$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/BA8443D854E411F1A8787FAE9C833773.roa File: BA8443D854E411F1A8787FAE9C833773.roa (raw, json) Hash identifier: S61KvmMGetAArR3tvbC65AtQoB4AV6hZSTQy2LRVhMM= Subject key identifier: B7:56:F6:4D:E2:F2:FD:22:3B:16:FA:67:87:CD:5D:11:9F:FD:9A:4D Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 43 Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/BA8443D854E411F1A8787FAE9C833773.roa Signing time: Thu 21 May 2026 07:17:11 +0000 ROA not before: Thu 21 May 2026 07:17:11 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153517 IP address blocks: 177.2.24.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: May 21 07:17:11 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a0eb177-48bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:e8:2a:ac:6f:ff:0a:00:b7:4d:57:98:a9: 6f:9b:fe:f6:10:ce:de:60:5c:29:83:8b:66:db:39: 02:be:d1:1c:4f:fa:61:53:32:79:73:b2:73:3e:86: 11:92:a0:45:22:f1:9a:be:68:3a:7c:6a:dd:86:cc: 9d:86:e1:6b:76:40:9a:93:66:41:a4:ab:20:cf:26: 7f:89:a6:f1:cc:6a:49:29:8e:fb:4b:0c:87:50:ae: 36:8c:ea:11:77:40:8b:eb:46:92:40:f5:90:46:f3: 3b:29:79:11:d1:fb:9c:9c:65:b4:4a:ba:06:dc:64: 14:2e:8b:60:03:52:18:36:7d:b2:00:09:fd:49:80: 92:d8:ee:bc:86:f6:ec:fc:46:6b:8e:85:36:9b:02: e9:00:42:29:ff:45:d0:b8:9c:57:ca:fd:e8:29:42: 8a:ae:c7:fc:87:d1:d7:0a:78:bc:f2:99:ad:86:61: 45:06:72:db:d5:8d:23:a7:a6:33:95:0b:ae:eb:ef: 37:37:71:67:20:6f:3d:d7:26:c3:a8:fe:bf:50:53: 65:9e:df:69:73:d3:88:6f:39:7a:2c:84:42:37:10: bf:bc:65:6e:25:db:61:d8:dc:b5:6e:bc:8a:8a:c3: cf:8e:3e:3a:80:44:ec:9c:09:4a:a4:21:5a:6c:90: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:56:F6:4D:E2:F2:FD:22:3B:16:FA:67:87:CD:5D:11:9F:FD:9A:4D X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/BA8443D854E411F1A8787FAE9C833773.roa sbgp-ipAddrBlock: critical IPv4: 177.2.24.0/21 177.2.184.0/21 177.3.88.0/21 Signature Algorithm: sha256WithRSAEncryption 30:3d:4f:0b:97:53:4a:6f:3e:64:97:db:09:c3:81:92:13:86: 31:75:ae:18:82:e3:54:17:24:73:9a:a7:56:22:a9:a2:24:5a: ad:bf:02:9d:a3:eb:ae:e0:20:e6:2b:98:3d:49:8c:49:e3:95: a5:69:06:71:3b:e1:6c:b0:bf:1d:1a:83:36:f1:cd:b0:e9:b1: 6b:e8:5c:77:94:9d:0c:1d:7d:45:90:1b:a5:dc:91:a0:00:10: cb:a2:85:51:18:26:f5:b6:cb:10:11:fa:1e:50:b2:6c:6e:1c: 6b:02:2c:6a:2e:5a:68:cc:4a:f5:f4:19:15:aa:19:53:93:30: 18:0a:ee:fb:25:05:80:58:b7:84:d0:fe:3f:68:f7:3f:40:c0: 19:40:30:4d:99:72:63:ba:04:63:84:d1:24:12:8b:25:42:18: ef:4b:63:79:5b:b4:f1:22:8c:81:2a:db:f4:00:f1:1c:5a:bc: 65:31:95:49:f6:73:a6:1e:ca:29:2d:a5:fa:c7:60:cd:99:05: 7f:16:b3:df:fc:37:e4:3d:45:27:06:da:44:80:7a:0b:c1:f8: bb:8b:97:5d:26:18:38:6b:40:31:fe:fd:7b:7d:6b:a0:41:ad: fc:aa:41:ee:b5:18:46:b9:03:d7:6e:53:df:af:c4:6c:20:8c: d2:0c:17:8c -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Njc4QzExMC8GA1UEBRMoRUMzNjhENTgyRTExNzdFMDk5MTVFMzNGNDRFREI5REU0 RUYzMkM1MjAeFw0yNjA1MjEwNzE3MTFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMGViMTc3LTQ4YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBR+gqrG//CgC3TVeYqW+b/vYQzt5gXCmDi2bbOQK+0RxP+mFTMnlzsnM+hhGS oEUi8Zq+aDp8at2GzJ2G4Wt2QJqTZkGkqyDPJn+JpvHMakkpjvtLDIdQrjaM6hF3 QIvrRpJA9ZBG8zspeRHR+5ycZbRKugbcZBQui2ADUhg2fbIACf1JgJLY7ryG9uz8 RmuOhTabAukAQin/RdC4nFfK/egpQoqux/yH0dcKeLzyma2GYUUGctvVjSOnpjOV C67r7zc3cWcgbz3XJsOo/r9QU2We32lz04hvOXoshEI3EL+8ZW4l22HY3LVuvIqK w8+OPjqAROycCUqkIVpskCoTAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUt1b2TeLy /SI7Fvpnh81dEZ/9mk0wHwYDVR0jBBgwFoAU7DaNWC4Rd+CZFeM/RO253k7zLFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2NzhDLzNCREUxRDZFNEYy QzExRjFCQkUyRjZFQTlCRUU1MjhFLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvN0RhTldDNFJkLUNaRmVNX1JPMjUzazd6TEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8zQkRFMUQ2RTRGMkMxMUYxQkJFMkY2RUE5QkVFNTI4RS9CQTg0NDNEODU0 RTQxMUYxQTg3ODdGQUU5QzgzMzc3My5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAOxAhgDBAOxArgDBAOxA1gwDQYJKoZIhvcNAQELBQADggEBADA9TwuX U0pvPmSX2wnDgZIThjF1rhiC41QXJHOap1YiqaIkWq2/Ap2j667gIOYrmD1JjEnj laVpBnE74Wywvx0agzbxzbDpsWvoXHeUnQwdfUWQG6XckaAAEMuihVEYJvW2yxAR +h5QsmxuHGsCLGouWmjMSvX0GRWqGVOTMBgK7vslBYBYt4TQ/j9o9z9AwBlAME2Z cmO6BGOE0SQSiyVCGO9LY3lbtPEijIEq2/QA8RxavGUxlUn2c6YeyiktpfrHYM2Z BX8Ws9/8N+Q9RScG2kSAegvB+LuLl10mGDhrQDH+/Xt9a6BBrfyqQe61GEa5A9du U9+vxGwgjNIMF4w= -----END CERTIFICATE-----Generated at Thu May 21 12:32:55 2026 by rpki-client