$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7E99A5727A5D11F1BFFF0B408BA30FBC.roa File: 7E99A5727A5D11F1BFFF0B408BA30FBC.roa (raw, json) Hash identifier: E3u5aiazaBu7mEozPmeD+0QkH0lYKvWzhFcCeF6uK0Q= Subject key identifier: 78:A9:C2:0D:DF:3A:93:5E:B6:62:C6:29:15:6A:03:0D:4F:B1:7B:F7 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 0113 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7E99A5727A5D11F1BFFF0B408BA30FBC.roa Signing time: Tue 07 Jul 2026 23:43:20 +0000 ROA not before: Tue 07 Jul 2026 23:43:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 8796 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 200.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 23:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Jul 7 23:43:20 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a4d8f18-301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:e1:34:3e:99:0b:7b:27:f7:f8:c8:cb:b1: 31:c4:96:c8:1b:ea:78:2a:14:de:1d:3a:9c:0a:1b: 67:ad:85:26:c9:e2:d2:9c:16:13:62:3f:39:cb:4c: d8:8e:68:e0:1e:31:e8:d2:80:a2:df:65:73:c5:8e: 7f:70:a0:be:30:3e:bb:6b:49:db:43:08:87:28:bf: b4:5e:c6:51:88:e0:b3:65:06:af:1f:aa:11:45:41: d9:2d:65:95:0d:18:93:ac:f4:08:47:27:b7:1a:6d: 73:e7:7c:16:12:3d:5d:9c:81:a9:56:65:e9:43:0a: 3a:ed:6a:fc:4a:5f:9b:46:bc:74:9e:54:b8:e9:c8: bc:a5:20:e2:a7:70:c9:a6:db:65:6e:4a:60:8a:32: 4d:06:91:56:21:c8:5d:06:d4:5d:a5:98:b3:a1:d4: 27:4b:60:30:c8:2c:e7:fa:ea:37:eb:48:7e:e5:95: 60:04:bf:e5:b7:ba:6a:08:24:06:fa:a2:c8:b4:24: 13:1b:e2:c7:7d:a2:9e:09:6a:9f:1b:88:5f:a2:0c: f4:d4:e3:f4:62:40:ab:b6:82:14:14:6e:24:89:54: 71:de:32:44:34:99:87:9a:0e:b7:ae:25:74:a7:88: 2e:e5:e3:1f:53:23:34:22:17:00:cc:0a:05:77:c5: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A9:C2:0D:DF:3A:93:5E:B6:62:C6:29:15:6A:03:0D:4F:B1:7B:F7 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7E99A5727A5D11F1BFFF0B408BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 200.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption 67:e2:17:ec:c5:c3:32:86:67:54:db:71:f3:cc:fb:62:74:fb: 6a:8d:1c:ca:62:67:09:a4:aa:ee:10:81:eb:c0:10:88:d6:81: 98:b7:7a:23:0d:e8:8f:0e:c5:19:7b:de:0d:88:2c:d5:9e:78: 9e:09:5e:8c:6d:ab:02:26:11:ca:42:53:fb:8a:98:c4:37:d3: ed:0a:ac:c4:0e:db:1e:50:f6:66:8c:53:5a:df:3f:a7:da:a1: c6:a6:ba:54:6a:df:a6:9a:dd:c0:db:e8:07:a2:c3:76:70:01: d7:60:72:89:29:f8:62:52:8a:70:6e:6a:17:35:db:b2:d7:8d: 0e:b1:01:4b:80:69:ac:dc:e0:6c:1e:9a:71:44:b0:79:18:9c: 6c:36:d9:e2:1c:bc:c6:fe:7b:20:d8:bf:31:96:0c:3b:1d:82: 66:95:01:45:36:15:02:08:20:ae:92:f6:31:60:0b:b4:3d:2f: 4d:dc:1a:c4:d2:1a:4e:18:05:c7:ce:98:20:fa:1a:f0:e8:f4: fe:aa:52:46:3e:08:53:c9:b7:21:62:a9:0f:41:e1:a2:ed:7c: 1c:11:02:b4:69:da:9b:58:40:f9:67:9f:4e:f7:bf:6b:ff:ef: 3f:d2:e7:80:f3:54:80:e4:fd:2a:ab:1b:58:bd:e4:d0:4e:02: cc:4a:3f:76 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwNzA3MjM0MzIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRkOGYxOC0zMDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVLhND6ZC3sn9/jIy7ExxJbIG+p4KhTeHTqcChtnrYUmyeLSnBYTYj85y0zY jmjgHjHo0oCi32VzxY5/cKC+MD67a0nbQwiHKL+0XsZRiOCzZQavH6oRRUHZLWWV DRiTrPQIRye3Gm1z53wWEj1dnIGpVmXpQwo67Wr8Sl+bRrx0nlS46ci8pSDip3DJ pttlbkpgijJNBpFWIchdBtRdpZizodQnS2AwyCzn+uo360h+5ZVgBL/lt7pqCCQG +qLItCQTG+LHfaKeCWqfG4hfogz01OP0YkCrtoIUFG4kiVRx3jJENJmHmg63riV0 p4gu5eMfUyM0IhcAzAoFd8WmGQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFHipwg3f OpNetmLGKRVqAw1PsXv3MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0U5OUE1NzI3 QTVEMTFGMUJGRkYwQjQwOEJBMzBGQkMucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEyN7gMA0GCSqGSIb3DQEBCwUAA4IBAQBn4hfs xcMyhmdU23HzzPtidPtqjRzKYmcJpKruEIHrwBCI1oGYt3ojDeiPDsUZe94NiCzV nnieCV6MbasCJhHKQlP7ipjEN9PtCqzEDtseUPZmjFNa3z+n2qHGprpUat+mmt3A 2+gHosN2cAHXYHKJKfhiUopwbmoXNduy140OsQFLgGms3OBsHppxRLB5GJxsNtni HLzG/nsg2L8xlgw7HYJmlQFFNhUCCCCukvYxYAu0PS9N3BrE0hpOGAXHzpgg+hrw 6PT+qlJGPghTybchYqkPQeGi7XwcEQK0adqbWED5Z59O979r/+8/0ueA81SA5P0q qxtYveTQTgLMSj92 -----END CERTIFICATE-----Generated at Thu Jul 9 00:55:55 2026 by rpki-client