPV7RsXJmBAuXYPFm rg17PRPSNBJQfPekCSXxJxFoEVnPXv8Eu0O3vbz24vF86lFs5a14EVFUkum15np2 BCi6rNoiK1qMi44z5gnC17SGF6nJUelLjZ5zdl4yFeQadGx0V6EH3Zh4S3SddC8N nbPccV9+rYHMz8stKWjoewBO2aiYNfF8New7Apoh1EqU4vXQ4FfvTQA4ZI7jhpFI 4yMRs+IHLgP7xcwmA76RUaMutWAgEbxhKxJbww7NwxZpvRfCuzdhm9k78jZOr0s0 bMMl2zi0gbTfNJ1qes4bnI5RuwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFE4Gr1kp MF9agszU/7en3RT4UDoVMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0FCRUUxQkE4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEu35AAwQEyGEgAwQEyNlgAwQEyN7gAwQEyQ+g MA0GCSqGSIb3DQEBCwUAA4IBAQDQYGNStJh7mkEwl7D6LDcjk4eXDusnqv25S7/U LE4BkPuBBBhfDVEMWUZXV7MPvzF9Bnz6mS/Dsj+sc68oe1q4YrAbWb+BYJ/0sSb8 yDoj2rwzrvIdnvlQycH52vPCfU325fK9VmgcBElJ9aBHovHxtyVunQ7sVHGvQcQn RyNj/HthEhGeIXhcn93G9THyvRBxTBP1AsXgK2eGR/0aZ+4uBxD/86CiAzPAK6lD YOia6KTUFZNNUG0ZE03L07tBAsBvFdciZHv22mc3KeUDKSjuDeThHTpUYjflvaoj 4QEQSvQvd6IVaCwN3VESU+OY2bOgHCZseRMAHEVyiBo7jA4R -----END CERTIFICATE-----Generated at Wed Oct 14 10:05:11 2026 by rpki-client