$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/CB067F4EBB8411F19370E3EB4B11F970.roa File: CB067F4EBB8411F19370E3EB4B11F970.roa (raw, json) Hash identifier: Aet5dTry2QZk8qBA+Bc9eyKw3FetAawDJ3K6pL2/tUo= Subject key identifier: BD:88:0B:4A:AD:D6:5D:33:4D:E6:28:D2:22:1D:23:DB:99:9B:0E:2C Certificate issuer: /CN=A911A84B/serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82 Certificate serial: 2E Authority key identifier: 4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/CB067F4EBB8411F19370E3EB4B11F970.roa Signing time: Mon 28 Sep 2026 21:37:25 +0000 ROA not before: Mon 28 Sep 2026 21:37:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131167 IP address blocks: 163.128.115.0/24 maxlen: 24 2001:df6:dac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 09:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A84B, serialNumber=4AEBC438AE78E898B1A2F84BA3D3FA6A4FC29D82 Validity Not Before: Sep 28 21:37:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6abade14-60ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:b7:c8:1e:f7:55:5d:ed:24:48:5e:42:7c: c6:b5:b2:ee:3d:15:c2:84:80:fa:45:3f:d0:e1:2a: cb:8d:7c:c1:39:a7:8a:7e:f4:39:90:3e:d0:0b:cc: ad:be:eb:90:5a:52:9c:ba:38:6f:8e:59:d2:96:11: e6:a6:40:a7:e4:09:12:5c:30:62:8a:50:9d:07:6f: ec:81:2a:c8:58:04:6e:49:8d:ff:f2:c0:e2:f1:6b: d5:30:b5:95:9d:1f:c8:f4:e2:12:16:0b:93:ce:53: fd:70:6f:89:7c:95:2c:26:54:b3:87:45:33:26:03: 88:8d:37:0a:b2:39:2c:4a:58:48:46:7b:0b:34:d0: 8a:6b:55:f1:35:10:39:0a:8e:2f:d0:13:5a:e4:e3: 77:37:14:a4:30:07:59:ae:43:d7:ca:86:f9:3e:f1: a3:db:e7:c5:db:50:7b:a3:30:99:80:ff:db:18:15: ce:2b:c8:5c:4f:78:46:a4:2e:fb:33:0e:cf:49:a5: 71:24:98:31:5d:04:99:48:8d:7d:47:a8:2c:d7:cf: a2:ac:f1:83:cc:f0:df:42:b7:bf:81:86:da:5f:14: a4:a8:e6:ab:4e:c0:3a:32:ae:3e:3b:22:2c:18:f8: 4f:88:01:0c:65:05:46:87:f3:d0:89:2b:20:48:67: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:88:0B:4A:AD:D6:5D:33:4D:E6:28:D2:22:1D:23:DB:99:9B:0E:2C X509v3 Authority Key Identifier: keyid:4A:EB:C4:38:AE:78:E8:98:B1:A2:F8:4B:A3:D3:FA:6A:4F:C2:9D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/SuvEOK546JixovhLo9P6ak_CnYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SuvEOK546JixovhLo9P6ak_CnYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A84B/4586942A895811F19F868C476511F970/CB067F4EBB8411F19370E3EB4B11F970.roa sbgp-ipAddrBlock: critical IPv4: 163.128.115.0/24 IPv6: 2001:df6:dac0::/48 Signature Algorithm: sha256WithRSAEncryption ce:92:4a:3b:36:0a:fa:d0:8d:3e:e0:af:98:ef:f8:37:a3:b9: 37:c4:f3:f1:75:76:ca:67:8b:a8:e7:c5:68:92:70:ab:a8:80: f1:d2:c1:2e:02:ae:4e:ff:6d:9c:e6:20:85:cc:e2:17:e4:b2: f5:f6:57:56:d7:c3:1d:5b:d5:96:a8:6c:2f:e4:05:63:29:7b: ec:01:61:6c:4b:f3:9c:b6:a6:68:0c:63:1a:ca:d5:a9:26:eb: 35:90:91:3d:27:58:8e:ec:ba:0c:7c:e6:93:07:3e:9c:fc:c0: 1f:55:72:28:2f:00:93:5f:ad:ea:d6:d0:b3:37:11:21:3b:54: 48:29:0d:fc:ae:89:02:75:bf:a3:67:82:3e:d6:88:1e:c4:d8: 0e:ba:c1:16:21:ea:3a:e5:7a:ae:ac:8c:a9:ed:66:85:d1:d9: 34:47:aa:87:f4:87:3c:d4:8d:15:45:68:6f:d4:43:6d:1d:2d: ca:80:4f:2d:3b:15:e0:f5:a3:1a:b9:32:5d:fe:2e:ca:87:f9: 66:cb:36:e6:ad:39:e1:b5:c6:61:3f:14:7d:4e:70:5b:ca:5a: 90:06:e1:26:62:93:9c:3e:d5:a3:f9:9e:4d:4a:c9:70:59:64: 23:b5:49:2f:cc:bb:be:93:94:d1:7a:47:85:9f:86:32:3e:6d: 97:61:07:07 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTg0QjExMC8GA1UEBRMoNEFFQkM0MzhBRTc4RTg5OEIxQTJGODRCQTNEM0ZBNkE0 RkMyOUQ4MjAeFw0yNjA5MjgyMTM3MjVaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmFkZTE0LTYwZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaELfIHvdVXe0kSF5CfMa1su49FcKEgPpFP9DhKsuNfME5p4p+9DmQPtALzK2+ 65BaUpy6OG+OWdKWEeamQKfkCRJcMGKKUJ0Hb+yBKshYBG5Jjf/ywOLxa9UwtZWd H8j04hIWC5POU/1wb4l8lSwmVLOHRTMmA4iNNwqyOSxKWEhGews00IprVfE1EDkK ji/QE1rk43c3FKQwB1muQ9fKhvk+8aPb58XbUHujMJmA/9sYFc4ryFxPeEakLvsz Ds9JpXEkmDFdBJlIjX1HqCzXz6Ks8YPM8N9Ct7+BhtpfFKSo5qtOwDoyrj47IiwY +E+IAQxlBUaH89CJKyBIZ68bAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUvYgLSq3W XTNN5ijSIh0j25mbDiwwHwYDVR0jBBgwFoAUSuvEOK546JixovhLo9P6ak/CnYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBODRCLzQ1ODY5NDJBODk1 ODExRjE5Rjg2OEM0NzY1MTFGOTcwL1N1dkVPSzU0NkppeG92aExvOVA2YWtfQ25Z SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3V2RU9LNTQ2Sml4b3ZoTG85UDZha19DbllJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTg0Qi80NTg2OTQyQTg5NTgxMUYxOUY4NjhDNDc2NTExRjk3MC9DQjA2N0Y0RUJC ODQxMUYxOTM3MEUzRUI0QjExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBACjgHMwDwQCAAIwCQMHACABDfbawDANBgkqhkiG9w0BAQsFAAOCAQEA zpJKOzYK+tCNPuCvmO/4N6O5N8Tz8XV2ymeLqOfFaJJwq6iA8dLBLgKuTv9tnOYg hcziF+Sy9fZXVtfDHVvVlqhsL+QFYyl77AFhbEvznLamaAxjGsrVqSbrNZCRPSdY juy6DHzmkwc+nPzAH1VyKC8Ak1+t6tbQszcRITtUSCkN/K6JAnW/o2eCPtaIHsTY DrrBFiHqOuV6rqyMqe1mhdHZNEeqh/SHPNSNFUVob9RDbR0tyoBPLTsV4PWjGrky Xf4uyof5Zss25q054bXGYT8UfU5wW8pakAbhJmKTnD7Vo/meTUrJcFlkI7VJL8y7 vpOU0XpHhZ+GMj5tl2EHBw== -----END CERTIFICATE-----Generated at Sun Oct 4 17:23:47 2026 by rpki-client