$ rpki-client -vvf rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/290A7BCA961B11F19E161C1C5F11F970.roa File: 290A7BCA961B11F19E161C1C5F11F970.roa (raw, json) Hash identifier: rn+yexBoaoN0dNM06qrXYxNqaEqzTrQtkaoa6hqOEG8= Subject key identifier: 1D:DF:D0:A4:8A:D9:50:3B:1B:52:F6:4B:ED:3B:B0:D8:47:22:AD:83 Certificate issuer: /CN=A911A84B/serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82 Certificate serial: 12 Authority key identifier: 4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/290A7BCA961B11F19E161C1C5F11F970.roa Signing time: Wed 12 Aug 2026 06:59:01 +0000 ROA not before: Wed 12 Aug 2026 06:59:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131167 IP address blocks: 163.128.115.0/24 maxlen: 24 163.128.115.0/25 maxlen: 25 163.128.115.128/25 maxlen: 25 2001:df6:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 06:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A84B, serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82 Validity Not Before: Aug 12 06:59:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7c19b5-ee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:3e:45:c3:a1:d7:ae:53:fe:78:c8:6a:96: d2:8b:b2:56:bc:d1:ca:4d:f6:9f:1c:a7:cb:a4:f3: 04:5a:58:28:e5:b3:fa:d6:98:a7:98:43:17:8e:50: e7:47:cd:bd:1e:1a:61:28:f7:87:6c:c0:59:fd:a2: 64:7f:9e:c0:97:f4:33:7f:06:f0:81:68:ae:b1:05: e9:f5:97:22:fd:b2:80:22:15:5e:4e:45:c9:cb:cf: da:75:99:e2:66:5a:f5:48:f4:12:32:0a:47:ee:43: bf:99:0b:1d:47:a6:d5:69:e2:7c:a2:a4:c4:8c:29: ad:c8:16:94:f7:74:4f:92:b1:e3:7c:48:e6:3c:18: 21:cf:15:6a:cb:5b:70:20:33:80:01:61:38:0f:a3: 10:34:a9:97:27:a7:d2:6e:a3:50:bd:e5:23:5b:c6: f2:f0:1b:2d:68:57:27:c3:4a:5a:85:09:cc:fb:24: 5f:0a:47:fb:7f:ed:e1:c7:9e:5b:6e:12:c2:a6:5f: 56:cf:9e:ed:24:93:51:3f:ba:39:12:2d:da:e5:ae: 4b:7b:c4:f0:ab:98:76:4e:99:3a:7a:1f:7b:91:9a: a9:03:a0:fc:0d:d0:60:e3:95:00:d7:2f:da:cb:d5: fe:4b:bc:af:06:ce:44:d9:ff:41:6d:33:07:61:fe: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:D0:A4:8A:D9:50:3B:1B:52:F6:4B:ED:3B:B0:D8:47:22:AD:83 X509v3 Authority Key Identifier: keyid:4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/290A7BCA961B11F19E161C1C5F11F970.roa sbgp-ipAddrBlock: critical IPv4: 163.128.115.0/24 IPv6: 2001:df6:dac0::/48 Signature Algorithm: sha256WithRSAEncryption df:60:9e:35:c0:29:65:81:43:08:b3:6a:79:e4:73:34:71:fe: f8:dc:cb:8e:0b:7e:5a:b7:a8:9e:65:00:aa:d2:35:5b:18:eb: ff:bf:01:d3:00:3b:85:01:7d:a6:45:93:5f:49:58:00:3f:7d: c5:6a:f0:33:2b:91:c7:12:71:b8:65:6f:50:7a:cf:7b:f3:f3: 07:ba:d9:91:81:05:44:7e:6f:2d:e2:f6:3b:ef:e1:d2:81:a8: c3:b3:d5:78:93:33:25:e1:0f:c2:55:84:b2:f5:23:ba:aa:ed: 0d:05:b9:6b:42:ff:f4:93:5f:7a:01:fc:8f:32:98:e3:88:25: f5:cd:5d:64:65:db:8e:4a:2f:1a:48:47:f0:0a:9b:c8:45:0e: a1:d9:b5:a5:14:99:5c:38:c0:f0:7e:6f:5a:48:4e:75:84:f7: 79:98:dc:53:f4:5e:74:bb:3b:10:3f:86:2a:02:28:7f:16:21: 62:c2:73:99:88:ec:33:14:17:a4:aa:fe:78:ac:5d:ae:34:e5: 79:60:29:44:94:ca:67:76:b8:11:2a:8b:9b:72:19:35:3b:cd: b2:b9:e8:a4:75:f4:f3:99:c9:25:f1:ba:0a:94:d2:44:d6:aa: 81:c4:e6:f1:8e:26:98:12:2c:66:d7:a4:d9:8c:ed:8b:bf:c9: 12:8d:ac:68 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTg0QjExMC8GA1UEBRMoNEFFQkM0MzhBRTc4RTg5OEIxQTJGODRCQTNEM0ZBNkE0 RkMyOUQ4MjAeFw0yNjA4MTIwNjU5MDFaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhN2MxOWI1LWVlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9JD5Fw6HXrlP+eMhqltKLsla80cpN9p8cp8uk8wRaWCjls/rWmKeYQxeOUOdH zb0eGmEo94dswFn9omR/nsCX9DN/BvCBaK6xBen1lyL9soAiFV5ORcnLz9p1meJm WvVI9BIyCkfuQ7+ZCx1HptVp4nyipMSMKa3IFpT3dE+SseN8SOY8GCHPFWrLW3Ag M4ABYTgPoxA0qZcnp9Juo1C95SNbxvLwGy1oVyfDSlqFCcz7JF8KR/t/7eHHnltu EsKmX1bPnu0kk1E/ujkSLdrlrkt7xPCrmHZOmTp6H3uRmqkDoPwN0GDjlQDXL9rL 1f5LvK8GzkTZ/0FtMwdh/vl7AgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUHd/QpIrZ UDsbUvZL7Tuw2EcirYMwHwYDVR0jBBgwFoAUSuvEOK546JixovhLo9P6ak/CnYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBODRCLzQ1ODY5NDJBODk1 ODExRjE5Rjg2OEM0NzY1MTFGOTcwL1N1dkVPSzU0NkppeG92aExvOVA2YWtfQ25Z SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3V2RU9LNTQ2Sml4b3ZoTG85UDZha19DbllJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTg0Qi80NTg2OTQyQTg5NTgxMUYxOUY4NjhDNDc2NTExRjk3MC8yOTBBN0JDQTk2 MUIxMUYxOUUxNjFDMUM1RjExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBACjgHMwDwQCAAIwCQMHACABDfbawDANBgkqhkiG9w0BAQsFAAOCAQEA 32CeNcApZYFDCLNqeeRzNHH++NzLjgt+WreonmUAqtI1Wxjr/78B0wA7hQF9pkWT X0lYAD99xWrwMyuRxxJxuGVvUHrPe/PzB7rZkYEFRH5vLeL2O+/h0oGow7PVeJMz JeEPwlWEsvUjuqrtDQW5a0L/9JNfegH8jzKY44gl9c1dZGXbjkovGkhH8AqbyEUO odm1pRSZXDjA8H5vWkhOdYT3eZjcU/RedLs7ED+GKgIofxYhYsJzmYjsMxQXpKr+ eKxdrjTleWApRJTKZ3a4ESqLm3IZNTvNsrnopHX085nJJfG6CpTSRNaqgcTm8Y4m mBIsZtek2Yzti7/JEo2saA== -----END CERTIFICATE-----Generated at Thu Aug 13 07:56:31 2026 by rpki-client