$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/624A40D27F5F11F1BEA7A26F5FA30FBC.roa File: 624A40D27F5F11F1BEA7A26F5FA30FBC.roa (raw, json) Hash identifier: CTuiIjeKzXxi3ZMYeyZBR0nwz6i115ctqbvud5AdBUg= Subject key identifier: 86:75:ED:DD:C6:DD:45:70:18:AB:5C:6F:27:ED:6A:9E:C0:6C:DD:81 Certificate issuer: /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Certificate serial: 027A Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/624A40D27F5F11F1BEA7A26F5FA30FBC.roa Signing time: Wed 15 Jul 2026 08:07:43 +0000 ROA not before: Wed 15 Jul 2026 08:07:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9650 IP address blocks: 165.86.64.0/24 maxlen: 24 165.86.65.0/24 maxlen: 24 165.86.70.0/23 maxlen: 23 165.86.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 02:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC Validity Not Before: Jul 15 08:07:43 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a573fcf-f876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:31:c9:fc:08:2f:f5:87:62:6b:e4:36:d7: 32:4a:f1:14:9e:ee:bd:e8:48:2c:a5:ac:ea:d1:53: d4:21:79:7a:6a:da:90:4c:62:f8:f9:85:26:ac:56: f9:92:50:6b:61:74:35:26:c4:66:29:87:0a:31:db: 2a:50:be:9b:6e:ff:f1:a4:52:57:a4:08:28:4a:c3: df:fa:ea:8e:25:ab:c0:97:16:c7:af:d5:91:d5:f4: fa:5a:63:c1:ff:99:2d:69:66:df:dd:a1:6a:37:1a: b5:1a:99:2a:8d:db:fc:0b:e4:af:07:ca:b2:ca:65: b5:ef:67:47:37:9c:31:5f:10:a8:a8:5b:14:fe:65: af:4c:0a:a6:51:fe:49:08:1f:5d:29:67:c1:2f:a7: c6:f9:4a:b6:00:d5:3b:8b:20:df:f6:3b:4a:36:0b: 17:f9:84:9f:02:11:8b:be:e0:80:5e:74:b6:3b:29: db:e7:9e:6b:4c:03:e3:ef:06:e0:8b:30:51:3a:b7: 79:dc:64:36:df:97:5c:d7:63:e7:bf:bc:65:6e:ef: f4:33:5b:fc:5a:0e:f3:3b:cd:61:44:8a:83:e4:64: 30:fd:48:c0:91:0d:8e:96:41:c9:f0:d6:e3:11:40: fb:b0:28:de:7b:5f:13:d4:d7:27:68:72:a7:8c:86: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:75:ED:DD:C6:DD:45:70:18:AB:5C:6F:27:ED:6A:9E:C0:6C:DD:81 X509v3 Authority Key Identifier: keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/624A40D27F5F11F1BEA7A26F5FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 165.86.64.0/23 165.86.70.0/23 165.86.80.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:6a:fc:fc:c7:dc:2f:28:22:ee:1e:fb:35:5d:88:6e:b0:f6: 6f:9a:06:95:82:81:ea:4c:8e:d6:ba:ac:75:37:8b:69:d7:d6: 7b:7a:1c:46:3f:8e:96:b3:0e:ba:74:52:36:24:32:e6:1d:66: ee:88:5e:f4:95:e8:d3:b7:d4:52:6c:45:25:59:30:20:2e:b7: 4e:95:4b:df:8e:d1:46:ab:fd:d6:9f:6c:e8:54:3c:c2:ec:ab: 0b:df:aa:6b:c7:d2:64:5f:d6:b9:dd:de:5c:6d:3a:db:eb:5f: 08:ef:ee:b2:9e:3e:a0:af:09:69:59:c6:d9:44:8d:78:0e:64: 10:a0:59:3c:5d:9d:38:b5:4f:fa:c9:38:96:fe:ab:7e:5d:14: 49:eb:7d:6b:2f:48:7f:73:55:9e:83:1b:90:21:a4:74:fa:9b: d2:df:24:10:eb:3d:40:73:18:65:7b:08:cb:1a:57:81:75:f0: 7b:fb:35:91:47:d8:ed:b2:78:f3:67:e2:c5:69:69:95:e4:22: 1f:d4:bb:09:e1:8f:f6:c1:25:9f:8a:98:98:93:7b:46:e5:04: 7a:3a:27:f4:90:5b:cb:d2:be:71:f5:ad:fb:9b:eb:2d:10:58: a3:22:1a:14:19:17:e6:de:ff:f3:ae:13:59:7f:1e:06:61:82: fd:45:85:1c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg1QjgxMTAvBgNVBAUTKDBGOTA2OTJBMUVFRkU3RjBBMUFDNjhCNUUxQUMwOUY3 MDI2OTcxQ0MwHhcNMjYwNzE1MDgwNzQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU3M2ZjZi1mODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7ExyfwIL/WHYmvkNtcySvEUnu696Egspazq0VPUIXl6atqQTGL4+YUmrFb5 klBrYXQ1JsRmKYcKMdsqUL6bbv/xpFJXpAgoSsPf+uqOJavAlxbHr9WR1fT6WmPB /5ktaWbf3aFqNxq1Gpkqjdv8C+SvB8qyymW172dHN5wxXxCoqFsU/mWvTAqmUf5J CB9dKWfBL6fG+Uq2ANU7iyDf9jtKNgsX+YSfAhGLvuCAXnS2Oynb555rTAPj7wbg izBROrd53GQ235dc12Pnv7xlbu/0M1v8Wg7zO81hRIqD5GQw/UjAkQ2OlkHJ8Nbj EUD7sCjee18T1NcnaHKnjIadrwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIZ17d3G 3UVwGKtcbyftap7AbN2BMB8GA1UdIwQYMBaAFA+QaSoe7+fwoaxoteGsCfcCaXHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9DRkEzNDA5QUJF MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9ENUJwS2g3djVfQ2hyR2kxNGF3Sjl3SnBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1QnBLaDd2NV9DaHJHaTE0YXdKOXdKcGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg1QjgvQ0ZBMzQwOUFCRTMxMTFFREI0RkY3RDM0QzRGOUFFMDIvNjI0QTQwRDI3 RjVGMTFGMUJFQTdBMjZGNUZBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBpVZAAwQBpVZGAwQBpVZQMA0GCSqGSIb3DQEBCwUAA4IBAQA+avz8 x9wvKCLuHvs1XYhusPZvmgaVgoHqTI7Wuqx1N4tp19Z7ehxGP46Wsw66dFI2JDLm HWbuiF70lejTt9RSbEUlWTAgLrdOlUvfjtFGq/3Wn2zoVDzC7KsL36prx9JkX9a5 3d5cbTrb618I7+6ynj6grwlpWcbZRI14DmQQoFk8XZ04tU/6yTiW/qt+XRRJ631r L0h/c1WegxuQIaR0+pvS3yQQ6z1AcxhlewjLGleBdfB7+zWRR9jtsnjzZ+LFaWmV 5CIf1LsJ4Y/2wSWfipiYk3tG5QR6Oif0kFvL0r5x9a37m+stEFijIhoUGRfm3v/z rhNZfx4GYYL9RYUc -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:41 2026 by rpki-client