$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa File: 7BBEA23A81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: Uvqf3mc9eYgpZ9t4Q7B5aeIEVmBbLpr7MvIUaInP1gU= Subject key identifier: 55:C9:7A:61:DF:8F:4D:0B:D4:DB:7C:0A:E0:76:50:58:68:EE:FD:A0 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 015B Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa Signing time: Fri 17 Jul 2026 13:21:56 +0000 ROA not before: Fri 17 Jul 2026 13:21:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 8796 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 200.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 17 13:21:56 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a5a2c74-2ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:e2:af:17:c5:44:ac:e1:20:fb:81:e8:91: f1:73:06:9c:49:d5:e6:50:a0:c2:76:7a:ed:4a:71: c7:f8:08:a8:cb:64:af:5a:60:bc:2b:01:19:fe:ec: da:41:6d:80:e9:bc:48:67:bf:ad:cd:d5:99:9b:73: 29:d7:9a:b1:b2:38:77:41:8e:47:91:43:f4:bd:ad: dc:57:2d:b7:bb:3b:38:58:38:cb:3e:06:24:fb:58: 94:c9:da:05:ad:69:7e:2b:d9:80:d6:29:21:61:4a: 48:0c:5f:de:9d:34:d1:94:c6:3f:df:90:af:6f:d4: 1d:db:09:fe:70:6b:38:10:33:c5:07:aa:3b:12:e0: a6:3b:72:26:d4:5d:61:7a:9b:c2:61:f4:ca:d4:c9: 9c:c6:27:74:6e:1e:27:64:3c:9f:7d:ab:39:f0:36: 99:58:17:92:4c:a4:bd:bd:e0:7c:02:9a:86:bb:42: 6f:02:70:33:b4:25:a8:e5:bf:e6:29:52:58:29:00: e3:ee:ad:10:38:d4:16:21:52:e8:01:e9:3f:5e:f4: 95:ef:28:28:c7:33:47:f8:47:90:bc:a9:8f:25:21: 3e:74:fa:f5:de:82:10:07:d8:0e:55:9a:15:95:20: e7:b4:c3:de:21:fe:56:76:4d:a6:33:97:70:a5:71: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C9:7A:61:DF:8F:4D:0B:D4:DB:7C:0A:E0:76:50:58:68:EE:FD:A0 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7BBEA23A81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 200.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption 92:9f:de:73:9b:47:c2:34:88:89:8c:9e:9b:9d:5d:46:73:24: 63:b6:51:69:1b:e9:59:36:e7:b2:51:6c:eb:33:b8:35:a5:20: 14:2a:31:93:8b:f0:1c:ab:70:77:9c:ce:f5:05:44:ab:81:35: 56:ad:f4:98:3c:d0:23:cb:ec:de:95:49:87:52:c1:31:7e:b4: ca:50:ad:f5:2f:75:56:1e:e6:07:c0:7b:17:e0:6a:08:9e:3e: ba:db:83:b0:2f:a9:14:ae:ca:5c:b9:5b:82:98:5e:9a:2d:4b: ad:69:a5:cd:33:97:6b:fc:bc:f2:d2:3a:33:50:8f:a2:79:41: ff:b0:4a:23:44:62:e0:c2:1b:a2:b5:a9:76:85:91:27:4f:fb: f4:f3:c9:a3:31:5f:86:f2:d9:24:d1:88:fe:4f:c3:de:13:36: 57:36:48:06:b8:c0:c5:c9:f1:25:df:75:7c:05:4c:01:bd:e1: c0:e3:a0:a9:bd:05:11:44:b4:89:d9:d2:3b:4f:80:28:fd:cb: c3:72:9b:01:fb:8e:7f:44:50:16:bb:dc:15:39:ff:75:2b:c0: c4:86:93:89:cd:a9:19:47:fa:22:87:99:c2:07:bf:75:45:b5: 3d:2b:9c:02:08:0f:66:7c:e4:6a:cf:65:87:de:a4:a6:06:8d: 12:55:98:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzE3MTMyMTU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTVhMmM3NC0yYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNnirxfFRKzhIPuB6JHxcwacSdXmUKDCdnrtSnHH+Aioy2SvWmC8KwEZ/uza QW2A6bxIZ7+tzdWZm3Mp15qxsjh3QY5HkUP0va3cVy23uzs4WDjLPgYk+1iUydoF rWl+K9mA1ikhYUpIDF/enTTRlMY/35Cvb9Qd2wn+cGs4EDPFB6o7EuCmO3Im1F1h epvCYfTK1Mmcxid0bh4nZDyffas58DaZWBeSTKS9veB8ApqGu0JvAnAztCWo5b/m KVJYKQDj7q0QONQWIVLoAek/XvSV7ygoxzNH+EeQvKmPJSE+dPr13oIQB9gOVZoV lSDntMPeIf5Wdk2mM5dwpXFcDwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFFXJemHf j00L1Nt8CuB2UFho7v2gMB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0JCRUEyM0E4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEyN7gMA0GCSqGSIb3DQEBCwUAA4IBAQCSn95z m0fCNIiJjJ6bnV1GcyRjtlFpG+lZNueyUWzrM7g1pSAUKjGTi/Acq3B3nM71BUSr gTVWrfSYPNAjy+zelUmHUsExfrTKUK31L3VWHuYHwHsX4GoInj6624OwL6kUrspc uVuCmF6aLUutaaXNM5dr/Lzy0jozUI+ieUH/sEojRGLgwhuital2hZEnT/v088mj MV+G8tkk0Yj+T8PeEzZXNkgGuMDFyfEl33V8BUwBveHA46CpvQURRLSJ2dI7T4Ao /cvDcpsB+45/RFAWu9wVOf91K8DEhpOJzakZR/oih5nCB791RbU9K5wCCA9mfORq z2WH3qSmBo0SVZhC -----END CERTIFICATE-----Generated at Tue Jul 21 14:06:29 2026 by rpki-client