$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa File: 7BBEA23A81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: x2jjPS6FvcqBM+tGORHnqqLZTkj3voZyJaAOh4zmBqQ= Subject key identifier: A8:E8:52:9F:B1:6E:5D:00:0E:9A:EE:57:13:E3:26:33:D5:A4:BB:44 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 01C1 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa Signing time: Tue 13 Oct 2026 03:52:35 +0000 ROA not before: Tue 13 Oct 2026 03:52:35 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 8796 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 187.126.64.0/20 maxlen: 24 200.97.32.0/20 maxlen: 24 200.217.96.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 201.15.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 02:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Oct 13 03:52:35 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acdab03-4f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:2a:71:e9:64:f7:39:18:bd:46:dc:36:9d: 83:b0:4c:89:49:85:e5:14:40:02:4c:a3:83:1e:54: 7a:1f:b5:e4:3f:55:61:6e:0a:8d:21:f9:6d:0a:34: 40:9b:61:f8:3e:1f:2b:7a:28:08:f2:8a:5f:26:aa: a5:13:ba:11:46:be:2d:bf:6b:ff:f4:1b:a8:89:ed: 3c:2d:c8:8b:1d:21:a8:2b:1c:06:7a:5c:57:d2:3e: 34:5f:86:08:35:92:a0:bd:65:fd:5d:7e:86:99:02: 33:57:ef:b9:94:ef:3e:58:c1:22:96:6c:40:76:39: 37:be:43:80:f6:9f:14:62:f4:c1:76:6c:df:d9:37: 81:83:fc:ed:cf:e3:05:7c:58:94:df:58:5a:3d:d0: c4:96:5f:71:a5:01:a5:99:43:c3:5a:c2:44:1b:d6: f6:74:03:61:67:6c:85:f0:4e:73:3f:04:8d:0b:c7: 76:ae:8d:d6:52:b8:a2:e6:b5:1b:c9:a2:a1:8a:a7: b8:4d:a6:b1:09:0f:56:b8:c6:aa:2b:83:53:62:e0: 25:2b:16:26:76:39:d7:e7:3c:8f:69:2d:c2:d8:27: 1b:e3:e1:3e:74:00:30:54:67:6d:48:c9:24:3b:a6: d4:b6:06:44:aa:90:cc:5a:e5:e5:2d:f4:66:1c:6c: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E8:52:9F:B1:6E:5D:00:0E:9A:EE:57:13:E3:26:33:D5:A4:BB:44 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 187.126.64.0/20 200.97.32.0/20 200.217.96.0/20 200.222.224.0/20 201.15.160.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:6e:4a:a2:81:ae:e0:3e:e0:9a:af:ab:a6:05:34:82:2d:7c: aa:d8:ed:71:c5:0d:c0:9a:4f:f1:2b:61:90:57:a5:f3:64:b2: 37:1a:bd:6a:ba:aa:00:98:1b:9d:49:ac:58:ec:3c:96:19:05: ad:b7:fd:74:77:7d:a4:2e:e7:e3:48:9b:a1:42:f6:da:44:d0: e4:d9:5e:4d:b6:2e:a4:09:a5:c2:bc:68:69:83:6c:48:23:e4: 66:c1:cc:cb:c3:05:fe:28:f4:0c:d5:62:39:6e:82:17:cd:9a: c5:d3:5b:b4:4a:23:37:24:4b:62:be:61:af:cc:9a:70:81:39: 9e:3f:58:08:61:19:af:7c:03:e4:9e:5c:9a:d1:74:20:fd:6c: 83:63:36:72:e8:e8:48:df:0c:1c:2c:dc:ad:04:19:01:a0:77: c1:29:6b:fe:d0:95:df:96:59:fd:c3:52:00:60:50:19:25:c1: da:4a:b7:ea:df:65:37:43:1b:a3:9a:a8:6c:e5:46:d6:5e:36: a8:af:aa:8f:fc:31:76:3c:8d:3e:ad:70:8f:93:a6:20:cc:47: 48:30:f8:ee:86:3c:71:a6:4b:72:19:af:29:b9:98:a5:83:16: 3f:19:83:c7:c4:5e:7a:34:5e:7e:cd:ee:9a:10:b6:2d:40:9a: 86:34:43:26 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYxMDEzMDM1MjM1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNkYWIwMy00ZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo54qcelk9zkYvUbcNp2DsEyJSYXlFEACTKODHlR6H7XkP1VhbgqNIfltCjRA m2H4Ph8reigI8opfJqqlE7oRRr4tv2v/9Buoie08LciLHSGoKxwGelxX0j40X4YI NZKgvWX9XX6GmQIzV++5lO8+WMEilmxAdjk3vkOA9p8UYvTBdmzf2TeBg/ztz+MF fFiU31haPdDEll9xpQGlmUPDWsJEG9b2dANhZ2yF8E5zPwSNC8d2ro3WUrii5rUb yaKhiqe4TaaxCQ9WuMaqK4NTYuAlKxYmdjnX5zyPaS3C2Ccb4+E+dAAwVGdtSMkk O6bUtgZEqpDMWuXlLfRmHGz1RwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKjoUp+x bl0ADpruVxPjJjPVpLtEMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0JCRUEyM0E4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEu35AAwQEyGEgAwQEyNlgAwQEyN7gAwQEyQ+g MA0GCSqGSIb3DQEBCwUAA4IBAQANbkqiga7gPuCar6umBTSCLXyq2O1xxQ3Amk/x K2GQV6XzZLI3Gr1quqoAmBudSaxY7DyWGQWtt/10d32kLufjSJuhQvbaRNDk2V5N ti6kCaXCvGhpg2xII+RmwczLwwX+KPQM1WI5boIXzZrF01u0SiM3JEtivmGvzJpw gTmeP1gIYRmvfAPknlya0XQg/WyDYzZy6OhI3wwcLNytBBkBoHfBKWv+0JXflln9 w1IAYFAZJcHaSrfq32U3Qxujmqhs5UbWXjaor6qP/DF2PI0+rXCPk6YgzEdIMPju hjxxpktyGa8puZilgxY/GYPHxF56NF5+ze6aELYtQJqGNEMm -----END CERTIFICATE-----Generated at Wed Oct 21 17:10:28 2026 by rpki-client