$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa File: AF4301D4CF8511EF94856A41C4F9AE02.roa (raw, json) Hash identifier: S+f3CRHC1LZJY/ErBOmtDrn0o179tha8H47Tq5A20S4= Subject key identifier: 60:7F:C4:96:FC:1A:94:3E:B4:5D:4E:21:C9:B7:D4:0C:C7:0A:F9:A2 Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 015F Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa Signing time: Tue 20 Oct 2026 22:42:42 +0000 ROA not before: Tue 20 Oct 2026 22:42:42 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 139628 IP address blocks: 146.88.200.0/23 maxlen: 24 146.88.204.0/23 maxlen: 24 167.179.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 22:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Oct 20 22:42:42 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ad7ee62-0220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:ca:c1:99:47:49:a4:57:18:cf:da:87:b1: 57:07:b2:18:9c:aa:9d:50:a1:45:8b:9c:43:ff:be: 0d:bd:ef:82:5a:5c:d1:d8:07:3e:60:39:07:d8:ef: 9b:08:ef:d1:69:cc:26:0d:d4:25:5d:4a:ef:0a:28: 96:e6:dc:29:2a:6a:35:91:75:1a:7f:3a:f2:30:ba: 0b:bf:a2:f1:b6:dc:9d:64:22:59:9b:15:38:f4:ef: 93:18:ab:51:20:1f:5b:8e:c9:85:4b:5e:12:d5:81: 76:b3:4a:b7:fc:a3:a1:d5:55:66:e4:0c:89:00:ee: a4:be:64:29:59:5b:9d:0f:9f:13:4c:12:85:cb:2d: d5:95:d8:26:fa:dd:3c:37:42:d0:24:97:da:c6:db: 5b:5a:22:24:39:b8:44:24:59:00:36:04:0d:29:a6: bb:be:5d:6b:9b:5b:5c:29:b0:94:65:12:ce:2a:8f: 40:5c:77:71:5a:3d:79:3e:04:8c:e1:1e:ef:e7:76: 87:ca:a0:d6:04:cb:91:11:fd:5b:ff:58:37:e0:62: db:a2:d5:7c:6a:a6:b0:51:55:53:15:7d:58:bc:79: 26:13:9a:ea:65:56:2f:ab:7d:0a:32:c0:94:1e:95: 53:99:5d:c4:03:14:4c:8c:13:87:48:9f:0b:44:d0: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:C4:96:FC:1A:94:3E:B4:5D:4E:21:C9:B7:D4:0C:C7:0A:F9:A2 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 146.88.200.0/23 146.88.204.0/23 167.179.20.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:fc:b8:35:38:ac:fc:0a:6d:a6:b0:ef:dd:9d:12:ed:5f:cb: 2f:8b:09:5e:a2:d1:8d:c5:6c:a2:79:1a:0d:15:79:2d:6d:70: 97:66:8a:83:e8:66:d6:a5:05:d2:fb:b6:23:db:4a:c8:42:cc: ec:9a:c2:af:82:2f:dc:73:f8:d4:88:68:0e:71:b7:42:5f:41: 68:cc:d0:22:5a:71:67:da:10:96:52:1c:73:f0:bf:bd:f1:e6: 45:e3:08:76:c7:49:a5:d4:60:ee:ca:ce:41:48:f6:f5:6d:16: 1c:89:29:d7:ae:2b:68:b0:89:db:90:07:5e:a0:53:05:04:a1: 7e:87:b6:17:1f:1b:f1:30:8c:aa:5f:e9:ed:67:bb:7c:81:4c: 3d:12:ec:19:e1:1e:7b:95:86:14:a7:52:b4:29:69:2f:3f:0b: f2:b7:da:92:a6:6c:b4:a7:13:7f:1b:13:cf:01:0d:ce:50:f6: 48:a2:b7:8c:c9:0b:04:66:f1:fc:a8:b1:5b:c1:5f:77:21:33: a7:5a:4c:9c:c7:dd:2c:98:e9:fa:56:59:65:ed:3f:bd:6d:72: 6f:4d:09:16:ee:11:2a:91:e2:ba:a1:c5:49:80:16:17:3f:20: f3:47:f6:80:28:37:42:5d:5e:2b:3f:5e:79:7f:c4:f6:2f:bb: 6f:01:72:9a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBODIxMTAvBgNVBAUTKDY4NDEzRDQxRjYwMDVFMDMxNkUwRTI1NzZGMjI2QzIx ODhBQTE1NkYwHhcNMjYxMDIwMjI0MjQyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ3ZWU2Mi0wMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8HKwZlHSaRXGM/ah7FXB7IYnKqdUKFFi5xD/74Nve+CWlzR2Ac+YDkH2O+b CO/RacwmDdQlXUrvCiiW5twpKmo1kXUafzryMLoLv6LxttydZCJZmxU49O+TGKtR IB9bjsmFS14S1YF2s0q3/KOh1VVm5AyJAO6kvmQpWVudD58TTBKFyy3Vldgm+t08 N0LQJJfaxttbWiIkObhEJFkANgQNKaa7vl1rm1tcKbCUZRLOKo9AXHdxWj15PgSM 4R7v53aHyqDWBMuREf1b/1g34GLbotV8aqawUVVTFX1YvHkmE5rqZVYvq30KMsCU HpVTmV3EAxRMjBOHSJ8LRNDBPwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGB/xJb8 GpQ+tF1OIcm31AzHCvmiMB8GA1UdIwQYMBaAFGhBPUH2AF4DFuDiV28ibCGIqhVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi9GNjk5RTM1NENG MTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9hRUU5UWZZQVhnTVc0T0pYYnlKc0lZaXFG VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBODIvRjY5OUUzNTRDRjEyMTFFRjhGMUQyMDVCQzRGOUFFMDIvQUY0MzAxRDRD Rjg1MTFFRjk0ODU2QTQxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBkljIAwQBkljMAwQBp7MUMA0GCSqGSIb3DQEBCwUAA4IBAQB//Lg1 OKz8Cm2msO/dnRLtX8sviwleotGNxWyieRoNFXktbXCXZoqD6GbWpQXS+7Yj20rI QszsmsKvgi/cc/jUiGgOcbdCX0FozNAiWnFn2hCWUhxz8L+98eZF4wh2x0ml1GDu ys5BSPb1bRYciSnXritosInbkAdeoFMFBKF+h7YXHxvxMIyqX+ntZ7t8gUw9EuwZ 4R57lYYUp1K0KWkvPwvyt9qSpmy0pxN/GxPPAQ3OUPZIoreMyQsEZvH8qLFbwV93 ITOnWkycx90smOn6Vlll7T+9bXJvTQkW7hEqkeK6ocVJgBYXPyDzR/aAKDdCXV4r P155f8T2L7tvAXKa -----END CERTIFICATE-----Generated at Wed Oct 21 20:00:21 2026 by rpki-client