$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa File: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (raw, json) Hash identifier: 1pX+suWdvaKMGIWE2+J1hAusGSSmWNeIkojCLUq1N5M= Subject key identifier: BE:88:07:DD:95:65:18:2B:87:B4:7F:93:A2:1F:1B:27:0B:F2:07:24 Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0CAE Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa Signing time: Tue 14 Jul 2026 19:19:48 +0000 ROA not before: Tue 14 Jul 2026 19:19:48 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 135600 IP address blocks: 66.228.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 18:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: Jul 14 19:19:48 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a568bd4-7918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:01:0d:3e:43:6d:16:e3:c0:b2:c4:4f:33: 1a:d8:89:4c:31:93:9a:6f:19:82:53:0e:fd:d2:32: 0a:ac:87:d9:6f:db:9d:a4:2a:99:c6:53:1f:d9:c2: b1:b4:11:9a:46:9b:2a:93:04:19:7c:ae:42:73:ad: 65:50:eb:4d:51:e4:7c:d0:9f:62:47:d0:d3:8b:7f: c8:2c:8a:7a:6f:b3:ad:23:83:b2:b7:86:65:58:45: f2:9b:46:01:ee:f1:6b:52:13:54:81:a0:c3:e5:43: 56:6f:16:b9:e1:b8:86:fe:b6:ee:ec:9a:5a:a3:40: 53:4f:16:c9:02:93:ca:7f:f2:6a:81:a4:e2:6c:2d: 0a:4a:33:c9:f9:e8:1d:8a:87:8c:3a:58:27:50:ff: 5b:3e:c8:50:f3:4a:db:74:44:22:cd:39:8b:69:85: 26:05:8b:83:1b:a8:4e:3f:90:2a:64:32:09:82:b3: c5:a7:ee:94:0e:06:97:7a:e1:a2:09:27:69:f6:b2: dd:8c:9b:f1:11:9d:99:e9:04:91:d2:d0:f2:1d:2c: a7:c2:ca:a9:dc:60:25:c1:de:ca:ab:6b:08:b0:67: 8d:03:d0:49:cc:0d:06:c3:30:b9:ba:f7:d6:37:fd: 44:e7:9d:5e:91:02:9f:3c:36:71:78:3f:99:e5:41: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:07:DD:95:65:18:2B:87:B4:7F:93:A2:1F:1B:27:0B:F2:07:24 X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 66.228.0.0/20 Signature Algorithm: sha256WithRSAEncryption ac:32:02:b2:a8:df:57:3f:f9:b8:c4:c9:64:be:dc:33:66:fd: e1:b8:71:4d:fc:f0:53:5a:19:ff:66:ba:22:f3:ea:76:71:a3: 2f:71:e1:6f:f8:08:4c:a0:c1:7e:b3:04:66:61:2c:ab:f3:de: 96:d5:11:d2:b3:09:4c:1f:e0:9e:52:2c:53:09:a6:58:ac:a6: 5f:98:ba:a2:54:e8:0c:c0:f6:2b:66:31:9a:11:61:6f:af:e1: 2c:39:4f:64:a7:e4:95:90:9a:dd:d5:85:b9:3e:9e:25:90:8d: 1f:98:52:c6:ce:8a:e9:6c:14:8e:df:09:50:75:88:4c:fc:4f: bf:a9:97:68:d8:e7:29:45:fa:f3:7a:20:24:c2:63:20:b1:c8: a3:a4:86:e4:91:fa:c5:ca:9f:87:45:1a:66:db:78:95:c2:c2: 23:76:73:39:33:ea:6e:b6:04:55:29:e3:5a:2f:7c:eb:de:53: 82:e3:d1:6d:c7:63:c8:0b:1b:21:58:36:ad:4a:19:92:71:f9: fd:61:01:8c:eb:33:6a:6a:d7:63:81:6c:02:f4:eb:30:75:6f: 83:51:3e:d3:8e:47:2f:82:71:10:76:0c:96:d3:9b:a4:05:53: 27:30:a3:32:ad:9d:86:91:b3:58:c6:bc:ab:7d:32:2b:30:18: 1a:97:70:ad -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjYwNzE0MTkxOTQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2OGJkNC03OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8YBDT5DbRbjwLLETzMa2IlMMZOabxmCUw790jIKrIfZb9udpCqZxlMf2cKx tBGaRpsqkwQZfK5Cc61lUOtNUeR80J9iR9DTi3/ILIp6b7OtI4Oyt4ZlWEXym0YB 7vFrUhNUgaDD5UNWbxa54biG/rbu7Jpao0BTTxbJApPKf/JqgaTibC0KSjPJ+egd ioeMOlgnUP9bPshQ80rbdEQizTmLaYUmBYuDG6hOP5AqZDIJgrPFp+6UDgaXeuGi CSdp9rLdjJvxEZ2Z6QSR0tDyHSynwsqp3GAlwd7Kq2sIsGeNA9BJzA0GwzC5uvfW N/1E551ekQKfPDZxeD+Z5UHnKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL6IB92V ZRgrh7R/k6IfGycL8gckMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDAwNDlGODYxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvNzVFNkRENDgx QkRBMTFFQUIzRjQ1RDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEQuQAMA0GCSqGSIb3DQEBCwUAA4IBAQCsMgKyqN9XP/m4xMlkvtwz Zv3huHFN/PBTWhn/Zroi8+p2caMvceFv+AhMoMF+swRmYSyr896W1RHSswlMH+Ce UixTCaZYrKZfmLqiVOgMwPYrZjGaEWFvr+EsOU9kp+SVkJrd1YW5Pp4lkI0fmFLG zorpbBSO3wlQdYhM/E+/qZdo2OcpRfrzeiAkwmMgscijpIbkkfrFyp+HRRpm23iV wsIjdnM5M+putgRVKeNaL3zr3lOC49Ftx2PICxshWDatShmScfn9YQGM6zNqatdj gWwC9OswdW+DUT7TjkcvgnEQdgyW05ukBVMnMKMyrZ2GkbNYxryrfTIrMBgal3Ct -----END CERTIFICATE-----Generated at Sat Jul 18 01:49:18 2026 by rpki-client